Privacy Policy

How Camino Coaching Ltd collects, uses, and protects your personal information under UK data protection law.

1. Who We Are (Data Controller)

This privacy notice explains how we collect and process your personal data when you use our site caminocoaching.co.uk. Our services are not intended for children under 13. If you are under 18, a parent or guardian provides consent on your behalf.

The data controller responsible for your personal data is Camino Coaching Ltd ("we", "us", "our").

• Company Name: Camino Coaching Ltd
• Registered in: England and Wales
• Company Number: 12718594
• Registered Office: 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ
• Privacy & Data Enquiries: team@caminocoaching.co.uk or via our Contact page.

2. What Personal Data We Collect

Personal data means any information capable of identifying an individual. It does not include anonymised data. We only collect personal data that you choose to give us or that is strictly necessary to operate and protect the site:

• Race Weekend Review & Assessment Requests (/request, /request-driver): Your first name, email address, selected discipline/audience (Rider, Driver, Funded, or Executive), and optional campaign referral parameters (UTM tags).
• Contact Form Enquiries (/contact): Your name, email address, discipline category (Rider, Driver or karter, or Other), message content, page source, and browser user-agent string.
• Academy Sign-In (/login): Your email address when requesting a magic sign-in link to access existing training.
• Purchases: When you buy a programme, the data needed to supply it and keep a record of the transaction, such as your name, email address, purchase details, and payment details. Card payments are taken by Stripe on its own secure checkout; we do not receive or store your full card number.
• Client Onboarding Forms: When you join a programme, our onboarding form asks for your name, email address, phone number, postal address (so we can send you course materials), in some cases your date of birth, and your agreement to our Terms and Conditions.
• Communications: Any message you send us by email, form, or social media, which we keep to reply to you, for our records, and to establish or defend legal claims.
• Spam & Bot Verification (Cloudflare Turnstile): When you use our contact form, Cloudflare Turnstile checks technical request signals to verify that the submission comes from a real person rather than an automated bot.
• Website Analytics (Consent-Gated Only): If (and only if) you explicitly opt in through our analytics consent banner, we use Google Analytics 4 (GA4) to measure page views (page_view) and aggregate form completion counts (generate_lead with discipline category, and contact_submit). We never send your name, email address, or message text to analytics.

Sensitive data: We do not collect any sensitive data about you through this website. Sensitive data includes details about your race, ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, and genetic and biometric data. We do not collect any information about criminal convictions and offences.

3. Purpose and Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following lawful bases:

• Delivering your Review & Free Training: When you request a Race Weekend Review, Podium Contenders Blueprint, or Executive Assessment, we process your name and email to send your private diagnostic link and associated training materials (Lawful basis: steps taken at your request prior to entering into a contract, consent, and legitimate interests). You can unsubscribe from training emails at any time using the link in every email.
• Responding to Contact Enquiries: When you send a message via /contact, we use your details to reply to your question (Lawful basis: legitimate interests in responding to enquiries, or pre-contractual steps). Contact form messages are not added to marketing sequences.
• Account Access: Processing your email on /login to send your training access link (Lawful basis: performance of a contract).
• Supplying What You Buy: Processing purchase and onboarding details to deliver your programme and keep records of transactions (Lawful basis: performance of a contract between you and us, and our legal obligations for tax and accounting records).
• Security & Abuse Prevention: Using Cloudflare Turnstile and server-side validation to protect our forms from spam and automated attacks (Lawful basis: legitimate interests in securing our services).
• Analytics & Site Improvement: Loading GA4 cookies/scripts only after you click "Accept" on our consent banner (Lawful basis: consent under PECR and UK GDPR Article 6(1)(a)).

Marketing communications

Our lawful ground for processing your personal data for marketing communications is either your consent or our legitimate interests. Under the Privacy and Electronic Communications Regulations, we may send you marketing communications if you made a purchase or asked for information about our goods or services or agreed to receive such communications.

Before sharing your personal data with any third party for their marketing purposes, we will get your express consent. You can opt out of marketing messages at any time by following the opt-out links on any marketing message or by emailing us at team@caminocoaching.co.uk.

4. Processors and Service Providers

We share personal data only with trusted service providers (data processors) who act on our instructions under data protection agreements. We never sell your personal data.

• Cloudflare, Inc.: Edge website hosting (Cloudflare Pages) and Cloudflare Turnstile spam protection on the contact form.
• Resend: Email delivery. Resend routes /contact enquiries to our team inbox (team@caminocoaching.co.uk) and sends our review and training emails.
• Supabase: Database hosting. Supabase stores /contact enquiry records securely with Row Level Security enabled, and holds our customer relationship (CRM) records.
• Stripe: Payment processing for programme purchases.
• Google (Google Analytics 4): Anonymous/pseudonymous website measurement, loaded strictly after opt-in consent.

We may also share your personal data with:

• Service providers who provide IT and system administration services.
• Professional advisers including lawyers, bankers, auditors, and insurers.
• Government bodies that require us to report processing activities.
• Third parties to whom we sell, transfer, or merge parts of our business or assets.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

Where any processor handles data outside the UK or European Economic Area, we rely on the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy decision.

5. Data Security

We have implemented security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation.

6. Data Retention

We will retain your personal data only as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

• Contact Enquiries: Retained in our inbox and database only as long as necessary to handle your enquiry and any follow-up, unless you request earlier deletion.
• Review & Training Requests: Retained while you engage with your diagnostic results and training emails, or until you unsubscribe or request erasure. If you unsubscribe, we keep a minimal record of your email address marked do-not-contact, so that we do not email you again.
• Customer and Client Coaching Records: Retained for the duration of our coaching relationship. For tax purposes, we keep basic customer information for six years after you stop being a customer.

7. Cookies, Local Storage, and Analytics Consent

By default, this website sets no analytics or advertising cookies. Cookies are small files a website can place on your device. When you first visit, a banner asks whether you accept optional analytics. Analytics only runs if you accept.

Cloudflare Turnstile runs on the contact form only, to check that a message comes from a real person. It is needed to protect the form.

Google Analytics 4 loads only after you click "Accept". If you accept, Google sets its own analytics cookies on this site. We will list each of them in the table above once analytics is switched on.

You can change or withdraw your analytics consent at any time using the buttons below:

You can set your browser to refuse all or some cookies, or alert you when websites set or access cookies. Disabling or refusing cookies may render some website parts inaccessible or non-functional.

8. Your Rights Under UK GDPR

Under UK data protection law, you have the right to:

• Request access to a copy of the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request erasure ("right to be forgotten") of your personal data where there is no lawful reason for us to keep it.
• Object to processing based on legitimate interests, or request restriction of processing.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent (such as marketing emails or analytics).

To exercise any of these rights, email us at team@caminocoaching.co.uk or use our Contact form.

It is important that the personal data we hold about you is accurate and up to date. Please let us know if your information changes by emailing us at team@caminocoaching.co.uk.

9. How to Complain (ICO)

If you have any concerns about how we handle your personal data, please contact us first at team@caminocoaching.co.uk so we can resolve it promptly.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk/make-a-complaint/
• Telephone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. Contact Details

• Full name of legal entity: Camino Coaching Ltd
• Email address: team@caminocoaching.co.uk
• Postal address: 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ

See also our Terms and Conditions.