This document provides a summary of how MyCoachDeveloper processes and protects personal data on behalf of clubs and individual users.
It is designed to support transparency and due diligence.
1. Roles and Responsibilities
MyCoachDeveloper is operated by Joe Morrissey, UK based sole trader.
For the purposes of UK data protection law:
- For individual subscriptions, MyCoachDeveloper acts as Data Controller.
- For club subscriptions, MyCoachDeveloper acts as Data Processor in respect of coaching and development data entered by the organisation.
The subscribing club or organisation acts as Data Controller for the data created within its organisational account.
2. Categories of Data Processed
Depending on usage, the platform may process:
Account Data
- Names
- Email addresses
- Roles within club
Coaching and Development Data
- Session plans
- Observations
- Reflections
- Performance tracking information
- AI generated outputs
Technical Data
- IP addresses
- Device and browser information
- Usage logs
Payment Data
- Processed directly by Stripe
- MyCoachDeveloper does not store full card details
The platform is not intended for the storage of special category data under UK GDPR.
3. Purpose of Processing
Data is processed solely to:
- Provide and operate the MyCoachDeveloper platform
- Enable coach development tracking
- Generate AI assisted insights
- Manage subscriptions
- Maintain system security
Data is not sold or shared for marketing purposes.
4. Subprocessors
MyCoachDeveloper uses carefully selected third party providers to support service delivery. These may include:
- Stripe for payment processing
- AI service providers such as OpenAI for AI functionality
- Hosting and infrastructure providers via the Emergent platform
- Database services such as MongoDB
All subprocessors are engaged under contractual safeguards.
A list of subprocessors can be provided upon request.
5. International Transfers
Where third party providers process data outside the United Kingdom, appropriate safeguards are in place, such as:
- Standard contractual clauses
- Adequacy regulations
6. Security Measures
MyCoachDeveloper implements appropriate technical and organisational measures, including:
- Encrypted data transmission
- Role based access controls
- Secure authentication
- Restricted administrative access
Access to organisational data is limited to authorised users within that organisation.
7. Data Retention
For club subscriptions:
- Data is retained for the duration of the subscription
- Following termination, data may be retained for a limited period before permanent deletion
Clubs may request data export prior to deletion.
8. Data Subject Rights
Clubs, as Data Controllers, are responsible for responding to data subject rights requests relating to their organisational data.
MyCoachDeveloper will reasonably assist in fulfilling such requests where technically feasible.
Individual subscribers may contact us directly to exercise their data rights.
9. Incident Management
In the event of a confirmed personal data breach affecting organisational data, MyCoachDeveloper will notify the relevant organisation without undue delay and provide reasonable cooperation.
10. Contact
For further information regarding data protection: