Privacy Policy | PREP Performance

01WHO WE ARE.

PREP Performance is operated by Sam Laycock and Sam Higgins, trading as a partnership in the United Kingdom. We provide digital strength training, physical preparation and injury rehabilitation programmes for military personnel and recruits.

For the purposes of UK data protection law (the UK GDPR and Data Protection Act 2018), PREP Performance is the data controller of personal information collected through this website.

Our registered contact email for data protection enquiries is info@prepperformance.co.uk.

02WHAT WE COLLECT.

We collect only the information we genuinely need to deliver our products and run our business. The following categories of personal data may be collected:

When you make a purchase

Your name
Your email address
Billing address and country
Payment information (handled directly by Stripe — we do not see or store your card details)

When you visit the website

Basic analytics data: pages visited, approximate location (city level), device type, referring website
Browser and operating system information
This data is anonymous and used only to understand how the website is used

When you contact us

Your name and email address
The content of your message
Any additional information you choose to share

What we do not collect

We do not collect special category data such as health records, biometric data, or information about race, religion or political beliefs. We do not ask for medical history through the website. We do not require account creation — programmes are accessed via a single-use access code emailed to you on purchase.

03HOW WE USE IT.

We use the personal data we collect for the following purposes:

Delivering the products you have purchased

Sending you the access code to your programme after purchase
Providing customer support relating to your programme
Sending essential service emails (e.g. updates to a programme you own)

Legal and accounting obligations

Maintaining records of sales for HMRC tax purposes (six years, as required by law)
Issuing refunds or handling disputes

Improving the website and our products

Anonymous analytics to understand which pages are useful
We do not use personal data to build profiles or target advertising

Marketing

We do not currently send marketing emails. If we choose to do so in the future, we will only contact you if you have explicitly opted in, and you will be able to unsubscribe from any marketing email at any time with a single click.

04LEGAL BASIS.

Under UK GDPR, we must have a lawful basis to process your personal data. The legal bases we rely on are:

Contract: Processing your information is necessary to fulfil your purchase — delivering the programme and providing support
Legal obligation: We are required to keep certain records (e.g. for tax purposes) by UK law
Legitimate interests: Maintaining anonymous website analytics to improve our service
Consent: Where required (e.g. if we ever introduce marketing emails), we will request your explicit consent first

05WHO WE SHARE WITH.

We use a small number of trusted third-party service providers to operate this business. These providers process personal data only on our instructions and only to the extent necessary to deliver their service to us:

Stripe

Stripe processes your payment when you purchase a programme. They handle your card details directly — we never see or store card information. Stripe operates in compliance with PCI-DSS standards and UK GDPR. Stripe's privacy policy

Google (Gmail / Google Workspace)

We use Google Workspace to send emails from our business address (info@prepperformance.co.uk). When you receive an email from us, your email address is processed by Google in line with their privacy policy. Google's privacy policy

Zapier

We use Zapier to automate the sending of your welcome email after purchase. Your name and email address pass through Zapier briefly during this process. Zapier's privacy policy

Netlify

This website is hosted by Netlify. Their servers process basic technical data (IP address, request information) needed to serve the website. Netlify's privacy policy

Vimeo

Programme videos are hosted on Vimeo. When you watch a video, Vimeo may collect basic technical data. Vimeo's privacy policy

We do not sell your personal data. We do not share your personal data with advertisers or third parties for marketing purposes.

06HOW LONG WE KEEP IT.

We only keep your personal data for as long as we need it:

Purchase records: Six years from the date of purchase, to comply with HMRC requirements
Programme access: Indefinitely while you hold a lifetime-access programme, so we can continue to support you
Support enquiries: Up to 24 months after our last interaction with you
Analytics data: Anonymised and retained in aggregate only

You can request deletion of your personal data at any time (see Your Rights, below). Where we have a legal obligation to retain certain data (such as for tax purposes), we will retain only the minimum required for the legal retention period.

07YOUR RIGHTS.

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: You can ask us for a copy of all the personal data we hold about you
Right to rectification: You can ask us to correct any inaccurate information
Right to erasure: You can ask us to delete your personal data (subject to legal retention requirements)
Right to restrict processing: You can ask us to stop using your data while we investigate a query
Right to data portability: You can ask for your data in a transferable format
Right to object: You can object to certain processing, including any future marketing
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email us at info@prepperformance.co.uk. We will respond within one calendar month.

You also have the right to complain to the UK's Information Commissioner's Office (ICO) if you believe we have mishandled your data. ICO website

08COOKIES & STORAGE.

This website uses a minimal amount of browser storage:

Essential storage

Stripe sets technical cookies during the payment process — these are essential for processing your payment securely
Vimeo sets technical cookies when you watch a video
Your access code may be temporarily stored in your browser's session storage to keep you signed into your programme during a visit

Analytics

We do not currently use third-party analytics platforms (such as Google Analytics). Should we introduce analytics in the future, we will update this policy and request your consent where required.

Advertising

We do not use advertising cookies. Our website is ad-free.

09USE BY CHILDREN.

Our programmes are designed for adults preparing for or serving in military roles. We do not knowingly collect personal data from children under the age of 16. If you believe a child has submitted personal data to us, please contact us and we will delete it.

10CHANGES TO
THIS POLICY.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "last updated" date at the top of this page. Where required by law, we will notify you of significant changes by email if you have provided one to us.

We encourage you to review this policy periodically to stay informed about how we handle your personal data.

Questions

GET IN TOUCH.

If you have any questions about this privacy policy, or about how we handle your personal data, please contact us directly. We aim to respond to all enquiries within 5 working days.

Email: info@prepperformance.co.uk

PRIVACYPOLICY.