Legal
Privacy Policy
- Last updated
- 22 July 2026
- Version
- 1.3
Your training data is personal. We treat it that way.
This Privacy Policy explains how Adaptiv collects, uses, stores and shares your personal information when you create an account, use the Service, complete training programmes or contact us.
It also explains the choices available to you and your rights under UK data-protection law. We’ve written it in plain English — if anything isn’t clear, contact us at support@adaptivperformance.co.uk.
By using Adaptiv, you acknowledge that your personal information will be processed as described in this Privacy Policy. This does not mean that you consent to every processing activity. Where we rely on consent — such as for marketing, non-essential analytics or injury and pain information — we will ask for it separately.
Who we are
Adaptiv Performance is an AI-powered platform that generates personalised resistance-training programmes and continuously adapts them based on your logged sessions, rate of perceived exertion (RPE) data, and feedback.
Adaptiv Performance is the data controller responsible for the personal information collected through the Service.
Website: adaptivperformance.co.uk
For privacy-related questions, contact support@adaptivperformance.co.uk.
Information we collect
We collect personal information that you provide directly, information generated through your use of Adaptiv, limited information received from our service providers, and technical information collected when you use the Service.
Account information
When you create and manage an account, we may collect:
- your display name;
- your email address;
- account and authentication identifiers;
- account preferences and settings;
- subscription status;
- marketing and communication preferences;
- consent records; and
- your age — collected during intake to confirm you meet our 18-and-over requirement.
Training and coaching information
To generate and adapt your training programme, we collect information such as:
- your training goals;
- your chosen sport or activity type;
- your experience level and training history;
- the days and time you have available to train;
- equipment available to you;
- exercise and programme preferences;
- generated programmes and programme changes;
- completed and missed sessions;
- sets, repetitions, weights, distances and other performance information;
- rate of perceived exertion;
- recovery and session feedback;
- exercise substitutions; and
- free-text coaching notes or feedback you submit.
Injury, pain and movement-restriction information
During the intake process, you may optionally tell us about injuries, pain sites or movements that may affect your training.
You may select one or more of the following areas:
- low back;
- knee;
- shoulder;
- hip;
- wrist or elbow; and
- ankle or foot.
You may also provide an optional free-text comment explaining an injury, pain site or movement restriction.
This information may reveal information about your health and is treated as special-category personal data. We use it only with your explicit consent to help generate and adapt your training programme.
You do not have to provide this information. However, if you choose not to provide relevant injury, pain or movement-restriction information, Adaptiv may be unable to take it into account when generating recommendations.
Subscription and transaction information
Subscription payments are completed directly through Stripe.
We receive limited subscription and transaction information from Stripe, such as:
- your Stripe customer or subscription identifier;
- the subscription plan you selected;
- subscription start, renewal and cancellation dates;
- payment status;
- transaction or invoice references;
- refund information; and
- information indicating whether a payment has succeeded or failed.
Payment-card details are provided directly to Stripe and are not stored by Adaptiv.
Communications and support information
When you contact us or communicate with Adaptiv, we may collect:
- your name and email address;
- the content of your message;
- support correspondence;
- information you provide about your account or programme;
- complaint and privacy-request information; and
- records of service, transactional and marketing communications.
Please avoid including unnecessary medical or other sensitive information in general support messages.
Technical and usage information
When you use Adaptiv, we may automatically collect technical and usage information such as:
- IP address;
- browser type and version;
- device type and operating system;
- pages, screens and features used;
- buttons, links and actions selected;
- login and authentication events;
- approximate location derived from an IP address;
- diagnostic, error and performance information;
- security and access logs;
- cookie and browser-storage identifiers; and
- analytics information where you have provided consent when required.
More information about cookies and analytics is provided in Section 8 and our Cookie Policy.
Where we obtain information
We obtain most personal information directly from you when you:
- create or update your account;
- complete the intake process;
- log sessions and provide feedback;
- manage your subscription;
- opt in to communications; or
- contact customer support.
We collect some technical and usage information automatically when you interact with the Service.
