Privacy policy

This English version is provided for customers outside Denmark and is pending legal review. In case of any discrepancy between this version and the Danish version published at coachplan.dk, the Danish version applies.

Coachplan ApS
CVR (Danish company reg. no.): 41513712
Email: support@getcoachplan.com

Coachplan is the data controller for the processing of the personal data we receive about you. This privacy policy describes how we collect, use and protect your data.

We collect the following categories of personal data:

Account information: Name, email address, phone number and address when you create your account.

Payment information: Payment card details are processed by our payment provider, Stripe, and are not stored on our servers.

Usage data: Information about how you use the platform, including login times, the features you use and device information.

Client data: As a coach, you upload data about your clients (names, email addresses, training programs, meal plans, measurements and so on). You are the data controller for your clients' data, and Coachplan acts as your data processor.

Cookies and technical data: See section 7 on cookies.

We process your personal data for the following purposes:

• Providing and operating the Coachplan platform
• Creating and managing your account
• Processing payments and invoicing
• Communicating with you about your account, updates and support
• Improving and developing our product
• Complying with legal requirements

We process your information on the following legal bases under the GDPR:

• Performance of a contract (Art. 6(1)(b)): Processing that is necessary to provide the service you have signed up for.
• Legitimate interest (Art. 6(1)(f)): Analyzing and improving the platform, and preventing misuse.
• Consent (Art. 6(1)(a)): Marketing emails and newsletters you actively sign up for. You can withdraw your consent at any time.
• Legal obligation (Art. 6(1)(c)): Keeping accounting records as required by the Danish Bookkeeping Act.

We share your information with the following data processors:

• Stripe — Payment processing (EU/US, certified under the EU-US Data Privacy Framework)
• Amazon Web Services (AWS) — Hosting and data storage (EU region)
• Postmark — Transactional emails
• Sentry — Error reporting and monitoring
• Tawk.to — Live chat on the website
• Google (Google Analytics) — Statistics on how the website is used.
• Meta Platforms (Meta Pixel) — Measuring and targeting ads on Facebook and Instagram.

We have data processing agreements in place with all of the above. We never sell your data to third parties.

We keep your personal data for as long as you have an active account with us. When your account is deleted:

• Account data is deleted within 30 days
• Accounting data is kept for 5 years, as required by the Danish Bookkeeping Act
• Backups are deleted within 90 days

We use cookies in three categories:

• Necessary and functional cookies: Session handling, authentication and our live chat (Tawk.to). These are needed for the website and platform to work, and are set without consent.
• Statistics: Google Analytics, so we can see how the website is used and what we can improve.
• Marketing: Meta Pixel, so we can measure the effect of our ads on Facebook and Instagram and show ads to visitors who have been on the website.

You can always block or delete cookies in your browser settings, or use your browser's "Do Not Track" feature.

You have the following rights under the GDPR:

• Access: You can request a copy of the information we hold about you.
• Rectification: You can ask us to correct inaccurate information.
• Erasure: You can ask us to delete your information (subject to legal requirements).
• Restriction: You can ask us to restrict the processing of your data.
• Data portability: You can receive your data in a structured, machine-readable format.
• Objection: You can object to processing based on legitimate interest.

Contact us at support@getcoachplan.com to exercise your rights. We respond to requests within 30 days.

We protect your data with:

• Encryption in transit (TLS/SSL) and at rest (AES-256)
• Access control and logging
• Regular security updates
• Hosting in the EU (AWS eu-west-1)

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
www.datatilsynet.dk

We may update this privacy policy. We will notify you of material changes by email or through a notification in the platform. The latest version is always available on this page.