Privacy Notice
Last updated · 19 April 2026
This notice explains what personal data I collect when you use amirardekani.com, how I use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR). It is written to be readable — if anything is unclear, email me and I will explain.
1. Who is the data controller?
Amir Ardekani, sole trader, is the data controller for this site. You can reach me at amirardekanian@gmail.com. I operate from the United Kingdom.
2. What I collect and why
2.1 Coaching intake form
When you complete the application form at /form.html, you voluntarily submit information such as your name, email address, tennis background, training history, health-relevant information (including injuries), goals, and logistics (availability, equipment). I need this information to assess suitability for coaching and to design a safe and appropriate programme for you.
Lawful basis: performance of a contract (Article 6(1)(b) UK/EU GDPR), and, for health-relevant information you disclose about injuries or medical history, your explicit consent (Article 9(2)(a) UK/EU GDPR).
Form submissions are delivered via Web3Forms, a form-relay service that forwards the submission to my email inbox. Web3Forms acts as a processor on my behalf and does not use your data for its own purposes. Review their privacy policy on their site.
If you are a coaching client using your private training app, the app records your training progress — which sessions and exercises you complete, weights logged, effort (RPE) ratings, pre-session readiness check-ins, and any notes you add. This information is saved on your device and also backed up to a secure database provided by Supabase (hosted in the EU), so that I, as your coach, can review your progress and support your training. Only I can access it; Supabase acts as a processor on my behalf. This data is kept for as long as you are an active coaching client and removed on request.
2.2 Programme app data
If I build a programme for you, it lives at amirardekani.com/program.html?client=<your ID>. Your daily programme content is served as a static JSON file. The app uses your browser’s local storage on your device to remember small pieces of state (completed sessions, weight logs, RPE scores, whether you’ve dismissed the “add to home screen” prompt). This data never leaves your device and is not sent to me automatically. If you clear your browser data, this local progress is deleted.
2.3 Analytics
I use Plausible Analytics to understand aggregate, anonymous visit patterns (page views, referrer, country, device type). Plausible is a privacy-first, cookie-less analytics service hosted in the EU. It does not set cookies, does not track users across sites, and does not collect personally identifiable information. No individual user can be identified from the data I receive.
Lawful basis: legitimate interests (Article 6(1)(f)) — measuring aggregate traffic to improve the site. Because no identifiers are stored or returned to your device, this processing falls outside the scope of PECR / ePrivacy cookie-consent requirements.
2.4 Embedded video (YouTube)
Exercise demonstration videos are embedded from YouTube using the youtube-nocookie.com “privacy-enhanced” domain. YouTube will not set tracking cookies until you actively press play. When you do press play, Google (YouTube’s operator) may collect data according to Google’s privacy policy. I have no control over that processing. If you prefer not to share data with Google, do not press play on embedded videos.
2.5 Hosting and server logs
This site is hosted on GitHub Pages. GitHub may retain temporary request logs (including IP address and user-agent) for security, abuse prevention, and service operation. See GitHub’s privacy statement. I do not receive or access these logs.
3. What I do not do
- I do not sell, rent, or trade your personal data.
- I do not serve advertising or use advertising trackers.
- I do not profile you for marketing or build behavioural profiles.
- I do not use cookies for analytics, marketing, or tracking.
4. Retention
Intake-form submissions are retained for as long as our coaching relationship is active and for up to 24 months afterwards, so I can respond to follow-up questions and honour any obligations. You may request earlier deletion at any time.
Plausible’s aggregate, anonymous analytics data is retained by Plausible per their policy and cannot be linked back to you individually.
Local-storage data on your device persists until you clear it yourself.
5. International transfers
Web3Forms, Plausible, GitHub, and YouTube are operated by organisations that may process data in the UK, EU, or other jurisdictions (including the United States). Where data leaves the UK or the EEA, these providers rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions. You can review each provider’s policy via the links above.
6. Your rights
Under UK and EU GDPR you have the right to:
- Request a copy of the personal data I hold about you (right of access).
- Ask me to correct inaccurate data (rectification).
- Ask me to delete your data (erasure), subject to exceptions.
- Restrict or object to certain processing.
- Receive your data in a portable, machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, your national data-protection authority.
To exercise any of these rights, email amirardekanian@gmail.com. I will respond within one month.
7. Security
I take reasonable, proportionate steps to protect your data: encrypted transport (HTTPS), the minimum collection necessary, strong account security on my email and hosting providers. No transmission over the internet can be guaranteed 100% secure; if I ever become aware of a personal-data breach that is likely to result in risk to your rights, I will notify you and the ICO as required by law.
8. Children
This service is intended for adults. If you are under 18, please apply only with a parent or guardian’s involvement.
9. Changes to this notice
If I update this notice, I will change the “last updated” date at the top. Material changes will be communicated to active coaching clients by email.