Privacy Policy

Last updated 12 August 2026.

Who is responsible for your information

Alex Rabia Coaching is the data controller. You can reach us at [email protected] or on 07523 825195, and by post on request.

What we collect, and why

When you apply. Your name, email, phone, where you are based, your age, and your answers about training, food, sleep, stress and time — including anything you tell us about pain or injuries. We use this to decide whether coaching is right for you, to write your Strength & Lifestyle Scorecard, and to contact you about it. Your phone number is for the consultation, never for marketing.

If you become a client. A health questionnaire covering conditions, medication and injuries; your assessment measurements; your training and nutrition targets; and the notes we keep about your coaching. This is what makes the programme yours rather than generic.

In the client portal. Anything you record yourself — weights, personal bests, journal entries, check-ins.

Health information is treated differently

Information about your health — conditions, medication, injuries, pain — is special category data under UK GDPR, and needs a higher standard of protection. We rely on your explicit consent to hold and use it, which is why the health questionnaire asks you to tick a separate box saying so. You can withdraw that consent at any time by emailing us; if you do, we can no longer safely programme for you, and we will tell you so plainly rather than carry on regardless.

Coaching is not medical treatment and Alex is not a clinician. Where something needs a doctor or a physiotherapist, we will say so and stop.

Our lawful bases

Performance of a contract, for delivering the coaching you have paid for. Legitimate interests, for running and improving the practice — balanced against your rights, and never for anything you would find surprising. Consent, for marketing emails and for health information. Legal obligation, for keeping financial records.

Who else handles your information

We keep the list short on purpose. Each of these is a processor acting on our instructions, under a contract, and none of them may use your information for their own purposes.

  • Cloudflare — hosts the website and stores the client records behind an authenticated wall.
  • Resend — delivers the emails the website sends.
  • Google — the hello@ inbox and calendar.
  • Calendly — consultation bookings.
  • Trainerize — your programme and weekly check-ins.
  • Anthropic — the AI assistant that drafts your Scorecard and your proposal. See below.
  • Stripe — card payments, once live. We never see or store your card details.

Some of these are based outside the UK. Where information leaves the UK it is protected by the UK Addendum to the EU Standard Contractual Clauses, or by an adequacy decision.

How we use AI, and the limits on it

We use Anthropic’s Claude to help draft two things: your Scorecard, and your coaching proposal. It reads what you told us so that the reply is genuinely about you rather than a template.

The limits, which are absolute:

  • Nothing is sent automatically. Every draft is read by a person and sent by a person. No email reaches you without a human having read it first.
  • No decisions are made by AI. Whether we take you on, what we recommend and what your programme contains are human decisions. You are not subject to automated decision-making.
  • We minimise what is sent. Your first name only — never your surname, email address, phone number or anything else that identifies you.
  • Your information is not used to train AI models. Anthropic’s commercial terms, which govern our use, exclude this.

If you would rather we did not use AI on your information at all, say so and we will draft by hand. It takes us longer; it costs you nothing and changes nothing about your coaching.

How long we keep it

Applications that do not become clients: 12 months, then deleted. Client records: for the coaching relationship and six years afterwards, which is how long we may need them for tax and insurance. Health information: deleted when you stop training with us, unless you ask us to keep it for a return. Financial records: six years, as HMRC requires.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to us using it, ask for it in a portable format, and withdraw consent at any time. Email [email protected] and we will respond within one month.

If you are not happy with how we have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first, but it is your right either way.

Photographs and results

Client photographs, results and testimonials are only ever published with written, signed consent, given separately from this policy, and you can withdraw it.

Security, and what we would do if it went wrong

The client records sit behind an authenticated wall that only Alex and Jorge can pass. Your portal link is private to you — treat it like a password. If we ever had a breach that put you at risk, we would tell you and the ICO, quickly and plainly.

Marketing

We only email you about coaching if you asked us to, and every one of those has a one-click unsubscribe. Applying for coaching is not a subscription to anything.