We also receive limited information from service providers, including:
- subscription and transaction information from Stripe;
- authentication and account information from Supabase;
- email delivery and communication-status information from Loops; and
- analytics and diagnostic information from PostHog where analytics is enabled.
Information required to use Adaptiv
You must provide:
- a valid email address;
- the account information needed to register and authenticate your account; and
- the core training information needed to generate your programme.
Without this information, we may be unable to create your account or provide the Service.
Injury, pain-site and movement-restriction information is optional. Marketing consent is also optional and is not required to create an account, subscribe or use Adaptiv.
How we use your information
We use personal information only where it is necessary for the purposes described below.
Provide and manage your account
We use account and authentication information to:
- create and maintain your account;
- verify your identity when you sign in;
- remember your preferences and settings;
- provide access to the appropriate Free or Pro features; and
- communicate important information about your account.
Generate and adapt your training programme
We use your intake answers, training preferences and training history to:
- generate your initial personalised training programme;
- select appropriate exercises and programme structures;
- adapt future sessions based on your performance and feedback;
- provide coaching insights and scientific explanations;
- recommend exercise substitutions; and
- monitor progression through your programme.
Account for injuries, pain and movement restrictions
Where you have provided separate, explicit consent, we use the injury, pain-site and movement-restriction information you submit to:
- help select suitable exercises;
- avoid or modify exercises that may conflict with a restriction you have identified; and
- adapt your programme and coaching recommendations.
We do not use injury, pain-site or movement-restriction information for marketing or advertising.
Provide session logging and coaching features
We use logged-session information, including sets, repetitions, weights, rate of perceived exertion, recovery feedback and coaching notes, to:
- record your training history;
- provide session feedback and insights;
- assess how you are responding to your programme; and
- adjust future training recommendations.
Manage subscriptions and payments
We use limited subscription and transaction information received from Stripe to:
- activate and maintain Pro access;
- manage subscription renewals and cancellations;
- identify successful or failed payments;
- process refunds where applicable;
- respond to billing enquiries; and
- maintain legally required accounting and transaction records.
Send service communications
We use your contact and account information to send communications that are necessary to operate the Service, including:
- account verification and password-reset emails;
- subscription and billing notices;
- renewal and cancellation confirmations;
- security alerts; and
- important changes to the Service, Terms or Privacy Policy.
Respond to questions and provide customer support
We use your contact details, account information, correspondence and any information you provide in a support request to:
- answer questions about Adaptiv;
- investigate and resolve account, programme or subscription issues;
- provide technical support;
- manage complaints and feedback; and
- maintain a record of our communications with you.
Send marketing communications
Where you have actively opted in, we may use your contact details and marketing preferences to send:
- product updates;
- coaching and training content;
- feature announcements; and
- promotional information.
You can unsubscribe at any time using the link included in our marketing emails or by updating your communication preferences.
Maintain security and prevent misuse
We use account, device, technical and usage information to:
- protect user accounts;
- prevent fraud, abuse and unauthorised access;
- enforce our Terms and Conditions;
- identify suspicious activity;
- investigate security incidents; and
- maintain the security and integrity of the Service.
Monitor and improve the Service
We use technical, diagnostic and usage information to:
- identify and resolve errors;
- monitor reliability and performance;
- understand how features are used;
- improve accessibility and usability;
- develop and test improvements; and
- protect the stability of the Service.
Where non-essential analytics technologies require consent, we only use them after you have made a choice through our cookie-consent controls.
We may use aggregated or anonymised information that no longer identifies you for statistical analysis, service planning and product improvement.
Respond to legal obligations and requests
We may use personal information where necessary to:
- respond to data-protection requests and complaints;
- maintain required tax and accounting records;
- comply with lawful requests from courts, regulators or public authorities;
- investigate or defend legal claims; and
- comply with other legal or regulatory obligations.
The lawful bases we rely on for these activities are explained in Section 4.
