MyCoach-ee Privacy Policy

Last updated: 22 August 2026
Version: 1.0

MyCoach-ee is committed to respecting and protecting your privacy. This Privacy Policy describes the types of Personal Information (as defined below) we collect, the purposes for which we collect and use it, who we may share it with, and the measures we take to protect it. It also provides information about your rights in relation to your Personal Information and how you can contact us. Please read it carefully.

We update this Privacy Policy from time to time to reflect any changes to the way the products and services are provided or to comply with new business practices or legal requirements. We encourage you to check this Privacy Policy periodically to see whether any changes have occurred.

1. Introduction and scope

1.1 We are MyCoach-ee Pty Ltd ACN 698 314 439, together with our related entities and affiliates (collectively, “MyCoach-ee”). In this Privacy Policy, references to “we”, “us”, and “our” mean one or more members of the MyCoach-ee group of companies.

1.2 MyCoach-ee operates an online coaching marketplace platform (the “Platform”) that uses AI-assisted matching to connect individuals seeking coaching (“Coachees”) with independent coaches and coaching businesses (together, “Coaches”). The Platform also offers practice-management tools, a courses and video library, and community features. MyCoach-ee maintains a website (the “Site”) which includes information about MyCoach-ee and the Platform. The Site may also include general resources such as articles, guides, videos and webinars.

1.3 For those who register for, access or otherwise interact with the Platform or our services, all visitors to the Site, and all other individuals with whom we communicate in the course of running our business (each referred to as “you” and “your”), we may be the controller of certain Personal Information you give us. This is the case for the Personal Information we collect to operate the Platform, to register and manage accounts, for AI-assisted matching, for billing, and for our own marketing. The measures and rights set out in this Privacy Policy apply where we are the controller of your Personal Information.

1.4 In other cases we act as a processor (or, in the United States, a service provider), processing Personal Information only on behalf of, and on the instructions of, another party who is the controller. This applies in particular to Coaching Data, such as notes, records and messages that Coaches and Coachees create, upload or store, which we host and process as their user content. Where we act as a processor, the relevant Coach, Coaching Business or Enterprise Customer is the controller, and a separate data processing agreement may govern that processing. Even where Coaching Data is involved, we act as an independent controller, governed by this Privacy Policy, when we process Personal Information for our own purposes, such as platform security, fraud prevention, legal compliance, and billing.

1.5 The Platform is intended for adults. Our services are not directed to or intended for children, and we do not knowingly collect Personal Information relating to anyone under 18 years of age, consistent with the eligibility requirements of our Platform Terms. If we become aware that we have collected Personal Information from a person under 18, we will take reasonable steps to delete it.

1.6 We value your privacy and your rights as a data subject. We are an Australian company. If and when we make the Platform available to users in the United Kingdom (UK) or the European Union (EU), we will appoint a representative for those regions and update this Privacy Policy with their contact details.

1.7 If you want to make use of your data subject rights, please contact us using the details in paragraph 10 (Contacting us and complaints) below.

1.8 Legal requirements relating to data vary by country. Whilst we adopt a global approach to data compliance as far as possible, certain sections of this Privacy Policy will only apply to residents of certain jurisdictions. Where this is the case, it is indicated clearly below.

2. Meaning of Personal Information

2.1 Under the Australian Privacy Act 1988 (Cth) (“APA”), “Personal Information” means “Information or an opinion about an identified individual, or an individual who is reasonably identifiable: (a) whether the information or opinion is true or not; and (b) whether the information or opinion is recorded in a material form or not.”

2.2 Under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), and the retained version of the same regulation in the UK (“UK GDPR”), “Personal Data” means any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2.3 Under the California Consumer Privacy Act of 2018 (“CCPA”), “Personal information” is defined as information that identifies, relates to, or could reasonably be linked with you or your household. For example, it could include your name, social security number, email address, records of products purchased, internet browsing history, geolocation data, fingerprints, and inferences from other personal information that could create a profile about your preferences and characteristics.

