Lock In Coaching · Last updated 3 October 2026

Privacy information

This notice covers the LOCK IN website, enquiries, email list and payment administration. For your coaching account, health information and optional app features, read the coaching app privacy notice.

Who is responsible

William Dallas, trading as LOCK IN Coaching, is the controller responsible for deciding how your information is used for this business. You can contact Will at will@lockincoaching.uk, telephone +44 7598 908982, or write to 87 Glenshane Road, Drumahoe, BT47 3SF, Northern Ireland, United Kingdom.

Enquiries and conversations

The enquiry form holds your answers in the open page until you send it. A saved enquiry includes your name, email, optional phone number and coaching choice, together with its request reference and privacy-notice version. We show a saved reference only after the server confirms it. It does not create a coaching account or reserve a place. Optional goal, availability, training-place and equipment answers stay only in the open page; you can choose to send those in a prepared WhatsApp or email message. Opening that service does not send the message or save an enquiry. Closing or reloading the page clears unsent answers.

If you contact Will, he uses the information you send to answer your enquiry and, where you request it, take steps towards a coaching agreement. General enquiries and business correspondence are handled for the legitimate interest of responding and running the business. Only share your name, contact details and coaching interest in the saved enquiry. Broad goals and availability can be discussed directly with Will. Please keep health records, medical details and progress photographs out of a website enquiry.

Email updates

Joining the email list is optional. The form asks for your first name, email address, coaching interest and consent to launch news, availability and practical coaching tips. A confirmation link checks that you control the address; a welcome email follows confirmation. Joining does not reserve a place or create a coaching account.

Marketing emails rely on your consent. We record the consent wording version, request and confirmation dates, delivery references and unsubscribe status. Use the unsubscribe link in an email or contact Will to withdraw consent at any time. This does not affect earlier lawful use of your information or an existing coaching agreement.

Payments and agreements

Personal payment links are prepared after coaching is agreed. Stripe handles card information on its hosted checkout. Our coaching system records the agreed package, terms, acceptance, any separate early-start request, dates, payment references and status for your approved offer. New clients can pay before creating a coaching account. A private setup link verifies control of the email address agreed with Will and a verified Google account before the payment is linked to an account. A different Google address needs Will’s verified correction; the original agreed address still receives the verification code. Payment status comes from verified server notifications, not the return page in your browser.

We use purchase information to make and administer your agreement, provide its confirmation, handle cancellations or refunds and meet applicable accounting and legal duties. A transactional confirmation email includes the full agreement and cancellation information. Its delivery record prevents duplicate emails. Buying coaching does not subscribe you to marketing.

Website operation and the sample workspace

The website host processes technical connection information needed to serve and protect the site. Abuse controls use temporary, scoped keyed hashes of the network address for signup, enquiry, demo, payment and analytics request limits. These security counters are kept separately from analytics totals; the records do not store the raw address. Our legitimate interests are preventing abuse and keeping the requested services reliable.

The demonstration workspace is for fictional information only. It saves the sample selections you make so you can try the client and coach journey. It does not connect to real client records, payments or appointments. Its reset control deletes the current sample record. See Cookies & storage for the session cookie.

Optional website analytics

Only after you choose “Accept analytics”, this website counts daily page views and clicks on coaching, contact and app links to help improve its content. This processing relies on your consent. The records contain only the UTC day, a fixed public page category, an event category and a total. They contain no names, email addresses, enquiry answers, IP addresses, visitor identifiers, referrers or URL query strings. Payment, sign-in, email-confirmation and demonstration pages are excluded.

These are counts of views and clicks, not unique people, delivered enquiries or sales. There is no Google Analytics, advertising pixel or cross-site profiling. Use Cookie settings and choose “Reject optional” to stop future analytics. Existing combined totals cannot identify your individual visits. The host still receives connection information to deliver and protect the website.

Services that process information

The website uses OpenAI Sites hosting and Cloudflare website infrastructure and storage. Resend processes email delivery and the mailing list; Supabase stores saved enquiries, approved offers and private account setup records; Stripe processes payments. The separate coaching app uses its own services described in the app privacy notice. WhatsApp and your email provider process messages when you choose to use them.

