Privacy Policy

Nagle Performance Ltd · Last updated June 2026

1. Who We Are

Nagle Performance Ltd is the data controller for personal data collected through our services. Companies House Registration: SC890688. ICO Registration Number: ZC173141. Contact: andy@andynagle.com.

2. What Data We Collect

Identity & contact: Name, email address, phone number
Health data: PAR-Q responses and any medical information you voluntarily provide
Payment data: Transaction records (payment card details are processed by Stripe and never stored by us)
Programme data: Workout logs, progress photos, check-in notes, body measurements you share
Technical data: IP address, device type, login timestamps (collected automatically by our platforms)

3. Why We Collect It (Lawful Basis)

Purpose	Lawful Basis
Delivering coaching services and programme access	Contract performance
Processing payments and issuing receipts	Contract performance
Safety screening (PAR-Q review)	Vital interests / explicit consent for health data
Sending programme communications and check-in reminders	Contract performance
Sending marketing emails (post-challenge follow-up)	Legitimate interest (with opt-out)
Improving our services using aggregated programme data	Legitimate interest

4. Who We Share Data With

We share your data only with third-party service providers necessary to deliver the service:

Trainerize — programme delivery and community platform
Pulse / LeadConnector — CRM, onboarding forms, automated emails
Stripe — payment processing
Zapier — automation workflows connecting the above
Google — onboarding log storage (Google Sheets)

We do not sell your personal data to any third party. We do not use your data for advertising targeting by third parties.

5. Health Data

PAR-Q responses and any other health information are classified as special category data under UK GDPR. We collect this only with your explicit consent (recorded via the onboarding form checkbox) and use it solely for the purpose of safe programme delivery. This data is stored securely in Pulse and is accessible only to the coaching team.

6. Data Retention

We retain your personal data for [RETENTION PERIOD — e.g. 6 years] after the end of your last active programme, in line with our legal and contractual obligations. Health data (PAR-Q) is retained for [RETENTION PERIOD] for liability purposes. You may request early deletion subject to legal requirements — see Section 8.

7. Security

Your data is stored within the Pulse and Trainerize platforms, both of which operate with industry-standard encryption and access controls. We limit access to your data to authorised team members only. In the event of a data breach that affects your rights, we will notify you and the ICO as required by law.

8. Your Rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — request deletion (subject to legal retention requirements)
Restriction — ask us to limit how we use your data
Portability — receive your data in a portable format
Object — object to processing based on legitimate interest
Withdraw consent — for health data or marketing, at any time

To exercise any of these rights, email andy@andynagle.com. We will respond within 30 days.

9. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.