Lawful bases for processing
We only process personal information where we have a valid lawful basis under UK data-protection law. The lawful basis depends on why we are using the information.
| Why we use your information | Information involved | Article 6 lawful basis | Article 9 condition |
|---|---|---|---|
| Create and manage your account | Display name, email address, authentication information, account preferences and your age | Contract — the processing is necessary to create and operate your account and provide the Service | Not applicable |
| Generate your initial training programme | Training goals, activity type, experience level, session availability, equipment access and training preferences | Contract — the processing is necessary to provide the personalised programme you requested | Not applicable |
| Record your training and adapt your programme | Logged sessions, sets, repetitions, weights, distances, RPE, recovery feedback and coaching notes | Contract — the processing is necessary to provide session logging, coaching insights and programme adaptations | Not applicable |
| Personalise your programme around injuries, pain sites or movement restrictions | Body areas you select and any optional free-text information you provide about injuries, pain or movement restrictions | Consent under Article 6(1)(a) | Explicit consent under Article 9(2)(a) |
| Manage your subscription and provide access to paid features | Subscription plan, payment status, renewal and cancellation dates, and Stripe customer, subscription or transaction references | Contract — the processing is necessary to manage your subscription and provide Pro features | Not applicable |
| Maintain financial and transaction records | Subscription payments, refunds, invoices and transaction records received from Stripe | Legal obligation — where we must retain information for tax, accounting or other legal requirements | Not applicable |
| Send account and service communications | Email address, account activity, subscription status and relevant service information | Contract — where the communication is necessary to operate your account or provide the Service | Not applicable |
| Respond to questions and provide customer support | Contact details, account information, correspondence and information you provide in a support request | Contract where the request concerns the Service, or legitimate interests where necessary to respond to general enquiries and manage our relationship with users | Not applicable |
| Protect accounts, maintain security and prevent fraud or misuse | Account activity, IP address, device information, security events and technical logs | Legitimate interests — protecting users, securing the Service and preventing fraud, abuse and unauthorised access | Not applicable |
| Diagnose faults and maintain the reliability and performance of the Service | Technical information, diagnostic information, error logs, browser and device information | Legitimate interests — maintaining, troubleshooting and improving the security and performance of the Service | Not applicable |
| Analyse how the Service is used and improve its features and usability | App interactions, usage information, analytics identifiers and device or browser information | Consent where required for non-essential cookies or analytics technologies. We may rely on legitimate interests for essential operational analytics that do not require consent | Not applicable |
| Send marketing communications | Name, email address, marketing preferences and consent records | Consent — marketing emails are only sent where you have actively opted in | Not applicable |
| Handle privacy requests, complaints and legal obligations | Identity and contact information, account records, correspondence and information relevant to the request or complaint | Legal obligation, and where appropriate legitimate interests in establishing, exercising or defending legal rights | Not applicable |
Injury, pain and movement-restriction information
Information about injuries, pain sites and movement restrictions may reveal information about your health and is treated as special-category personal data.
Providing this information is optional. Before submitting it, you will be asked to give separate, explicit consent for Adaptiv to use it to generate and adapt your training programme.
You may withdraw your consent and remove or update this information at any time. Withdrawing consent does not affect processing that took place before consent was withdrawn, but it may reduce Adaptiv’s ability to account for injuries, pain or movement restrictions when generating recommendations.
Our legitimate interests
Where we rely on legitimate interests, those interests include:
- protecting the security and integrity of the Service;
- preventing fraud, misuse and unauthorised access;
- responding to general enquiries;
- diagnosing technical problems;
- maintaining and improving Service performance; and
- establishing, exercising or defending legal rights.
Before relying on legitimate interests, we consider whether the processing is necessary and whether your rights and interests outweigh our reasons for using the information.
How Adaptiv’s coaching engine works
Adaptiv uses automated systems and artificial intelligence to generate and adapt personalised resistance-training programmes.
Information the coaching engine uses
Depending on the features you use, the coaching engine may consider information including:
- your training goals;
- your experience level and training history;
- your available equipment;
- the days and time you have available to train;
- your programme and exercise preferences;
- your completed sessions;
- sets, repetitions, weights and rate of perceived exertion;
- recovery feedback and coaching notes;
- your previous responses to programme recommendations; and
- any injury, pain-site or movement-restriction information you voluntarily provide.
