Privacy Policy

Your health, injury history, and emotional logs are among the most personal information a coaching business ever handles. This policy explains, in plain language, what we collect, why, and how we protect it. It is designed to meet the standards expected in 2026, including GDPR, Israel's Privacy Protection Law (as amended), and comparable frameworks.

1. What we collect

• Account & contact data: name, email, phone, city.
• Sensitive health data: injuries, medical clearances, pregnancy status if you choose to share, medications relevant to training.
• Emotional & mindset logs: mood check-ins, journal notes, and coaching call summaries.
• Training data: weekly kilometers, session ratings, optional wearable data if you connect it.
• Technical data: cookies, IP address, device type, and basic analytics events.

2. Why we use it

Only for what you'd expect: to design your training safely, to run your group or retreat, to communicate with you, to improve our Services, and to meet legal obligations.

3. Legal basis

We rely on your explicit consent for sensitive health and emotional data, contract performance for bookings, and our legitimate interests for site security and analytics.

4. Security

• Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• Sensitive health and emotional records live in a segregated, access-controlled store.
• Access is limited to your coach and essential operations staff, all bound by confidentiality agreements.
• We run periodic security reviews and maintain a breach-response process with 72-hour notification.

5. Retention

Coaching records are kept for the duration of your engagement plus seven years, as required for professional liability. You may request earlier deletion where legally possible.

6. Sharing

We do not sell your data. We share only with service providers strictly required to operate (payment processors, email, hosting), each under a data-processing agreement. We do not use your emotional or health data for advertising.

7. Your rights

You may access, correct, port, or delete your data, withdraw consent, or object to processing. Email privacy@runwell.coach and we will respond within 30 days.

8. Cookies

The banner you see on your first visit lets you accept all cookies or essential-only. You can change your choice anytime by clearing your browser storage for our site.

9. International transfers

Our retreats and vendors span several countries. When your data leaves your home jurisdiction, we use Standard Contractual Clauses or equivalent safeguards.

10. Contact

Privacy questions or requests: privacy@runwell.coach.