Legal

Privacy Policy

Last updated: 2026-05-04

1. Who we are

The data controller responsible for your information is ATG For Coaches, a US-based company operating the coach directory at this site worldwide.

Mailing address: PO Box 1018, Clearwater, FL 33757, USA
For privacy questions, data requests, or anything else covered by this policy, contact us at legal@atgforcoaches.com.

2. What information we collect

2.1 Account information (coaches)

When you sign in as a coach, we store your login email address (used for authentication via Supabase) and any profile information you choose to add: display name, photo, banner image, bio, specialization, sports, equipment, location, contact channels, social links, and gym details. None of these fields is required — you decide what is public.

2.2 Inquiry submissions (visitors)

When a visitor sends a coach an inquiry through a profile page, we collect the name, email address, and message they enter. Our server also records first-touch attribution data (UTM parameters, referral codes, referrer URL, landing page) and an IP-derived approximate city and country (via Vercel request headers) to help the coach understand where the lead came from. Inquiry contents are forwarded by email to the coach via Resend; we keep a record on our database for support and abuse-prevention.

2.3 Analytics (with your consent)

If you have accepted analytics cookies, we collect anonymous usage data through PostHog: pageviews, button clicks, search queries, and session duration. We may attach the first-touch attribution mentioned above as an event property. Analytics events do not include passwords, full inquiry contents, or the bodies of profile edits.

2.4 Cookies

See the Cookie Policy for the full list of cookies, what each does, and how long it is kept.

3. Why we use your information

The legal bases on which we process your information are:

• Contract — to authenticate coaches, host their profiles, and deliver inquiries to them.
• Legitimate interest — to prevent abuse and spam, to operate the directory securely, and (where consent does not apply, e.g. server logs) to understand whether the service is working.
• Consent — for analytics cookies (PostHog and our first-touch attribution cookie). You can withdraw this consent at any time from the footer.

4. Who we share information with

We share information with the following third-party processors. We do not sell your information to anyone.

• PostHog — product analytics. Receives only what you allow via the Analytics consent.
• Supabase — authentication, database, file metadata.
• Mapbox — map tiles and rendering. Sees your IP address when fetching tiles.
• Cloudflare Images — coach photos and gym images delivery.
• Resend — transactional email (login links, inquiry emails).
• Vercel — hosting and edge runtime. Sees IP, user agent, request paths.
• Google Fonts — Inter font family. Self-hosted by Next.js, so requests do not reach Google in normal use.
• Loom — when a coach embeds a Loom intro video, Loom serves that video and may set its own cookies if the visitor plays it.
• Google Cloud Storage — read-only delivery of legacy coach images that pre-date the move to Cloudflare Images.

5. How long we keep information

• Coach accounts and profiles — kept for as long as the account is active. On deletion request, we remove the row and the associated profile assets.
• Inquiry records — kept for 24 months for support and abuse-prevention, then deleted.
• Analytics events — retained on PostHog for up to 12 months (PostHog default).
• Server logs — short-lived (Vercel default rolling window) for security and debugging.

6. Your rights

6.1 If you are in the EU, UK, or another GDPR jurisdiction

You have the right to:

• access the information we hold about you;
• correct inaccurate information;
• request erasure of your information;
• request a portable export of your information;
• object to processing based on legitimate interest;
• withdraw analytics consent at any time (footer link "Manage cookies");
• lodge a complaint with your local data-protection authority.

6.2 If you are in California (CCPA / CPRA)

You have the right to:

• know what personal information we collect, use, and share;
• request deletion of your personal information;
• request correction of inaccurate information;
• opt out of any “sale” or “sharing” of your personal information for cross-context behavioural advertising. We do not sell or share personal information for advertising; clicking “Reject all” on the consent banner is sufficient to opt out of analytics.

To exercise any of these rights, email legal@atgforcoaches.com. We will respond within 30 days.

7. International data transfers

Most of our processors (PostHog, Supabase, Vercel, Cloudflare, Resend, Mapbox) are US-based. For visitors in the EU, UK, or other jurisdictions with data-transfer rules, transfers happen under each provider's Standard Contractual Clauses (SCCs) or equivalent safeguards.

8. Children

The directory is not intended for children under 16. Coaches must be of legal age in their jurisdiction to operate a profile.

9. Changes to this policy

When we materially change this policy we update the “Last updated” date at the top of this page and re-prompt the cookie banner so you can review your consent.