2.4 For the purposes of this Privacy Policy, we use the term “Personal Information” to refer to:

• 2.4.1 Personal Information as defined in the APA;
• 2.4.2 Personal Data as defined in the GDPR and the UK GDPR; and
• 2.4.3 Personal Information as defined in the CCPA.

If you are a resident of the UK or the EEA, your rights will be applicable only in respect of Personal Data, as defined above. If you are a resident of California, your rights will be applicable only in respect of Personal Information as defined in the CCPA.

3. What we collect, how we collect it, and what we do with it

3.1 The Personal Information we collect from you, and how we collect it, will depend on the service you are purchasing and the way you interact with us.

3.2 The table below sets out what we collect, how we collect it and what we do with it. We may state a more specific additional purpose when we collect your Personal Information.

3.3 In some jurisdictions (in particular the UK and EEA), we are required to identify a legal justification (also known as a “Lawful Basis”) for collecting and using your Personal Information, in addition to describing the purpose. There are six Lawful Bases that organisations can rely on. The most relevant of these to us are where we use your Personal Information to:

• 3.3.1 Fulfil a contract that we have with you as an individual (“Contract”);
• 3.3.2 Comply with our legal obligations (“Legal Obligation”);
• 3.3.3 Pursue our legitimate interests (our justifiable business aims) but only if those interests are not outweighed by your other rights and freedoms (“Legitimate Interests”); or
• 3.3.4 Do something for which you have given your consent (“Consent”).

3.4 Where we use your information for our legitimate interests, we have assessed whether such use is necessary and that such use will not infringe on your other rights and freedoms.

3.5 We may collect, use, store and transfer different kinds of Personal Information about you which we have grouped together as follows:

• 3.5.1 Identity Data includes first name, last name, title, job title, company, location;
• 3.5.2 Contact Data includes billing address, email address and telephone numbers;
• 3.5.3 Financial Data includes bank account and payment card details (through our third-party payment processor, Stripe);
• 3.5.4 Transaction Data includes details about payments to and from you, and other details of products and services you have purchased from us;
• 3.5.5 Technical Data includes internet protocol (IP) address, your login data for our services, statistics on page views and sessions, acquisition sources, search queries and/or browsing behaviour, browser session data, webpage from which you came, webpage(s) or content you accessed, navigational and log data, information about your access and use of our Site and services, including through the use of internet cookies, time zone settings and geolocation, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Site;
• 3.5.6 Profile Data includes your username or similar identifier, password, your interests, preferences, feedback;
• 3.5.7 Usage Data includes information about how you use our Site, products and services including session times, login and logout times, content accessed, course completion progress, quiz results;
• 3.5.8 Content Data includes any personal data contained within data, documents, files, communications, transaction records, stored files, analytics data, metrics, or other materials that you submit, upload, store, transmit, create, generate, or otherwise process when using the Platform, but does not include Coaching Data;
• 3.5.9 Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences;
• 3.5.10 Matching Data includes the goals, preferences, availability, specialisms, experience and other information that Coachees and Coaches provide so that the Platform can suggest suitable matches between them through AI-assisted matching;
• 3.5.11 Coaching Data includes the notes, records, session materials, messages, uploads and other content that Coaches and Coachees create, upload or store using the Platform, which we host and process as user content on the relevant user’s behalf.

3.6 The table below includes the Lawful Basis we rely on when we process your Personal Information, which will be applicable only to UK and EU Data Subjects.

3.7 Please note that Financial Data collected and processed for billing and payment purposes is never stored on any of our servers or other equipment. While such data is collected through our platform, it is stored on servers and other equipment managed by Stripe.

3.8 In addition to the Lawful Bases set out in the table above, we may use your Personal Information (however collected) to fulfil a Legal Obligation if processing is necessary:

• 3.8.1 to record your preferences (e.g. marketing) to ensure that we comply with applicable data protection laws;
• 3.8.2 where we are required to assist government and law enforcement agencies or regulators;
• 3.8.3 where we retain information to enable us to bring or defend legal claims; and/or
• 3.8.4 where we are required to assist government and law enforcement agencies or regulators, including in relation to any eligible data breach declarations by any of them.

4. Anonymised and aggregated data

4.1 We may anonymise the Personal Information we collect (so it can no longer identify you) and then combine it with other anonymous information so it becomes aggregated data. Aggregated data helps us identify trends (e.g. what percentage of users responded to a specific survey). Data protection laws do not govern the use of aggregated data and the various rights described below do not apply to it.

5. Use of cookies

5.1 Cookies are small text files that we store on your browser, or the hard drive of your computer, if you agree. Cookies contain information that is transferred to your computer's hard drive.

5.2 We use our own cookies to keep track of your use of our Site, designed to provide a better user experience for you. We also use third party cookies. The following cookies are used on our Website:

• 5.2.1 Necessary cookies. These are cookies that are required for the operation of the Site. These essential cookies are always enabled because the Site will not work properly without them. They include, for example, cookies that enable certain security functions.
• 5.2.2 Preference cookies. These enable us to recognise you when you return to the Site, to personalise our content for you and remember your preferences.
• 5.2.3 Statistics cookies. These help us to understand how visitors interact with the Site. They include cookies that tell us how long people spend on the Site and the number of times they visit.
• 5.2.4 Marketing cookies. These are used to record your visit to the Site, to make the Site more relevant to your interests.

6. Security measures

6.1 We hold Personal Information electronically in the cloud, and may also hold Personal Information locally, including but not limited to on desktop computers, laptops and back-up hard drives.

6.2 We take all reasonable steps to ensure that your Personal Information is secure from any unauthorised access, misuse or disclosure. However, the transmission of information via the internet is not completely secure and we do not guarantee that Personal Information cannot be accessed by an unauthorised person or that unauthorised disclosure will not occur.

6.3 Our security measures include:

• 6.3.1 access controls and user authentication (including multi-factor authentication)
• 6.3.2 internal IT and network security
• 6.3.3 regular testing and review of our security measures
• 6.3.4 staff policies and training
• 6.3.5 incident and breach reporting processes
• 6.3.6 business continuity and disaster recovery processes
• 6.3.7 other industry standard safeguards

6.4 If there is an incident that has affected your Personal Information, we will notify the regulator and keep you informed (where required under applicable data protection law).

7. How long we keep your Personal Information

7.1 We will only retain your Personal Information for as long as necessary to fulfil the purposes we collected it for.

7.2 To decide how long to keep Personal Information (also known as its retention period), we consider the volume, nature, and sensitivity of the Personal Information, the potential risk of harm to you if an incident were to happen, whether we require the Personal Information to achieve the purposes we have identified or whether we can achieve those purposes through other means (e.g. by using aggregated data instead), and any applicable legal requirements (e.g. minimum accounting records for tax authorities).

7.3 We may keep identity data and certain other data (including any exchanges between us by email or any other means) for up to seven years after the end of our contractual relationship with you. This period applies to financial and identity records only. It does not apply to Coaching Data or other coaching records, which are dealt with below.

7.4 If you hold a paid subscription and it ends or is not renewed, we keep the content in your storage for one month so that you can renew your subscription or export your data. You are responsible for exporting or backing up anything you want to keep before the end of that period. After that month we may delete content that exceeds the limits of your then-current plan, except where we must keep it to meet a legal obligation. If you are a Coach or Coaching Business with ongoing coaching engagements, we may retain and continue to make the relevant coaching materials available to the affected Coachees for the duration of those engagements.

7.5 Where your storage or Coaching Data includes health, wellbeing or other sensitive information, we hold it only as a processor, to provide the Platform, and keep it only for as long as needed for that purpose. We do not set, advise on or monitor any clinical, professional or other retention period for that content, and we are not the keeper of any user's professional records. Deciding how long the content must be kept, and meeting any professional or legal retention obligation, rests entirely with the relevant Coach or Coaching Business as controller. We delete or return it when the relevant account is closed, after any grace period above, or earlier if the relevant Coach or Coaching Business instructs us, or if you exercise a right to delete it under the rights section below.

7.6 If you have asked for information from us or you have subscribed to our mail-out list, we keep your details until you ask us to stop contacting you.

8. Who we share your Personal Information with

8.1 We may share your Personal Information with the organisations listed below, for the specified reasons.

8.2 When we share your Personal Information with third parties to process it on our behalf, we ensure that an appropriate Data Processing Agreement is in place, where required under applicable data protection laws.

9. Direct marketing

9.1 Where your active consent to receive marketing messages is required by applicable data protection laws, we will obtain such consent for this purpose. Otherwise, by providing us with your Personal Information, you consent to us using it to make contact with you on an ongoing basis to provide you with current information about our products and services, special offers you may find of interest, or new products or services being offered by us or one of our associated companies. This may be by telephone, mail, email, SMS and social media.

9.2 You may at any time decline to receive such information by contacting us as referred to in paragraph 10 below.

10. Contacting us and complaints

10.1 If you have questions, requests or concerns about your Personal Information or this Privacy Policy, please email us at admin_security@mycoach-ee.com. We will take such steps as are reasonable to investigate any issues within a reasonable time of receipt. We will give you written notice of the investigations which have been carried out and the outcome.

10.2 Whilst you are entitled to submit a complaint to your local protection authority (in applicable jurisdictions) with any concerns, we would encourage you to contact us first so that we can try to address your concerns.

11. Use of artificial intelligence and automated decision making

11.1 We may use artificial intelligence and machine learning technologies, including those provided by third parties (which may include AI features integrated into the software and platforms we use to deliver our services) (“AI Technologies”) in the course of running our business and delivering the Platform. This includes the Matching Tools, which analyse the information you and Coaches provide, such as goals, preferences, availability and specialisms, together with how the Platform is used, to suggest Coaches to Coachees.

11.2 Where we use AI Technologies to operate, provide and improve the Platform, including AI-assisted matching, we act as controller in relation to that processing. Any third-party providers of AI Technologies that process Personal Information on our behalf do so as our processors or sub-processors, under contractual and data protection safeguards appropriate to the Platform.

11.3 We may use AI Technologies for purposes including:

• 11.3.1 to provide AI-assisted matching that suggests suitable matches between Coachees and Coaches;
• 11.3.2 to support search, recommendations and personalisation of your experience on the Platform;
• 11.3.3 to automate certain administrative or routine processes and communications;
• 11.3.4 to help keep the Platform and our users safe, including detecting fraud, misuse and content that breaches our terms;
• 11.3.5 to maintain, improve and develop the Platform and for quality assurance;
• 11.3.6 to collate and summarise content from user profiles and user content.

11.4 We do not input the Coaching Data or otherwise content of private coaching communications, session recordings or coaching notes into publicly available AI Technologies, meaning commercially or freely available AI models that are not subject to confidentiality and data-use restrictions appropriate to the Platform, and we take reasonable steps to ensure that this content is not used to train AI Technologies datasets, except in de-identified or aggregated form that does not reasonably identify any individual, or where you have consented.

11.5 To the extent we do input your Personal Information into AI Technologies, we will only do so through tools that are subject to appropriate confidentiality, security and data-use restrictions, we will use that information only to operate and improve the Platform, and access will be restricted to our personnel and authorised service providers acting as our processors or sub-processors. Your Personal Information will not be used to train or improve any publicly available AI models.

11.6 For Coachees, our AI Technologies and other automated tools generate recommendations and suggestions only. The Coachee decides whether to act on them, so these tools do not produce legal effects concerning a Coachee or similarly significantly affect them. A suggested match is not a recommendation, endorsement or guarantee, and we do not provide coaching ourselves.

11.7 For Coaches and Coaching Businesses, we use automated tools to help match, rank and display profiles and to support platform safety. These tools inform how and when a profile is shown, but decisions that materially affect a Coach, such as approving, restricting, suspending or removing a profile, are made or reviewed by a person and are not based solely on automated processing.