The quality and relevance of recommendations depend on the accuracy and completeness of the information you provide.
How recommendations are produced
We use Anthropic’s commercial API as part of the technology that generates and adapts training programmes.
The coaching engine analyses relevant information and may produce recommendations relating to:
- exercise selection;
- training frequency;
- sets, repetitions and training volume;
- intensity and progression;
- exercise substitutions;
- recovery and fatigue management; and
- adjustments to future training sessions.
Recommendations may change over time as you log additional sessions, provide feedback and update your intake information.
More information about the information shared with Anthropic and international data transfers is provided in Sections 6 and 9.
Automated recommendations and user control
Training programmes and coaching recommendations are generated automatically and are not routinely reviewed by a human coach or healthcare professional before being displayed to you.
You remain in control of your training. You may choose not to follow a recommendation, update the information you have provided or select an alternative exercise where that functionality is available.
Adaptiv does not use solely automated processing to make decisions that produce legal effects concerning you or similarly significantly affect you.
If you believe a recommendation is unsuitable, inaccurate or potentially unsafe, you should not follow it. You can report the recommendation or contact us at support@adaptivperformance.co.uk.
Limitations of the coaching engine
AI-generated recommendations may occasionally be incomplete, inaccurate or unsuitable for an individual’s circumstances. The system cannot take account of information that you have not provided and does not independently verify the accuracy of your answers.
Adaptiv is designed as a fitness and performance-coaching service. It is not intended to diagnose, treat, cure or prevent any injury, illness or medical condition.
Recommendations are not medical advice and should not replace assessment or advice from a qualified healthcare professional. If you are unsure whether a programme or exercise is suitable for you, seek appropriate professional advice before following it.
Third-party services and sharing
We use carefully selected service providers to operate, secure and improve Adaptiv. These providers process personal information only where necessary to provide their services to us.
Depending on the service and processing activity, a provider may act as a processor acting on our instructions or as a separate data controller for particular uses of personal information.
The principal providers we use are:
Supabase
Supabase provides our database and authentication infrastructure.
It may process and store information including:
- account and authentication information;
- intake answers and training preferences;
- generated training programmes;
- logged sessions and coaching feedback;
- subscription status; and
- injury, pain-site or movement-restriction information you choose to provide.
Anthropic
We use Anthropic’s commercial API to generate and adapt training programmes and coaching recommendations.
We send Anthropic only the information needed to generate the relevant response. Depending on the feature being used, this may include:
- training goals and preferences;
- experience level;
- equipment and availability;
- programme and session information;
- RPE and recovery feedback; and
- injury, pain-site or movement-restriction information you have chosen to provide.
Anthropic acts as a processor of this information under its commercial data-processing terms. Information submitted through the commercial API is not used to train Anthropic’s models by default. Further information about storage and international transfers is provided in Section 9.
Stripe
Stripe processes subscription payments and manages payment methods.
Stripe may collect information including your:
- name and contact details;
- billing information;
- payment-card details;
- subscription details; and
- payment and transaction information.
Payment-card and billing details are provided directly to Stripe. Adaptiv does not receive or store full payment-card details.
We receive limited information from Stripe that is required to manage subscriptions, such as Stripe customer and subscription identifiers, the selected plan, payment status, renewal dates and cancellation status.
Loops
Loops provides transactional and marketing email services.
It may process information including:
- your email address;
- display name, where provided;
- email and marketing preferences;
- subscription or account status; and
- information needed to trigger relevant account, service or marketing communications.
Marketing emails are sent only where you have opted in.
PostHog
With your consent where required, we use PostHog to understand how users interact with Adaptiv, diagnose problems and improve the performance and usability of the Service.
Depending on our analytics configuration, PostHog may process:
- pages or screens viewed;
- features used;
- buttons and links selected;
- browser and device information;
- technical identifiers; and
- diagnostic, error and performance information.
More information about analytics consent is provided in Section 8.
Google Analytics
With your consent, we use Google Analytics, provided by Google, for aggregate usage and traffic reporting that helps us understand overall engagement with the Service.
