Your privacy matters.

1. Who we are

Ornata Coaching is an online cycling coaching business run by Callum Laborde as a sole trader. In this policy, “we”, “us” and “our” mean Callum Laborde trading as Ornata Coaching.

We are the controller of the personal information described in this policy, which means we decide how and why it is used. You can contact us about this policy or your personal information at callumlaborde@gmail.com.

2. Information we may collect

Depending on how you use our website and services, we may collect:

• Identity and contact details — such as your name, email address, phone number and date of birth.
• Cycling and coaching information — information you choose to give us about your riding, training history, goals, events, availability, fitness and performance data (for example, power, heart rate and training files shared through platforms such as TrainingPeaks), and feedback on your training.
• Health information — if you choose to tell us about injuries, medical conditions or other health matters relevant to your training (see section 4).
• Payment and subscription information — such as the plan you have chosen, your payment status and payment history, and the subscription or payment references provided to us by our payment provider.
• Website and contact form information — information you submit through our consultation or booking forms, and messages you send us by email, phone or text.
• Technical information — limited technical data, such as IP address and browser type, which may be recorded by our website hosting provider when you visit the site.

Bank details and payments

Direct Debit and other payments are set up and processed by our third-party payment provider, GoCardless. When you set up a Direct Debit, you enter your bank details on GoCardless’s secure payment pages. Ornata Coaching does not store your full bank account details. We receive information from GoCardless about your payments, such as whether a payment has been made, is pending or has failed. GoCardless processes your information in line with its own privacy notice, which is available on the GoCardless website.

3. How we use your information

We use your personal information to:

• Provide coaching services — including writing and adjusting training plans, analysing training data and giving feedback.
• Communicate with you — including coaching calls, messages and emails about your training and your account.
• Manage subscriptions and payments — including setting up your plan, tracking payments and dealing with payment issues or cancellations.
• Respond to enquiries — including requests for a free consultation or call.
• Improve the coaching service — for example, reviewing how plans and communication work for riders so we can improve them.
• Meet legal and accounting obligations — including keeping business and tax records and dealing with any legal claims.

4. Our lawful bases

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we must have a lawful basis for using your personal information. We rely on:

• Contract — where we need your information to provide the coaching you have signed up for, or to take steps at your request before you sign up (such as responding to a consultation request).
• Legal obligation — where we need to keep or use information to comply with the law, such as tax and accounting rules.
• Legitimate interests — where we use information to run and improve our business, respond to general enquiries and keep appropriate records, provided this does not override your rights and interests.
• Consent — where we have asked for your consent for a specific purpose. You can withdraw your consent at any time by contacting us.

Health information

Information about your health is “special category” data and is given extra protection by law. We only use health information that you choose to share with us, and only to tailor your coaching appropriately and safely. We rely on your explicit consent to use this information. You can withdraw your consent at any time, although this may limit our ability to tailor your coaching. We are not medical professionals and do not use this information to diagnose or treat any condition.

5. Who we share your information with

We do not sell your personal information. We only share it where needed, with:

• Payment providers — such as GoCardless, to set up and collect payments.
• Website hosting and form providers — our website is hosted by Netlify, which also processes the information you submit through our website forms.
• Training and communication platforms — such as TrainingPeaks (where used as part of your coaching), and the email, phone and messaging services we use to communicate with you.
• Professional advisers and authorities — such as an accountant, or HMRC and other authorities where we are required to by law.

Some of these providers may process information outside the UK. Where this happens, UK data protection law requires appropriate safeguards to be in place, and we choose providers who state that they meet these requirements.

6. How long we keep your information

We keep personal information only for as long as we need it for the purposes described in this policy. For example:

• Enquiry information from people who do not go on to become clients is deleted once it is no longer needed to respond to the enquiry.
• Coaching information is kept while you are a client and for a reasonable period afterwards, in case you return or have questions about your coaching.
• Payment and financial records are kept for as long as required by tax and accounting rules.

7. Keeping your information secure

We take reasonable steps to protect your personal information, such as using reputable service providers and limiting access to your information. No method of storing or sending information online is completely secure, but we work to keep your information protected.

8. Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information in certain circumstances;
• ask us to restrict how we use your information in certain circumstances;
• object to us using your information where we rely on legitimate interests;
• ask for information you have given us to be transferred to you or another organisation in certain circumstances; and
• withdraw your consent at any time, where we rely on consent.

Some of these rights are subject to conditions and exceptions. To make a request, email callumlaborde@gmail.com. We will normally respond within one month.

9. Cookies

Our website does not currently use advertising or analytics cookies. Our hosting provider may process limited technical information needed to deliver and secure the website. If we introduce non-essential cookies in future, we will update this policy and ask for your consent where required.

10. Complaints

If you have a concern about how we use your personal information, please contact us first at callumlaborde@gmail.com so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated.