GDPR & Data Protection Policy

Effective Date: 30 October 2025
Last Updated: 30 October 2025 

1. Purpose of This Policy

This policy explains how 66 Coaching Education Limited (“we”, “our”, “us”) collects, stores, and processes
personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection
Act 2018. We are committed to protecting the privacy and security of our clients, athletes, staff, and partners. 

2. Scope

This policy applies to all employees, contractors, and volunteers of 66 Coaching Education Limited, and to all
personal data processed by the company in relation to coaching, education, training, events, or business
operations.

3. What Data We Collect

We may collect and process personal data including names, contact details, emergency contacts, health
information relevant to coaching, performance data, photographs (with consent), and staff employment details. 

4. How We Collect Data

We collect data directly from individuals through registration forms, communication, coaching sessions, or online
platforms. 

5. How We Use Personal Data

We process personal data for delivering and managing coaching services, communicating with clients,
safeguarding participants, managing payments, and fulfilling legal obligations.

6. Lawful Basis for Processing

Processing is based on contractual necessity, legal obligation, consent, and legitimate interests, as required by
GDPR. 

7. Data Storage and Security

We ensure data is securely stored using password-protected and encrypted systems, with access limited to
authorised staff only.

8. Data Retention

Personal data is retained only as long as necessary, typically up to six years after engagement or employment
ends. 

9. Data Sharing

We do not sell or rent personal data. We may share data with governing bodies, insurers, or service providers
under strict confidentiality agreements. 

10. Data Subject Rights

Individuals have rights to access, correct, delete, or restrict their data, and to withdraw consent. Requests can be
made via [email protected].

11. Photography and Media Consent

Photographs or videos may be used for promotional purposes only with prior consent, which can be withdrawn at
any time. 

12. Data Breaches

In case of a data breach, we will act promptly, notify the ICO within 72 hours if required, and inform affected
individuals when necessary. 

13. Contact Details

For questions or concerns, please contact: Directors: Zack Miles / Paul Miles Email: [email protected]
Phone: 07899 083112 Address: 18 Cherberry Close, Fleet, Hampshire, GU51 2TD If unsatisfied, you can
contact the Information Commissioner’s Office (ICO) via www.ico.org.uk. 

14. Policy Review

This policy will be reviewed annually or sooner if required by legal or operational changes.

Signed: ___________________________
Name: Zack Miles / Paul Miles
Position: Directors
Date: 30 October 2025