11.8 We do not make decisions about any user based solely on automated processing that produce legal effects concerning them or similarly significantly affect them. If we introduce a feature that would do so, we will tell the affected users and put the required safeguards in place, including a way to ask for human review.

12. What happens if Personal Information is not provided

12.1 Where we require certain Personal Information from you in order to provide a service to you, and you choose not to provide us with that Personal Information, we may not be able to provide our services to you, or aspects of those services. If this is the case, we will inform you, such as in the case of Sensitive Personal Information below.

13. Sensitive Personal Information

13.1 We collect a limited amount of sensitive Personal Information directly from you at registration and in your profile, such as wellbeing goals or preferences you choose to give us so that our AI-assisted matching can suggest suitable Coaches. For that limited information we act as controller and rely on your express consent under paragraph 13.3 below.

13.2 Separately, Coaching Data that users choose to create or upload may contain sensitive Personal Information (for example, information about health or wellbeing). We host and process that Coaching Data only as a processor (or, in the United States, a service provider) on the instructions of the relevant Coach or Coaching Business as controller, and not for our own purposes. We do not sell or share (for cross-context behavioural advertising) sensitive Personal Information.

13.3 Where we act as controller of the limited sensitive Personal Information described in paragraph 13.1, that information may be necessary to deliver coaching, so we ask for your separate, express consent to its storage and processing on registration, in addition to your acceptance of this Privacy Policy. You can withdraw your consent at any time in your account settings. Withdrawal does not affect processing carried out before you withdraw, but it means we can no longer provide you with coaching, and your access to those features will end.

13.4 Where we act only as a processor of Coaching Data, the relevant Coach, Coaching Business, or Enterprise Customer as controller is responsible for the lawful basis for that content, including any consent required from you.

Additional clauses applicable to residents of Australia

13.5 If there is any inconsistency between this “Additional Clauses Applicable to Residents of Australia” section and the rest of the Privacy Policy, this section shall prevail.

14. Transfers of Personal Information out of Australia

14.1 Your Personal Information may be transferred overseas or stored overseas for a variety of reasons. We take reasonable steps to ensure that the terms of service with our overseas recipients recognise that we are bound by privacy obligations and that they will not do anything that would lead to a breach of those obligations.

14.2 However, if we transfer your Personal Information to a recipient in a country with data protection laws which are at least substantially similar to the Australian Privacy Principles (“APP”), and where there are mechanisms available to you to enforce protection of your Personal Information under that overseas law, we will not be liable for a breach of the APP if your Personal Information is mishandled in that jurisdiction.

15. Notifiable Data Breach Scheme (NDBS) pursuant to the APA

15.1 If there is a data breach and we are required to comply with the NDBS, we will take all reasonable steps to contain the suspected or known breach where possible and follow the process set out in this clause.

15.2 If we have reasonable grounds to suspect that the data breach is likely to result in serious harm to any individuals involved, then we will take all reasonable steps to ensure an assessment is completed within 30 days of the breach or sooner if possible. We will follow all guidance published by the Office of the Australian Information Commissioner (“OAIC”) (if available) in making this assessment. If we reasonably determine that the data breach is not likely to result in serious harm to any individuals involved, or that any remedial action we take is effective in preventing serious harm from becoming likely, then we will not notify the affected individuals or the OAIC.

16. Your rights under the APP and the APA

16.1 If you are a resident of Australia, your data protection rights include:

16.1.1 Access to Personal Information

• You can request access to your Personal Information, subject to certain exceptions. For example, we may, in accordance with the APP, refuse to provide you with access if, for instance, granting you such access would have a negative impact on the privacy of another person.
• We will endeavour to provide access in the manner requested by you if it is reasonable and practicable to do so, otherwise we will take such steps as are reasonable to provide access in a way that meets both your and our needs.
• We may charge you for providing access to your Personal Information. You will be advised of the relevant charge and asked to make payment prior to access being provided.
• If we refuse your request for access on any ground permitted by law, we will give you written notice in accordance with the APA, setting out the ground/s of the refusal (except to the extent that it would be unreasonable to do so) and the mechanisms to complain about the refusal.

