Privacy Policy

Who we are

Coach Jair is a trade name of Holland Football University, S.L.

Company

Holland Football University, S.L.

NIF (Spanish tax number)

B10811818

Address

Calle Benlliure 2, 03530 La Nucía

Email

jair@coachjair.com

1. Who is responsible for your data

Holland Football University, S.L. (Coach Jair), in Alicante. Write to us and we answer within 30 days.

Holland Football University, S.L., which trades as Coach Jair (“we”, “us”), is the data controller for the personal data described here. We operate from Alicante, Spain.

Registered details: Holland Football University, S.L. · NIF B10811818 · Calle Benlliure 2, 03530 La Nucía.

For any question about this policy, or to exercise any of the rights in section 10, contact us at jair@coachjair.com. We answer data requests within 30 days.

2. What this policy covers

Three separate things, with separate records.

We run three things that handle personal data, and they are deliberately separate from each other:

• The website (coachjair.com): enquiry forms, the free guide, and the Fuel Check calculator.
• The Training Hub: a private link sent to people who buy a programme, giving access to training PDFs.
• The app: an account-based training app with programmes, session logging, nutrition tracking, and direct messaging with Jair.

Buying a Training Hub programme does not create an app account, and an app account does not give Training Hub access. They hold separate records.

3. What we collect, and why

Line by line, with the lawful basis for each.

Everything we hold, what it is for, and what allows us to hold it:

• Website enquiries: your name, email address, phone number, sport or position, and anything you write or attach. Used only to reply and discuss coaching. Legal basis: steps taken at your request before entering a contract.
• The free guide (“The Performance Entry”): first name, email address, phone number, and whether you ticked the marketing opt-in. Used to send the guide, and, only if you ticked the box, occasional training tips and offers. Legal basis: your consent, which you can withdraw at any time.
• The Fuel Check calculator on the website: your sex, age, height, weight, sport, training load and goal. This runs entirely in your browser and is not sent to us or stored, unless you are signed in to the app and choose to save it as your targets.
• Training Hub access: your name and email from the purchase, and a device identifier for each device you open your link on. The device identifier exists to stop a personal link being shared with a whole squad; it is a random value stored on your device, not a fingerprint of your hardware. Legal basis: performing our contract with you, and our legitimate interest in preventing access being resold or shared.
• App account: your name, email address, and a securely hashed password. Legal basis: performing our contract with you.
• App training data: which sessions you have marked as done and when. Legal basis: performing our contract with you.
• App nutrition data: your saved Fuel Check inputs and targets, your weight log, and any calories and macros you log. See section 4. This is health data and gets stricter treatment.
• App messages: everything you and Jair write to each other in the app, and whether it has been read. Legal basis: performing our contract with you.
• Reminder emails (members only): a record of which reminder we sent you and when (a new month is ready, your check-in is waiting, the first questionnaire, a week without a session), and whether you have turned them off. Used so each reminder goes only once, and kept 90 days. Legal basis: performing our contract with you, and our legitimate interest in helping you use what you pay for. Turn them off with the link in any reminder, or in the app under Account.
• Payments: handled by Stripe. We receive confirmation of payment, the email used, and a payment or subscription reference. We never see or store your full card number.
• Server logs: our hosting provider records IP addresses and request details for security and reliability. Legal basis: our legitimate interest in keeping the service running and secure.

4. Health data: your weight, body metrics and nutrition

Article 9 data. You give consent by using it, and can take it back.

Your weight, body measurements, calorie and macro logs and the targets derived from them are data concerning health under Article 9 of the GDPR. That category has stricter rules than ordinary personal data, and we treat it accordingly.

We rely on your explicit consent to hold it. You give that consent by choosing to save targets or log an entry. Nothing in the nutrition tracker is filled in for you, and the rest of the app works without it.

You can withdraw that consent at any time by deleting the entries, or by deleting your account, both of which you can do yourself from the Account screen in the app. Withdrawing does not affect anything done before you withdrew.

We do not use this data to make any automated decision about you, we do not profile you with it, and we never share it with advertisers or data brokers. It is visible to Jair as your coach, and to nobody else.

5. Age, and athletes under 18

Sixteen to hold an account yourself. A parent holds it below that.

The app is for athletes aged 16 and over. Below 16, a parent or guardian sets up and holds the account and is the person we correspond with. That is the same rule as section 5 of the terms.