Depending on our configuration, Google Analytics may process:
- pages or screens viewed;
- features and links selected;
- browser and device information;
- approximate location derived from an IP address;
- cookie and technical identifiers; and
- diagnostic and performance information.
Google Analytics is not activated until you accept analytics, and it may involve a transfer of information to the United States — see Section 9. It is described further in our Cookie Policy.
Vercel
Vercel provides hosting and delivery infrastructure for our website and application.
It may process technical information needed to deliver and secure the Service, including:
- IP addresses;
- request and connection information;
- browser and device information;
- hosting and security logs; and
- diagnostic and performance information.
Sentry
Sentry provides error monitoring, helping us detect and fix faults in the Service. When an error occurs, it may process technical diagnostic information such as browser and device information, the page or action where the error happened, and error details. We configure Sentry to strip request bodies, cookies and other personal information from error reports before they are sent.
Other disclosures
We may also share personal information where reasonably necessary:
- with professional advisers, including accountants, insurers, solicitors or consultants;
- to comply with a legal or regulatory obligation;
- in response to a valid request from a court, regulator or law-enforcement authority;
- to investigate fraud, security incidents, misuse or threats to users;
- to establish, exercise or defend legal claims; or
- in connection with a proposed sale, restructuring or transfer of Adaptiv, subject to appropriate confidentiality and data-protection safeguards.
We do not sell your personal information.
Where a provider processes personal information on our behalf, we put appropriate contractual and data-protection arrangements in place. Further information about where our providers process information and the safeguards used for international transfers is provided in Section 9.
Marketing communications
We send marketing emails only where you have actively chosen to receive them.
Marketing communications may include:
- product and feature announcements;
- training and coaching content;
- promotional offers;
- surveys and requests for feedback; and
- news about Adaptiv.
Marketing consent is:
- separate from accepting our Terms and Conditions or creating an account;
- optional and not required to use Adaptiv;
- obtained through a clear affirmative action;
- never based on a pre-ticked box; and
- recorded together with the date, time and consent wording that applied.
We do not use injury, pain-site or movement-restriction information to target or personalise marketing communications.
Withdrawing your consent
You can withdraw your marketing consent at any time by:
- using the unsubscribe link included in a marketing email;
- updating your communication preferences within your account, where available; or
- contacting support@adaptivperformance.co.uk.
Withdrawing marketing consent will not affect your ability to use Adaptiv.
After you unsubscribe, we may retain your email address and limited information on a suppression list. This allows us to record your preference and ensure that we do not send you further marketing communications.
Service communications
We may continue to send communications that are necessary to operate your account or provide the Service, including:
- email verification and password-reset messages;
- security alerts;
- subscription, payment and renewal notices;
- cancellation confirmations;
- changes to our Terms, Privacy Policy or Service; and
- responses to support or privacy requests.
These are service communications rather than marketing communications. We will not include unnecessary promotional content in service communications.
Cookies and analytics
Adaptiv uses cookies and similar technologies, including browser storage, to operate, secure and improve the Service.
Strictly necessary technologies
We use certain technologies where they are necessary to:
- keep you signed in;
- authenticate your account;
- maintain the security of the Service;
- remember your privacy and cookie choices;
- process subscriptions and payments; and
- provide features you have requested.
These technologies are necessary for the Service to function and cannot normally be disabled through our cookie settings.
Analytics technologies
With your consent, we use PostHog and Google Analytics to help us understand how users interact with Adaptiv, diagnose problems and improve the performance and usability of the Service.
Depending on our configuration, these tools may process information such as:
- pages or screens viewed;
- features used;
- buttons and links selected;
- browser and device information;
- technical identifiers; and
- diagnostic, error and performance information.
We do not activate non-essential analytics technologies until you have made a choice through our cookie consent controls.
You can accept or reject analytics technologies and change your preferences at any time through the Cookie settings link available in the footer of our website.
Rejecting analytics technologies will not prevent you from creating an account, subscribing or using the core features of Adaptiv.
Third-party technologies
Some providers, including Stripe, may use cookies or similar technologies when you interact with their services. Where you are redirected to a third-party website, that provider’s own privacy and cookie policies apply.
