climbingcoach.app and the ClimbingCoach mobile app (each of and together the “Products”) are owned and operated by Simon Moss (“we”, “us”, “our“).
1. WHAT IS PERSONALLY IDENTIFIABLE INFORMATION (PII) / PERSONAL DATA?
Personal data or PII means any information relating to a person who can be identified either directly or indirectly by that information; it may include name, address, email address, phone number, credit / debit card number, IP address, location data, purchase history (“Personal Data”).
2. INFORMATION WE MAY COLLECT FROM YOU
2.1. We may collect and process the following data about you:
- Information you provide to us – This includes:
– Your age, weight, gender
– Your climbing grades (bouldering and sport climbing)
– The equipment you have available, and it’s location (home, gym, or both)
– Your preference for training days of the week
– Your preference for length of training session
Information we collect about you – When you visit the Products we may automatically collect information about
- Your computer or device
- The training plan created for you
- Your personal bests from workouts
- This information may be combined with other information you provide to us, as described above.
2.2. Please note your workout personal bests form the basis of the ‘Community Comparison’ feature – these data will be shared anonymously with other users of the Products for the sole purpose of supporting this feature. You may choose to opt out of this feature entirely.
2.3. Please note that as a free user of the Products you will have limited accessibility to the the features within it until a subscription is purchased.
3. OUR NEWSLETTER
3.1 You will not receive any newsletter
4. MEDICAL INFORMATION
4.1 For the purpose of injury management, information regarding an injured area of your body and its severity will may be saved by the Products.
5. PURPOSES FOR WHICH WE PROCESS PERSONAL DATA
5.1. We will only process your Personal Data, in accordance with applicable law, for the following purposes:
- creating and maintaining your customer account, if you become a registered customer with us;
- handling and fulfilling your requests, if you request goods and/or services from us;
- for research and statistical purposes, but any Personal Data relating to your health will always be anonymised and aggregated and will not identify you;
- to allow you to participate in interactive features of our services, when you choose to do so;
- resolving any disputes, if you lawfully exercise your rights or if you wish to dispute any part of our service offering;
- ensuring the security of your account and our business, preventing or detecting fraud or abuses of our Products, for example, by requesting verification information in order to reset your account password (if applicable);
- developing and improving our products and services, for example, by reviewing visits to the Products and its various subpages, demand for specific products and services and user comments;
- to administer the Products and for internal business administration and operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- as part of our efforts to keep the Products safe and secure; and
- to comply with applicable law, for example, in response to a request from a court or regulatory body, where such request is made in accordance with the law.
5.2. Your consent, as the “Data Subject”, to the processing as specified in this Policy is the primary legal ground for our processing of your Personal Data. However, there may be circumstances where we may also rely on other valid legal grounds for the processing of your Personal Data, such as:
- your request for content, products or services necessitating steps including processing of your Personal Data to be taken prior to entering into contract with you and any processing that is necessary for the performance of such contract;
- legitimate interests we pursue as a business, except where such interests are overridden by your interests and fundamental rights; and
- compliance with any legal obligation to which we are subject, such as, for example, the processing for the purposes of complying with applicable law.
6. DISCLOSURE OF YOUR INFORMATION
Your information will be used only by you and us. It will not be shared with, or sold to, third parties.
7. INTERNATIONAL TRANSFER OF PERSONAL DATA
We may transfer your Personal Data to a third party in countries outside the country in which it was originally collected for further processing in accordance with the purposes set out above. In particular, your Personal Data may be transferred throughout our group and to our outsourced service providers located abroad. In these circumstances we will, as required by applicable law, ensure that your privacy rights are adequately protected by appropriate technical, organisation, contractual or other lawful means. Please contact firstname.lastname@example.org for more information.
8. RETENTION OF PERSONAL DATA
8.1. Your Personal Data is always anonymised and will be retained until your last use of our services and normally for a period of three years thereafter, unless longer retention is required by applicable local law or where we have a legitimate and lawful purpose to do so. However, we will not retain beyond this period any of your Personal Data that is no longer required for the purposes set out in this Policy. The retention of your Personal Data will be subject to periodic review.
8.2. Please contact us at email@example.com if you would further details about our data retention practises.
9. DATA SUBJECT RIGHTS
9.1. Data protection law provides Data Subjects with numerous rights, including the right to: access, rectify, erase, restrict, transport, and object to the processing of, their Personal Data. Data Subjects also have the right to lodge a complaint with the relevant data protection authority if they believe that their Personal Data is not being processed in accordance with applicable data protection law.
- Right to make subject access request (SAR). Data Subjects may, where permitted by applicable law, request copies of their Personal Data. If you would like to make a SAR, i.e. a request for copies of the Personal Data we hold about you, you may do so by writing to firstname.lastname@example.org whose contact details are above. The request should make clear that a SAR is being made. You may also be required to submit a proof of your identity and a fee.
- Right to rectification. You may request that we rectify any inaccurate and/or complete any incomplete Personal Data.
- Right to withdraw consent. You may, as permitted by applicable law, withdraw your consent to the processing of your Personal Data at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent. Please note that if you withdraw your consent, you may not be able to benefit certain service features for which the processing of your Personal Data is essential.
- Right to object to processing, including automated processing and profiling. You may, as permitted by applicable law, request that we stop processing your Personal Data. In relation to automated processing and profiling, you may object to the processing and you will have the right to obtain human intervention.
- Right to erasure. You may request that we erase your Personal Data and we will comply, unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for keeping your Personal Data, such as, a legal obligation that we have to comply with, or if retention is necessary for us to comply with our legal obligations.
- Right to data portability. In certain circumstances, you may request that we provide your Personal Data to you in a structured, commonly used and machine readable format and have it transferred to another provider of the same or similar services. We will comply with such transfer as far as it is technically feasible. Please note that a transfer to another provider does not imply erasure of your Personal Data which may still be required for legitimate and lawful purposes.
- Your right to lodge a complaint with the supervisory authority. We suggest that you contact us about any questions or if you have a complaint in relation to how we process your Personal Data. However, you do have the right to contact the relevant supervisory authority directly. To contact the Information Commissioner’s Office in the United Kingdom, please visit https://ico.org.uk/for-the-public/raising-concerns for instructions.
The Products may, from time to time, contain links to and from the websites of our partner networks, advertisers, affiliates and other third parties. If you follow a link to any of these websites, please note that these websites may have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.