Spanish law lets a child consent to online services from the age of 14, and requires a parent or guardian to consent below that. Our own minimum of 16 sits above both, so the account holder is always someone who can consent for themselves.

The Fuel Check calculator refuses to produce results for anyone under 16, because calorie targets are not appropriate at that age.

For under-18s, nutrition targets are shown with a note recommending supervision from a parent, coach or doctor, and weight-loss goals carry an additional warning.

If you are a parent or guardian and believe a child has given us data without your involvement, contact us at jair@coachjair.com and we will delete it.

6. Who we share it with

Six providers, each under contract. Never for advertising.

We do not sell or rent your personal data. We never share it for advertising. It is shared only with the service providers we need to run the service, each of which processes it on our instructions under a data processing agreement:

• Vercel: website and app hosting, server logs, and cookieless visitor analytics that counts page visits.
• Neon: the database, and the authentication service that stores your login credentials. Hosted in the EU (Frankfurt).
• Resend: sending transactional email such as password resets, purchase confirmations, notifications that you have a new message, and reminders about your programme, which you can turn off in Account.
• Stripe: payment processing. Stripe is the controller of its own payment records; see stripe.com/privacy.
• Google: a private spreadsheet holding free-guide sign-ups.
• MailerLite: our email marketing tool. Used only where you ticked the consent box, to send the free-guide emails and news about new programmes. Every message has an unsubscribe link.

We will also disclose data where we are legally required to, for example in response to a valid legal order.

7. Where your data is held

The database is in the EU. US providers are covered by standard clauses.

Our database and authentication service are hosted in the European Union. Some of our providers are US-based companies that may process data outside the EEA.

Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses, or by the provider’s certification under the EU-US Data Privacy Framework.

8. How long we keep it

Until you delete it, or until the law says we may stop keeping it.

How long each kind of record lasts:

• Enquiries: up to 24 months from your last contact with us, then deleted.
• Free-guide sign-ups: until you unsubscribe or ask us to delete them.
• Training Hub access records: for as long as your access lasts, plus the period we are legally required to keep sales records (in Spain, generally 6 years for accounting purposes).
• App accounts and everything in them, meaning training history, nutrition logs and messages: until you delete your account. Delete it and this data is erased immediately; it is not held in a recoverable state afterwards.
• Payment records: kept by us and by Stripe for as long as tax and accounting law requires.
• Server logs: a short rolling window set by our hosting provider, typically no more than 30 days.

9. Security

Encrypted, hashed, and checked on the server on every request.

All traffic is encrypted in transit. Passwords are hashed by our authentication provider and are never visible to us in readable form. Access to the app’s data is checked on every request against the account making it, on the server, not in your browser.

The admin tools that can see athlete data are restricted to Jair’s own account and re-check that on every request.

No system is perfectly secure. If a breach ever affects your rights and freedoms, we will notify the Spanish data protection authority within 72 hours and tell you directly where the law requires it.

10. Your rights

Two of them are buttons in the app. The rest, email us.

Under the GDPR you have the right to access your data, correct it, have it erased, restrict or object to how we use it, receive it in a portable format, and withdraw any consent you have given.

Two of these you can exercise yourself, immediately, from the Account screen in the app:

• “Download my data” gives you a complete machine-readable copy of everything the app holds about you.
• “Delete my account” erases it.

For anything else, or if you do not have an app account, email jair@coachjair.com and we will action it within 30 days.

If you think we have handled your data badly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority in your own EU country.

11. Cookies and local storage

No advertising or tracking cookies, which is why there is no banner.

We do not use advertising or tracking cookies. We do count how many people visit each page, using Vercel Analytics. It is cookieless: it stores nothing on your device, does not build a profile of you, and cannot follow you to other websites. That is why it needs no banner.

We do store a small amount of data in your browser for the service to work at all:

• a sign-in session token, so you stay logged in
• your language preference
• in the Training Hub only, the device identifier described in section 3

These are strictly necessary for the service you asked for, which is why there is no cookie banner asking permission for them.

12. Changes to this policy

We will tell you before anything material changes.

If we change how we handle your data, we will update this page and the date at the top of it. Where a change materially affects you (a new purpose, a new category of data, or a new processor handling your health data) we will tell account holders by email before it takes effect.