Privacy Policy

Effective: March 9, 2026

DATA CONTROLLER: HavaCoach Ltd, Northern Ireland

1. WHAT WE COLLECT
1.1 User Data: Name, email, phone, billing address
1.2 Child Data: Name, age, DOB, medical conditions (bookings only)
1.3 Coach Data: AccessNI certificates, qualifications, bank details, listings
1.4 Technical: IP address, browser type, device info

2. HOW WE USE YOUR DATA
2.1 Process bookings and payments
2.2 Verify coach eligibility (AccessNI review)
2.3 Send booking confirmations/reminders
2.4 Customer service and dispute resolution
2.5 Platform improvement (anonymised analytics)

3. LEGAL BASIS
3.1 Contract: Processing bookings/payments
3.2 Legitimate Interest: Security, fraud prevention
3.3 Consent: Marketing emails (opt-in only)

4. DATA SHARING
4.1 Coaches receive parent contact details for bookings
4.2 Stripe (payments), Brevo (email delivery)
4.3 No selling/sharing for marketing purposes

5. DATA RETENTION
5.1 Bookings: 7 years (tax compliance)
5.2 AccessNI certificates: 3 years or certificate expiry
5.3 Inactive accounts: Delete after 2 years

6. YOUR GDPR RIGHTS
6.1 Access, rectification, erasure, restriction
6.2 Data portability, object to processing
6.3 Withdraw consent anytime
Email: contact@havacoach.com

7. COOKIES
7.1 Session cookies only (expire browser close)
7.2 No advertising/tracking cookies