Privacy policy

Applies to the Team Stacey HQ app and teamstacey.co.uk · Last updated 24 October 2026

Who we are

TEAM STACEY LTD ("Team Stacey", "we", "us"), company number 14894980, provides online strength and strongman coaching, mainly through the Team Stacey HQ app. We are the data controller for the personal information described here. Contact: ben@teamstacey.co.uk.

1. What we collect

When you sign up:

• Your name, email address, phone number, date of birth and where you live (town/county).
• Your training history, current lifts and personal bests, goals, competitions you're entering and your weight class.
• Payment details. Direct Debit payments are handled by GoCardless, and we never see or store your full bank details.

During coaching:

• Weekly check-ins: body weight, sleep, energy, training feedback, diet adherence and notes to your coach.
• Training logs and personal bests you record in the app.
• Progress photos and lift videos you choose to send.
• Video reviews your coach records for you.

Sensitive (special category) data: injuries, medical conditions, medication or anything else about your health that affects how we coach you. We only collect this with your explicit consent, and only use it to keep your training safe.

Technical data: a device token so we can send you notifications, and basic diagnostic data needed to keep the app working. We don't use advertising trackers.

2. Why we collect it (our lawful bases)

• To deliver your coaching (contract): writing your training, diet and supplement plans, reviewing check-ins, sending feedback and running your account.
• To meet legal and insurance obligations (legal obligation): keeping financial records for tax, and coaching records in case of an insurance claim.
• To run and improve our business (legitimate interests): service messages, app reminders, keeping the app secure and improving our coaching.
• Only with your explicit consent:
  • Health information.
  • Marketing emails or messages.
  • Using your photos, videos, results or words publicly, for example as a testimonial or on our social media.
  • Recording video calls or sessions.
  You can withdraw consent at any time, and it won't affect your coaching.

3. Where your data is stored

• Team Stacey HQ app: your plans, check-ins, logs, photos and messages are stored on Supabase in its London (UK) data centre.
• Video reviews: recorded and shared using Loom.
• Registration forms: collected through Jotform.
• Email and documents: Google Workspace.
• Notifications: sent through Apple and Google push notification services.
• Messaging: we also use WhatsApp alongside the app for day-to-day messages. WhatsApp chats are end-to-end encrypted, so only you and your coach can read them, and not even WhatsApp can.
• Payments: Direct Debits are collected by GoCardless, which is authorised and regulated by the Financial Conduct Authority.

All of these use encryption in transit and at rest, and access is protected by passwords or secure sign-in. Some of these providers may process data outside the UK. When they do, it is protected by UK-approved safeguards such as adequacy regulations or the UK International Data Transfer Agreement.

4. Who we share it with

We never sell your data. Inside Team Stacey, only you and your coach can see your information, and other athletes can never see your details. We share data only:

• With the vetted service providers listed above, who may only use it to provide their service to us.
• When the law requires it, for example with HMRC or in response to a court order.
• In an emergency, where needed to protect your health or safety.

5. How long we keep it

• Coaching records (plans, check-ins, training logs and health notes): 6 years after your coaching ends, for insurance purposes, then deleted.
• Financial records (invoices and payments): 6 years from the end of the financial year they relate to, as tax law requires.
• Progress photos and videos: deleted 12 months after your coaching ends, or sooner if you ask.
• App accounts: closed after 12 months of inactivity once coaching has ended. The records listed above are kept only for the periods stated.
• Marketing list: you're removed as soon as you unsubscribe, and we remove inactive contacts after 2 years.

6. Your rights

Under UK data protection law (UK GDPR) you have the right to:

• Access: get a copy of the data we hold about you.
• Correct: have anything wrong or incomplete fixed.
• Export: receive your data in a common format to take elsewhere.
• Delete: ask us to erase your data (the "right to be forgotten"). You can delete your account from inside the app at any time.
• Restrict or object: ask us to limit or stop using your data.
• Withdraw consent: at any time, for anything that relies on consent.

Email ben@teamstacey.co.uk to use any of these rights. We'll respond within one month. Some data may need to be kept for the legal reasons in section 5, and if so we'll tell you. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Under 18s

Athletes under 18 can only be coached with a parent or guardian's consent, and the parent or guardian can use the rights above on their behalf.

Changes to this policy

If we change this policy, we'll update the date at the top and tell you in the app if the change is significant.