Skip to main content

GDPR & Data Protection

This page summarises how CoachHaven supports UK GDPR and EU GDPR rights for coaches and clients.

Last updated: 24 April 2026

Roles

CoachHaven is the controller for coach account administration, billing, support, security, legal compliance, and our own service analytics.

For client records in a coach-managed workspace, the coach usually controls the client relationship and CoachHaven generally acts as processor or service provider where applicable.

Coach responsibilities

  • Give clients your own privacy information when you decide why and how their data is used.
  • Have a lawful basis for client personal data before entering it into CoachHaven.
  • Have a valid Article 9 or UK GDPR special-category condition for health, diet, allergy, training, or nutrition-related data where required. Explicit client consent is the expected default unless another valid condition lawfully applies.
  • Only upload data that is necessary for the coaching workflow.
  • Handle client rights requests and tell us when you need processor assistance.
  • Review AI, transcription, solver, and generated plan output before using it with clients.

Rights requests

Coach account holders can request access, portability, correction, deletion, restriction, objection, or consent withdrawal by using account settings or emailing support@coachhaven.app.

Clients should normally contact their coach first for workspace records because the coach controls the coach-client relationship. If a client contacts us directly, we may need to verify the request and route it through the coach unless CoachHaven is the controller for that data.

Deletion

Coach account holders can request deletion from the account page.

Deletion is permanent for local account and associated workspace data after active client constraints are resolved. We may keep limited records where law, billing, security, dispute handling, or backup cycles require it.

Exports

Coach account export packages include account data, workspace records, and related client or third-party data where it appears in the workspace. Export files are available for 24 hours before expiry.

Processor terms and DPAs

See our Data Processing & Subprocessors page for the current production subprocessor list and self-serve processing details. If your coaching business needs a signed data processing agreement, contact support@coachhaven.app.

Complaints

You can complain to the UK Information Commissioner’s Office or, if you are in the EU/EEA, to your local supervisory authority. We ask that you contact support@coachhaven.app first so we can try to resolve the issue.

More detail

See our Privacy Policy for data categories, lawful bases, recipients, transfers, retention, and rights.