More information about the specific technologies we use, their purposes and how long they remain active is available in our Cookie Policy.
Data storage and international transfers
Adaptiv uses cloud-based service providers to operate the Service. Although we select European hosting regions where they are available, some providers and their subprocessors may process personal information outside the United Kingdom or European Economic Area.
Primary application data
Our primary application database and authentication infrastructure are provided by Supabase and hosted in its West EU region in Ireland.
This is where we store core account and authentication information, intake answers, training programmes, logged sessions, coaching feedback, subscription status and any injury, pain-site or movement-restriction information you choose to provide.
Analytics data
We use PostHog Cloud EU for product analytics. Our PostHog data is hosted within the European Union in Frankfurt, Germany.
The information sent to PostHog depends on our analytics configuration and may include product interactions, technical identifiers, browser or device information, and diagnostic information.
Where you have accepted analytics, we also use Google Analytics. Google may process the information it collects in the United States and other countries where it or its subprocessors operate. This transfer relies on the safeguards described under “Transfer safeguards” below, including the UK Extension to the EU–US Data Privacy Framework where applicable.
AI programme generation
We use the Anthropic API to generate and adapt training programmes.
Relevant information may be sent to Anthropic where it is necessary to produce a programme or coaching response. This may include training goals, experience, equipment, availability, logged performance, recovery feedback and any injury, pain-site or movement-restriction information that you have chosen to provide.
Anthropic may process this information outside the United Kingdom and European Economic Area. Anthropic’s commercial Data Processing Addendum applies to our use of the API and includes contractual safeguards for international transfers.
Under Anthropic’s standard API retention arrangements, API inputs and outputs are normally deleted from Anthropic’s systems within 30 days, except where a different retention period applies, retention is required by law, or information must be retained to enforce Anthropic’s usage policies.
Anthropic states that information submitted through its commercial API is not used to train its models by default.
Website hosting
Our website and application are hosted using Vercel. We configure application compute within London or European regions where available.
Vercel operates a global content-delivery and hosting network. This means that technical information, including IP addresses, request information, device or browser information, and hosting or security logs, may be processed in the United States or other countries where Vercel or its subprocessors operate.
Email delivery
We use Loops to send account, transactional and marketing emails. Information processed by Loops may include your email address, display name, email preferences, subscription status and information needed to select or trigger relevant communications.
Loops is based in the United States, and personal information processed through its services may be transferred to and stored in the United States or other locations used by its service providers.
Payments
Subscription payments are processed by Stripe. Stripe may process billing, subscription and transaction information in the United States and other countries where it or its service providers operate.
Transfer safeguards
Where personal information is transferred outside the United Kingdom, we take steps designed to ensure that it remains protected in accordance with UK data-protection law.
Depending on the provider and destination, these measures may include:
- transfers to countries covered by UK adequacy regulations;
- the UK Extension to the EU–US Data Privacy Framework, where applicable;
- the UK Addendum to the European Commission’s Standard Contractual Clauses;
- the UK International Data Transfer Agreement; or
- another transfer mechanism permitted under UK data-protection law.
We enter into data-processing terms with our service providers where required and review the safeguards they use for international transfers.
You may contact support@adaptivperformance.co.uk if you would like further information about the safeguards used for a particular international transfer.
Data security
We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, unlawful use, accidental loss, alteration, disclosure or destruction.
The measures we use include, where appropriate:
- encrypted HTTPS connections for information transmitted between your device and the Service;
- secure account authentication;
- access controls designed to restrict personal information to authorised persons and systems;
- role-based and least-privilege access to administrative systems;
- database security controls;
- monitoring and logging designed to identify errors, suspicious activity and unauthorised access;
- secure management of credentials, API keys and other system secrets;
- managed cloud infrastructure provided by established service providers;
- testing and review of security controls;
- processes for responding to security incidents and personal-data breaches; and
- contractual and security requirements for service providers that process personal information on our behalf.
Because injury, pain-site and movement-restriction information may reveal information about your health, we take its sensitive nature into account when assessing the security measures required.