16.1.2 Correction of Personal Information

• You can request corrections to any inaccurate, outdated, incomplete or misleading information regarding your Personal Information. If you request correction, we will address it within a reasonable timeframe and notify you of the outcome.
• Where Personal Information which has previously been disclosed to another organisation in accordance with the APA and this Privacy Policy has been corrected you may ask us to notify the other organisation of the correction. We will take such steps as are reasonable to give that notification unless it is impracticable or unlawful to do so.
• If we refuse your request to correct your Personal Information we will give you written notice in accordance with the APA, setting out the ground/s of the refusal (except to the extent that it would be unreasonable to do so) and the mechanisms to complain about the refusal.
• If we refuse your request to correct your Personal Information, you may request that we associate with your Personal Information a statement that in your view the information is inaccurate, out of date, incomplete, irrelevant or misleading. We will take such steps as are reasonable to associate the statement with your Personal Information in such a way that the statement will be apparent to users of the information.
• We have an independent obligation to take reasonable steps to correct Personal Information that is inaccurate, out-of-date, incomplete, irrelevant or misleading.

16.1.3 You can ask us to delete or de-identify your Personal Information if there is no good reason for us to continue holding it.

16.1.4 You can ask to have your Personal Information, where technically feasible, sent to another organisation, where we hold this Personal Information with your consent or for the performance of a contract with you.

16.1.5 You can ask us not to send you any marketing materials. However, we may still send you newsletters and updates about your account, if you are a business contact.

16.1.6 If you are unhappy with the way we collect and use your Personal Information, you can complain to the OAIC, but we would encourage you to contact us first so that we can try to address your concerns.

16.2 To contact us or submit requests in relation to any of the above, please contact us via the contact details set out here in this Privacy Policy. Please note that we may ask you to verify your identity before responding to such requests. If your request is particularly complex or requires a detailed search, we may charge you for dealing with it. Any such charge will be fair and reasonable, and we will let you know in advance what it is.

17. Secondary purposes

17.1 The APP permits use of Personal Information for secondary purposes when those secondary purposes are related to the primary purpose of providing services to you.

17.2 Where permitted under the APP, we will use and share Personal Information we hold about you for the following secondary purposes:

• 17.2.1 Adding your details to our mail-out list to inform you of products and services which may affect or interest you;
• 17.2.2 Notifying you of any changes to our business or other news which may be relevant to your circumstances; and
• 17.2.3 Contacting you for sales purposes.

17.3 You can opt out of marketing and sales communications at any time by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. Otherwise, or to opt-out of other forms of marketing, please contact us via the contact details set out here in this Privacy Policy.

Additional clauses applicable to residents of the UK, the EEA or Switzerland

18. Meaning of Personal Information

18.1 For ease of reference, the information set out in paragraph 2.2 of this Privacy Policy is repeated in this paragraph 18.1: under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), and the retained version of the same regulation in the UK (“UK GDPR”), “Personal Data” means any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

18.2 For the purposes of this Privacy Policy, we use the term “Personal Information” to refer to Personal Data as defined in the GDPR. If you are a resident of the UK or the EEA, your rights will be applicable only in respect of Personal Data, as defined above.

18.3 If there is any inconsistency between this “Additional Clauses Applicable to Residents of the UK, the EEA Or Switzerland” section and the rest of the Privacy Policy, this section shall prevail.

