Privacy Policy.

Who is responsible

I am the data controller. I am Ryan Hall, a sole trader trading as PowerHouse Online, based in England and Wales. This policy covers the personal data I collect when you use this website, create an account, buy a programme or coaching, or train in the hub.

Email: ryanhally16@outlook.com.

Postal address: [BUSINESS POSTAL ADDRESS].

ICO registration number: [ICO REGISTRATION NUMBER].

The site is hosted by [HOSTING PROVIDER].

What I collect

When you create an account I collect your name and email address. If you set a password, the sign-in system stores it as a protected hash. I never see the password itself.

If you sign in with Google or X, I receive the name, email address, and profile details those services send me so I can open your account. I do not get your Google or X password.

I also store:

the welcome form: your name, goal, training experience, any injuries you choose to mention, and which programme or coaching interests you
enquiries: your name, topic, and message
call bookings: the time, the type of call, and any note you leave
messages you send me, and messages I send you, including a photo or short video you choose to attach
check-ins: energy, sleep, recovery, performance, nutrition, any note, and up to four photos you choose to attach
lift logs: the exercise, sets, reps, weight, and any note, including a photo or short video on an exercise note
which programme or coaching you have paid for, and how far through the sessions you are

Health data

Some of this is health data under UK GDPR. That includes injuries you mention, check-in scores and notes, photos of your body, and lift logs or videos where they show an injury, pain, or your physical capacity.

Health data is special category data. I only collect it if you choose to enter it. Before your first check-in, and before the first progress or lift number if you log that first, I ask you to tick that you understand this and that you consent to me storing it so I can coach you. You do not have to tick it. If you do not, I will not save that first entry.

You can withdraw that consent at any time by emailing ryanhally16@outlook.com. I will stop using the health data and delete it unless the law says I have to keep a copy. Withdrawing consent does not affect anything I did with it before you withdrew it.

Photos and videos

You can attach photos to a check-in, and a photo or a short video to an exercise note or a message. I can see those files on my private dashboard so I can coach you. Other members cannot see them. They are not published on the site, and I do not use them in advertising.

[PHOTO AND VIDEO UPLOAD DETAILS].

Payments

Card details go to Stripe. They never touch this app. I do not receive your card number or security code. Stripe tells me whether the payment worked or failed, the amount, the email on the payment, and which programme or coaching plan was bought.

Why I use it, and the legal basis

Account, purchases, bookings, enquiries, and messages needed to provide what you asked for. Legal basis: contract.
Welcome answers other than injuries, so I know what you came for. Legal basis: contract, where we go on to work together, or steps you ask me to take before a contract.
Injuries, check-ins, body photos, and lift logs or videos that show your health. Legal basis: your explicit consent. You can refuse or withdraw it.
Payment records, so I can show what was bought and meet tax and accounting rules. Legal basis: contract, and legal obligation for the records I have to keep.
Keeping the site secure and dealing with misuse. Legal basis: legitimate interests. That interest is running a safe coaching business. It does not override your rights.

Who sees it

I do not sell your data. I do not pass it to advertisers. I share it only where it is needed to run the site, or if the law says I must.

Stripe, for payments
Google or X, if you choose to sign in with them
[HOSTING PROVIDER], which runs the site and the database

Some of those providers may store data outside the UK. Where that happens, I rely on the protections the law requires, such as the UK extension to the EU-US Data Privacy Framework or the standard contractual clauses, as applied by that provider.

How long I keep it

Account details — while your account is open, then deleted when you ask, unless I still need a record of a purchase.
Welcome answers, messages, check-ins, lift logs, and progress — until you delete them, close your account, or ask me to delete them.
Enquiries and bookings — for two years after the last message or the call, unless we are still working together.
Payment records — for six years after the payment, because of tax and accounting rules.
Photos and videos — [PHOTO AND VIDEO UPLOAD DETAILS].

Your rights

Under UK GDPR and the Data Protection Act 2018 you can ask me to:

give you a copy of the data I hold about you
correct it if it is wrong
delete it, in the cases where the law allows
stop or limit how I use it
object to use based on legitimate interests
send you, or someone you name, the data you provided, where the processing is based on contract or consent and is automated

Email ryanhally16@outlook.com. I will respond within one month.

You can complain to the Information Commissioner’s Office at ico.org.uk. I would like the chance to put it right first.

Cookies

I use a cookie, or a sign-in token stored in your browser, so you stay signed in. That is essential. The site does not work as your account without it.

I do not use advertising cookies, analytics cookies, or any other non-essential cookie. Because of that, there is no cookie banner. If I ever add a non-essential cookie, I will ask you first and update this page.