Privacy Policy

Last Updated: November 2, 2025

Introduction

Beyond Boundaries (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website beyondboundaries.ltd-co.uk and participate in our running programmes and services.

We collect only the information necessary to deliver safe, effective, and personalised coaching experiences, and we never sell your data.

Information We Collect

Personal Details

• Name: For training programmes and communications

• Email Address: For updates, training correspondence, and newsletters (where consented)

• Contact Information: Phone numbers and other details needed for coordination and safety

• Address: For emergency reference, insurance, or location-based grouping (postcode optional)

• Age: To ensure appropriate coaching and programme suitability

• Next of Kin: For emergency contact purposes

Health and Fitness Information

• Relevant medical history, fitness levels, injuries, and training goals (used solely for coaching and safety)

Training Data

• Performance metrics, race results, training logs, and progress information

Automatically Collected Information

• Usage Data: Information about how you interact with our website

• Device Information: Browser type, IP address, access times, and similar data

How We Use Your Information

We use your personal information for the following purposes:

• Training Programmes: Delivering personalised training plans from beginner to ultra-marathon level

• Event Management: Organising, scheduling, and communicating about running events and challenges

• Communication: Sending essential updates, safety information, and responses to inquiries

• Newsletter: Providing optional training tips, updates, and community news (only with your consent)

• Service Improvement: Analysing feedback and anonymised data to improve our services

• Community Building: Facilitating participant groups and social engagement

• Marketing: Sending promotional emails about programmes or events (only with your explicit consent)

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract: To deliver the coaching and training services you have requested.

• Legitimate Interests: To ensure participant safety and manage programmes effectively.

• Consent: Where you have agreed to receive marketing communications or share health information beyond what is strictly necessary for participation.

• Vital Interests: Where necessary to protect your safety or wellbeing in the event of illness or injury.

Health Information

We recognise the sensitive nature of health and fitness information.
All health-related data you provide is:

• Used exclusively for training and participant safety

• Stored securely and accessed only by authorised staff or coaches

• Never shared without your explicit consent

Processing of health data is carried out under Article 9(2)(a) of UK GDPR — with your explicit consent — for the purpose of providing safe and personalised training.

Emergency and First Aid Consent

By participating in our training programmes, you acknowledge that physical activity carries an element of risk. You consent to the following:

• Authorised Beyond Boundaries coaches or first aiders may administer basic first aid if required.

• In the event of a medical emergency, we may share relevant personal, medical, or emergency contact information with healthcare professionals, emergency responders, or event medical staff.

• This is done solely to protect your vital interests and ensure your safety.

Processing of such information is carried out under Article 6(1)(d) of UK GDPR (“processing necessary to protect vital interests”) and Article 9(2)(c) (“necessary to protect the vital interests of the data subject or another person where the data subject is physically or legally incapable of giving consent”).

Information Sharing

We do not sell, rent, or share your information, except in the following limited cases:

• Service Providers: Trusted partners (e.g. email systems, event platforms, or payment processors) under strict confidentiality agreements

• Event Partners: Where registration or timing services require relevant participant details

• Legal Requirements: If disclosure is required by law or to protect our legal rights

• With Your Consent: When you explicitly authorise us to share specific information

Your health and fitness data is always treated with strict confidentiality and used solely for training or safety purposes.

Data Security

We take appropriate technical and organisational measures to protect your data, including:

• Secure storage systems and restricted access

• Encrypted communications where possible

• Regular security checks and staff awareness training

No online system is completely secure, but we take all reasonable steps to protect your information.

Data Retention

We keep your personal data only as long as necessary:

• While you are an active participant in our programmes

• As required to provide ongoing services or meet legal obligations

• For a limited period after your last engagement (normally up to 12 months) for administrative or insurance purposes

Health and training data will be deleted or anonymised within 12 months of your last active participation unless retention is required by law.

Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the right to:

• Access – request a copy of your personal data

• Rectification – correct inaccurate or incomplete information

• Erasure – request deletion of your personal data

• Restriction – limit how we use your information

• Portability – request transfer of your data to another provider

• Object – object to processing for certain purposes

• Withdraw Consent – opt out of marketing or revoke consent at any time

To exercise your rights, please contact us using the details provided on our website.

Email Communications and Newsletter

You can unsubscribe from newsletters or marketing emails at any time by:

• Clicking the “unsubscribe” link in any email, or

• Contacting us directly through our website

You will still receive essential service-related emails about training programmes or events you’re registered for.

Cookies and Tracking

Our website may use cookies to:

• Improve browsing and user experience

• Analyse website performance and traffic

• Remember user preferences

If non-essential cookies (e.g. analytics or marketing) are in use, you’ll be asked for consent via a cookie banner.
You can adjust your browser settings to control cookie use.

Third-Party Links

Our website may contain links to third-party sites or registration platforms.
We are not responsible for their privacy practices and encourage you to review their policies before sharing personal information.

Children’s Privacy

Our services are not directed at individuals under 16.
If we learn we have inadvertently collected data from anyone under 16 without parental consent, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.
Any updates will appear on this page with an amended date, and significant changes will be communicated by email where possible.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us via the contact form or email listed on beyondboundaries.ltd-co.uk.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

Beyond Boundaries is fully committed to maintaining the confidentiality and integrity of your personal information, in compliance with the UK GDPR and the Data Protection Act 2018.