Draft — not yet reviewed by a solicitor. Do not rely on this document as legal advice. It will be updated before this service goes live.
Privacy Policy
Last updated: 15 June 2026
1. Who we are
[Your name / company], trading as The Gymnastics Blueprint (“we”, “us”, “our”), is the data controller for personal data processed through this service. Contact details for data requests are set out in section 9.
2. What personal data we collect
We collect and store the following categories of personal data:
- Coach profiles: full name, email address, date of birth, gym affiliation, and role within the platform.
- Gymnast records: first name, last name, date of birth, discipline (WAG / MAG), competition level, skill progress and mastery status, session feedback notes, and coaching goals.
Gymnast records may relate to minors. Coaches are responsible for ensuring they have appropriate authority to enter and manage this data (see the Terms of Service).
3. Lawful basis for processing
We process coach profile data on the basis of contract — it is necessary to provide the service you have signed up for.
We process gymnast records on the basis of legitimate interests: the legitimate interest of a coach in managing the training, progress, and welfare of gymnasts under their supervision. Where gymnasts are minors, coaches are expected to act in accordance with British Gymnastics safeguarding requirements and to obtain any consents required under those rules.
4. How long we keep data
We retain personal data for as long as a coach account is active. Coaches may request deletion of individual gymnast records at any time using the in-app anonymisation feature (see section 6). Full account deletion requests should be directed to the contact address in section 9.
5. Who we share data with
We do not sell or share personal data with third parties for marketing purposes. Data is processed by the following sub-processors:
- Supabase Inc. — database and authentication infrastructure. Data is stored on Supabase-managed infrastructure.
- Vercel Inc. — application hosting. Requests may be routed through EU or US edge nodes depending on your location.
No third-party analytics or advertising trackers are currently installed on this service.
6. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you or a gymnast you manage. Use the in-app data export feature or contact us at the address below.
- Erasure — request deletion of gymnast records using the in-app anonymisation feature, or request full account deletion by contacting us.
- Rectification — correct inaccurate personal data by editing your profile or a gymnast record in the app.
- Restriction and objection — contact us if you wish to restrict or object to processing.
- Portability — use the in-app export feature to download gymnast data in JSON format.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
7. Cookies and tracking
This service uses only essential cookies required for authentication. No analytics, advertising, or tracking cookies are set. See our Cookie Policy for details.
8. Changes to this policy
We will update this policy when our data practices change — for example, when analytics are added (planned for a future release). The “Last updated” date at the top of the page will reflect any changes.
9. Contact
For data requests, corrections, or complaints, please contact us at: [data-contact@example.com]
(Placeholder — replace with the registered controller’s contact details before going live.)