Privacy Policy

This policy explains how Channon Coaching Limited ("we", "us", "our") collects and uses personal data when you visit markchannon.com or use our services. We're committed to handling your data lawfully, fairly and transparently in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

We are the data controller for the personal data described in this policy.

• Company: Channon Coaching Limited (registered in England, company no. 13446848)
• Registered office: Channon Studios, The Limes, Cobden Road, Sevenoaks, England, TN13 3UB
• Contact: mark@markchannon.com

2. What data we collect

• Information you give us — name, email address and any message content when you book a programme, get in touch, or sign up for updates.
• Payment information — when you buy a programme, payments are processed by Stripe. We receive the transaction outcome, your email, billing country and an anonymised payment reference. We do not see or store your full card details.
• Site usage data — if you consent to analytics or marketing cookies, we receive aggregated information about how you use the site (pages viewed, device, approximate location based on IP). See our Cookie Policy.
• Email engagement — for emails we send (e.g. order confirmations), our email provider may record whether the message was delivered or bounced so we can keep our systems clean.

3. Why we use it and our lawful basis

4. Who we share it with

We only share personal data with processors who help us run the site and the business:

• Stripe Payments Europe, Ltd. — payment processing.
• Resend — sending transactional emails (order confirmations, etc.).
• Supabase — secure database and infrastructure for site data.
• Lovable — website hosting and delivery.
• Google (Analytics 4) — only if you accept analytics cookies.
• Meta Platforms (Facebook Pixel) — only if you accept marketing cookies.
• HMRC, professional advisers and law enforcement — where required by law.

We never sell your personal data.

5. International transfers

Some of our processors (e.g. Stripe, Google, Meta, Resend) are based outside the UK. When data is transferred outside the UK we rely on safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision by the UK government.

6. How long we keep it

• Purchase and accounting records — at least 6 years after the end of the tax year they relate to (UK statutory requirement).
• Customer support correspondence — up to 3 years after the last interaction.
• Analytics data — as configured in Google Analytics (currently 14 months) and only if you've consented.
• Marketing email lists — until you unsubscribe or ask us to delete you.

7. Your rights

Under the UK GDPR you have the right to:

• Be informed about how your data is used (this policy).
• Request a copy of the personal data we hold about you (subject access).
• Have inaccurate data corrected.
• Have your data erased ("right to be forgotten") where applicable.
• Restrict or object to certain processing.
• Data portability where applicable.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email mark@markchannon.com. We aim to respond within one month.

If you're unhappy with how we've handled your data, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

8. Security

We use industry-standard measures including TLS encryption in transit, encrypted storage, access controls and processor agreements with our suppliers. No system is ever 100% secure, but we work hard to protect your data.

9. Children

This site and our services are intended for adults. We don't knowingly collect personal data from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page shows when it last changed. Material changes will be highlighted on the site.