We regularly review our technical and organisational measures and may update them as the Service, technology and risks evolve.
No website, application or method of electronic storage can be guaranteed to be completely secure. However, we work to reduce the risk of personal information being lost, misused, accessed without authorisation, altered or disclosed.
If we become aware of a personal-data breach, we will investigate it and take appropriate action. Where required by data-protection law, we will notify the Information Commissioner’s Office and affected individuals.
Data retention
We retain personal information only for as long as it is needed for the purposes described in this Privacy Policy, including providing the Service, meeting our legal obligations, resolving disputes, maintaining security and preventing fraud.
The periods we normally apply are set out below.
| Information | How long we retain it |
|---|---|
| Account information | Retained while your account remains active. If you delete your account, this information will normally be deleted or anonymised from our active systems within 30 days, unless we are required to retain particular information for legal, security or fraud-prevention purposes. To prevent misuse of free trials, we retain a pseudonymised record after deletion — a keyed cryptographic hash of your email address linked to your trial history. It cannot be read back to reveal your email address and is used only to apply the trial rules if the same address returns. |
| Training and coaching information | Retained while your account remains active so that you can access your programme and training history. It will normally be deleted or anonymised within 30 days after account deletion. |
| Injury, pain-site and movement-restriction information | Retained while your account remains active and you continue to consent to its use. If you remove the information, withdraw your consent or delete your account, it will normally be deleted from our active systems within 30 days. |
| Subscription and transaction information | Retained while your subscription and account remain active. Records required for tax, accounting, refund, fraud-prevention or legal purposes may be retained for up to six years after the end of the relevant financial or tax period. |
| Customer-support correspondence | Normally retained for up to two years after the enquiry has been resolved. Information may be kept for longer where it relates to an ongoing complaint, dispute, security incident or legal claim. |
| Privacy requests and complaints | Normally retained for up to three years after the request or complaint has been closed, so that we can demonstrate how it was handled and meet our legal obligations. |
| Security, authentication and technical logs | Normally retained for up to 12 months, unless a longer period is necessary to investigate fraud, misuse, unauthorised access, a security incident or a legal claim. |
| Analytics information | Retained for the period configured within our analytics systems and normally for no longer than 24 months, after which it is deleted or anonymised. |
| Marketing information | Retained while you remain subscribed to marketing communications. If you unsubscribe, we may retain limited information on a suppression list so that we can respect your request and avoid sending further marketing messages. |
| Consent records | Retained while we rely on your consent and afterwards for as long as reasonably necessary to demonstrate that valid consent was obtained and that any withdrawal request was respected. |
Some information may remain temporarily within secure system backups after it has been removed from our active systems. Backup copies are protected from ordinary use and are deleted or overwritten in accordance with our backup-retention cycle.
Where information has been anonymised so that it can no longer identify you, we may retain and use it for statistical, analytical and service-improvement purposes.
We may retain information for longer than the periods stated above where this is reasonably necessary to comply with a legal or regulatory obligation, establish or defend legal claims, investigate fraud or security incidents, or respond to a lawful request from a public authority.
We review our retention periods periodically and securely delete or anonymise information when it is no longer required.
Your data-protection rights
Under UK data-protection law, you have a number of rights regarding your personal information.
These rights do not apply in every circumstance, and there may be situations where we are unable to fully comply with a request. Where this happens, we will explain the reason unless the law prevents us from doing so.
Your rights may include:
Right of access
You can ask us to confirm whether we process your personal information and request a copy of the information we hold about you.
Right to rectification
You can ask us to correct personal information that is inaccurate or complete information that is incomplete.
Right to erasure
You can ask us to delete your personal information in certain circumstances.
This right is not absolute. We may need to retain limited information where required for legal, accounting, security, fraud-prevention or dispute-resolution purposes.
Right to restrict processing
You can ask us to temporarily limit how we use your personal information in certain circumstances, including while we investigate a concern about its accuracy or use.
Right to object
You can object to processing based on our legitimate interests.
Where you object, we will stop the relevant processing unless we have compelling legitimate reasons to continue or the information is needed to establish, exercise or defend legal claims.