19. International data transfers

19.1 We only transfer your Personal Information overseas where we are able to comply with applicable data protection laws. If you are located in the UK, the EEA or Switzerland (the “GDPR Area”), and we transfer your Personal Information outside of the EEA, UK or Switzerland, we will take appropriate measures to ensure that the recipient protects your Personal Information adequately in accordance with this Privacy Policy and all applicable UK, EU and Swiss data protection laws. These measures may include:

• 19.1.1 Ensuring that there is an adequacy decision in respect of the country to which the Personal Information is being transferred, which means that the applicable authority of the GDPR Area has concluded that the laws and practices of the destination country provide adequate protection for Personal Information;
• 19.1.2 The use of standard model contractual arrangements with the recipient of Personal Information which have been approved by the UK Information Commissioner, the European Commission or the Swiss Supervisory Authority, as appropriate (“SCCs”); and
• 19.1.3 The EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF and the Swiss-U.S. Data Privacy Framework.

20. Your rights regarding Personal Information

20.1 If you are a resident of the GDPR Area, your data protection rights are as follows:

• 20.1.1 You can request access of your Personal Information.
• 20.1.2 You can ask us to correct your Personal Information if it is inaccurate or incomplete. We might need to verify the new information before we make any changes.
• 20.1.3 You can ask us to delete or remove your Personal Information if there is no good reason for us to continue holding it or if you have asked us to stop using it. If we think there is a good reason to keep the information you have asked us to delete (e.g. to comply with regulatory requirements), we will let you know and explain our decision.
• 20.1.4 You can object to processing of your Personal Information, ask us to restrict processing of your Personal Information or request portability of your Personal Information. If we think there is a good reason for us to keep using the information or for not complying with your request, we will let you know and explain our decision.
• 20.1.5 You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. Otherwise, or to opt-out of other forms of marketing, please contact us using the email address below.
• 20.1.6 If you are unhappy with the way we collect and use your Personal Information, you can complain to the Information Commissioner’s Office, but we would encourage you to contact us first so that we can try to address your concerns.

20.2 To submit requests in relation to any of the above, please contact us via the contact details set out here in this Privacy Policy.

20.3 If we have collected your Personal Information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your Personal Information conducted in reliance on a Lawful Basis other than consent.

Additional clauses applicable to residents of the United States

21. Scope and other US state privacy laws

21.1 This section applies to residents of US states. Several US states have enacted comprehensive consumer privacy laws, including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and others, and further states are expected to follow. These laws differ in detail and in the thresholds that determine whether they apply to a particular business, but most give residents rights to access, correct and delete their Personal Information, to obtain a portable copy, to opt out of targeted or cross-context behavioural advertising and the sale of Personal Information, and to limit the use of sensitive Personal Information, together with a right not to be discriminated against for exercising those rights.

21.2 Where you are a resident of a US state with a comprehensive privacy law that applies to us, we will honour the rights that law gives you to the extent it applies, even if those rights are not separately described below. The California-specific provisions that follow describe how these rights operate for California residents, and we apply equivalent rights to residents of other US states where their law requires. To exercise any of these rights, or to opt out of any sale or sharing of your Personal Information or targeted advertising, please use the contact details and any opt-out mechanism described in this Privacy Policy. We will not discriminate against you for exercising any of these rights, and you may use an authorised agent where the applicable law permits.

22. Meaning of Personal Information

22.1 For ease of reference, the information set out in paragraph 2.3 of this Privacy Policy is repeated in this paragraph 22.1: Under the California Consumer Privacy Act of 2018 (“CCPA”), “Personal information” is defined as information that identifies, relates to, or could reasonably be linked with you or your household. For example, it could include your name, social security number, email address, records of products purchased, internet browsing history, geolocation data, fingerprints, and inferences from other personal information that could create a profile about your preferences and characteristics.

22.2 For the purposes of this Privacy Policy, we use the term “Personal Information” to refer to Personal Information as defined in the CCPA. Your rights will be applicable only in respect of Personal Information as defined in the CCPA.

22.3 The CCPA (as amended) provides consumers (California residents) with specific rights regarding the processing of their Personal Information. If you are a California resident, you may be subject to the following provisions. If there is any inconsistency between this “Additional Clauses Applicable to Residents of California” section and the rest of the Privacy Policy, this section shall prevail.

