Privacy policy

1. Who we are

Coach Plus Limited (NZBN 9429053408150) operates CoachPlus. We're an "agency" under the New Zealand Privacy Act 2020.

2. What we collect

To run a booking platform we collect: your name, phone, email, suburb, the sessions you book, the athletes you book for, payment details (handled by Stripe), and how you use the site (basic analytics).

3. Why we collect it

We use this information to take bookings, process payments, send you reminders, prevent fraud, and improve the service.

4. Who we share it with

Your name, phone and session details are shared with the coach you book with — they need this to run the session. Card data goes only to Stripe (we never see it). Your phone goes to TNZ Group when we send you an SMS. Your email goes to SendGrid when we send you a transactional email. When you search an address or suburb, what you type is sent to Google Maps to return suggestions. The site is delivered and protected by Cloudflare, which processes technical data such as your IP address as traffic passes through it. We use Anthropic’s AI to help summarise coaches’ public profile bios (no booker contact details are sent). We never sell your data, and we never share it with advertisers.

5. How long we keep it

Active accounts are kept for as long as the account exists. If you delete your account, identifying data is removed within 30 days. We retain anonymised booking and payment records for 7 years (NZ tax requirement).

6. Your rights

Under the NZ Privacy Act you can: ask what we hold about you, ask us to correct it, ask us to delete it (subject to the 7-year tax retention above), and complain to the Privacy Commissioner.

7. Security

All data is transmitted over HTTPS. Card data is tokenised and held by Stripe. Database access is restricted to a small team. We run security audits regularly.

8. Cookies

We use first-party cookies to keep you signed in and remember your preferences. We use PostHog (a privacy-focused analytics tool) for product analytics — no third-party advertising trackers.

9. Where your data is stored

CoachPlus is hosted on Railway, and several of the providers we rely on — including Stripe, SendGrid, PostHog, Cloudflare, Google, and Anthropic — are based overseas, mainly in the United States. This means some of your personal information is stored or processed outside New Zealand. We only use providers that are subject to privacy protections comparable to the New Zealand Privacy Act 2020, and we share only the information each one needs to do its job.

10. Changes

If we change this policy in a material way, we'll email you 14 days before it takes effect.

Contact

Privacy questions or requests: privacy@coachplus.co.nz. We respond within 1 business day.