You have an absolute right to object to the use of your personal information for direct marketing.
Right to withdraw consent
Where we rely on your consent, you may withdraw it at any time.
This includes consent for:
- marketing communications;
- non-essential analytics technologies; and
- processing injury, pain-site or movement-restriction information.
Withdrawing consent does not affect processing that took place before consent was withdrawn.
Withdrawing consent for injury, pain-site or movement-restriction information may reduce our ability to account for that information when generating or adapting your programme.
Right to data portability
Where processing is based on consent or contract and carried out using automated systems, you may have the right to receive personal information you provided to us in a structured, commonly used and machine-readable format.
Where technically feasible, you may also ask us to transfer that information directly to another provider.
Rights relating to automated processing
You have the right to receive information about automated processing involving your personal information.
Adaptiv does not use solely automated processing to make decisions that produce legal effects concerning you or similarly significantly affect you.
How to exercise your rights
To exercise any of these rights, contact support@adaptivperformance.co.uk.
Please explain which right you wish to exercise and provide enough information for us to identify your account and understand your request.
We may ask for reasonable information to verify your identity before fulfilling a request. We will only request information necessary to confirm that we are dealing with the correct person.
We normally respond to valid requests without undue delay and within one month. In some circumstances, such as where a request is complex or multiple requests are made, we may extend this period by up to two additional months. If we need an extension, we will explain this to you within the initial one-month period.
You will not normally be charged for exercising your rights. However, the law may allow us to charge a reasonable fee or refuse a request where it is manifestly unfounded or excessive.
Data-protection complaints
If you are concerned about how we have collected, used, stored, shared or protected your personal information, you can make a data-protection complaint by contacting support@adaptivperformance.co.uk.
Please state that your message is a data-protection complaint and provide enough information for us to understand and investigate your concern.
We will:
- acknowledge your complaint within 30 days;
- investigate it without undue delay;
- take appropriate steps to resolve the issue;
- keep you informed where appropriate; and
- explain the outcome of our investigation.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator responsible for data protection.
We would appreciate the opportunity to address your concerns first, but you may contact the Information Commissioner’s Office at any time.
Age requirements
Adaptiv is intended only for adults aged 18 years or older.
You must be at least 18 years old to create an account, subscribe to a paid plan or use the Service. When registering, you will be asked to confirm that you meet this age requirement.
We do not knowingly allow individuals under the age of 18 to create or use an Adaptiv account, and we do not knowingly collect personal information from them.
If we become aware that an account has been created or used by someone under 18, we may suspend or close the account and delete or anonymise the associated personal information, unless we are required to retain limited information for legal, security or fraud-prevention purposes.
If you believe that someone under the age of 18 has provided personal information to Adaptiv, please contact support@adaptivperformance.co.uk.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to Adaptiv or the features we provide;
- changes to the personal information we collect or how we use it;
- changes to our service providers or data-storage arrangements;
- changes to applicable laws, regulations or regulatory guidance; or
- improvements to the clarity or accuracy of this Policy.
The latest version will always be available on our website and will show the date on which it was last updated.
Where a change is significant or may materially affect your privacy rights, we will bring it to your attention through an appropriate method, such as an email, an in-app message or a prominent notice on our website.
If we intend to use your personal information for a new purpose that is not compatible with the purposes described when it was collected, we will provide you with relevant information before beginning that new processing and, where required, ask for your consent.
We recommend that you review this Privacy Policy periodically so that you remain informed about how we use and protect your personal information.
Contact
Questions about privacy or data protection?
- Website
- adaptivperformance.co.uk
You can contact us using the details above if you:
- have a question about this Privacy Policy;
- want to exercise a data-protection right;
- want to withdraw consent;
- want to report a privacy or security concern; or
- want to make a data-protection complaint.
Please provide enough information for us to understand your request and identify the relevant account. We may ask for reasonable information to verify your identity before disclosing, changing or deleting personal information.
Information about making a data-protection complaint, including your right to complain to the Information Commissioner’s Office, is provided in Section 12.