Providers may process information outside the UK. OpenAI processes personal information collected through this hosted website under its ChatGPT Sites data-processing agreement, which incorporates standard contractual clauses with the UK Addendum for UK transfers. This agreement covers information collected through the hosted site; it does not cover prompts, files or conversations used to build it. Resend’s data-processing terms also include UK transfer clauses. The safeguards and locations for other services depend on the service involved. Contact Will for the relevant information, including how to obtain a copy of the safeguards.

You can also read Cloudflare’s privacy information, Resend’s privacy information and Stripe’s privacy information. The app privacy notice explains the separate services used for coaching and health information.

How long information is kept

• Enquiries: unsent answers are held only in the open page. Saved enquiries that do not become coaching clients are normally deleted or anonymised 30 days after our last activity on the enquiry. Records needed for an unresolved payment, complaint or information-rights request are retained while that matter is handled and reviewed afterwards. Purchase and agreement records follow the separate retention criteria below.
• Unconfirmed email signups: confirmation links expire after 48 hours. Expired pending requests are removed in limited batches when later signup requests trigger cleanup. Expiry stops confirmation; it does not guarantee deletion at exactly 48 hours.
• Confirmed email subscriptions: kept while you choose to receive updates. On an unsubscribe processed by this website, we clear the name, coaching interest and stored confirmation/welcome email content from the local signup record. We retain the address, current signup reference, its consent and opt-out evidence, delivery references and provider reference to honour the opt-out and resolve delivery issues. Joining again creates a new signup attempt and replaces the previous local record; it is not a complete history of every subscription. An email already being sent may still arrive. Resend also maintains the contact’s opt-out status.
• Security rate limits: counts use ten-minute windows for payment requests and sample-workspace changes, or hourly windows for enquiries, email signups and preferences, new sample sessions and analytics requests. Expired records are removed in limited batches during later accepted requests, not at a guaranteed deletion time.
• Website analytics: daily combined totals support one calendar year of reporting. Older totals are removed when a later accepted analytics request triggers cleanup. The essential cookie remembering your accepted or rejected choice lasts up to 180 days; see Cookies & storage.
• Sample workspaces: accessible for up to seven days from creation. Reset deletes the current sample record; expired records are removed in limited batches when a later new sample session starts.
• Purchase, agreement and complaint records: retained according to the work still needed to administer the agreement, deal with refunds or disputes, demonstrate how a request was handled, and meet relevant accounting or legal obligations. A live dispute or a legal preservation requirement can affect deletion. The website does not automatically delete these records at the end of a coaching block.

These are the current periods and criteria; there is no single fixed retention period for every record. Contact Will to ask what is held about you, why it is still needed or whether it can be deleted. The app privacy notice separately explains coaching and health information.

Your information rights

Depending on the circumstances, you can ask to access or correct your information, have it erased, restrict its use, or receive portable information. You can withdraw consent where we rely on it. We may need limited information to verify your identity before disclosing or changing records; please do not send identity documents unless asked.

You can object to direct marketing at any time. You can also object to processing based on legitimate interests, explaining your circumstances. A request will not itself cancel your coaching agreement. If an exception means some information must be kept, Will will explain why.

Email a privacy request. You can also use the phone or postal details above. Requests are normally answered without undue delay and within one calendar month. If the law permits more time or requires identity verification or clarification, Will will explain what is needed and the relevant deadline. A permitted extension is explained within the original month.

Make a privacy complaint

If you are concerned about how LOCK IN handles your information, email a data protection complaint, call Will or write to the address above. Tell him what happened, when, what you would like put right and how you would prefer a reply. You do not need to use a particular form or legal wording.

Will will acknowledge your complaint within 30 days, make appropriate enquiries without undue delay, keep you informed and explain the outcome and any action taken. You can ask for an accessible way to communicate. Making a privacy complaint does not itself end your coaching or remove your information rights.

You also have the right to complain to the Information Commissioner’s Office (ICO). The ICO’s complaints guidance explains the next steps.