23. Categories of Personal Information collected

23.1 In the preceding 12 months we may have collected the following categories of Personal Information (as defined by the CCPA) about you. We may have collected this Personal Information directly from you, from third parties, and from your interactions with our services, software or applications, as outlined in this Privacy Policy:

• 23.1.1 Identifiers such as name, email address, address, and phone number;
• 23.1.2 Commercial information such as records of products or services purchased, and other transactional data;
• 23.1.3 Biometric information;
• 23.1.4 Internet or other similar network, browsing, or search activity such as technical data about your use of the Site or applications;
• 23.1.5 Geolocation data such as your approximate location based on IP address;
• 23.1.6 Audio, electronic, visual, thermal, olfactory, or similar information such as photographs;
• 23.1.7 Professional or employment-related information;
• 23.1.8 Sensitive personal information, including:
  • (a) government identifiers (social security, driver's license, state identification card, or passport number);
  • (b) complete account access credentials (usernames, account numbers, or card numbers combined with required access/security code or password);
  • (c) precise geolocation;
  • (d) racial or ethnic origin, religious or philosophical beliefs, or union membership;
  • (e) citizenship or immigration status (starting January 1, 2024);
  • (f) genetic data;
  • (g) mail, email, or text messages contents;
  • (h) unique identifying biometric information;
  • (i) health information; and/or
  • (j) sex life or sexual orientation information.

24. Purposes for collection

24.1 For details of the purposes for which we use the categories of Personal Information outlined above, please see the table in paragraph 3 of this Privacy Policy.

25. Who we share or have shared your Personal Information with, including for cross-context behavioural advertising

25.1 In the preceding 12 months, we may have disclosed the above categories of Personal Information to the categories of recipients listed in this Privacy Policy in line with the applicable purposes as described above.

25.2 We may also, in the preceding 12 months, have disclosed the above categories of Personal Information to third-party advertising partners, such as in connection with our use of tracking technologies, for cross-context behavioural advertising (so that we can display advertisements for products and services online), or by providing such advertising partners with lists of email addresses for potential customers. This may be considered “sharing” or a “sale” under the CCPA.

26. Your rights under the CCPA

26.1 If you are a resident of California and are entitled to protection under the CCPA, your data protection rights are as follows:

• 26.1.1 You have the right to know what Personal Information we collect, use, disclose, share and sell about you.
• 26.1.2 You have the right to request that we correct Personal Information we collect and maintain about you, if such Personal Information is inaccurate.
• 26.1.3 You have the right to request that we delete Personal Information we collect and maintain about you.
• 26.1.4 You have the right to opt-out of the sale or sharing of your Personal Information. We share Personal Information as described above, which may be considered a “sale” of Personal Information under the CCPA.
• 26.1.5 You have the right to limit the use or disclosure of your sensitive Personal Information. We do not use or disclose sensitive Personal Information other than as permitted under the CCPA to provide the Platform, and we do not sell or share it.
• 26.1.6 You have the right not to receive discriminatory treatment from us for exercising your privacy rights under the CCPA.
• 26.1.7 You have the right to designate an authorised agent to make a request on your behalf when exercising your privacy rights under the CCPA.
• 26.1.8 Where we use automated decision-making technology, you may request information about the purpose of that technology, the logic involved, and the key parameters that affected any output relating to you, in plain language, as required by the CCPA.

26.2 To submit requests in relation to any of the above, please contact us via the contact details set out here in this Privacy Policy. You can also click on the “unsubscribe” or “opt-out” link in any marketing e-mails we send you.

26.3 If you are an authorised agent making a request on behalf of a California consumer, please email your request to admin_security@mycoach-ee.com and provide us the first name, last name, and email address of the California consumer you are making the request for. If you do not provide the requested information, we may not be able to identify the California consumer and process the request. The information you provide will be used only to help verify and process the request. We reserve the right to request that you demonstrate evidence of your authorisation, either by providing us with a signed permission form or a copy of your power-of-attorney document granting you such authority.