Privacy Policy

1. Who we are

DVOTION LTD (registered in England and Wales, company number 17196354), trading as DVOTION Labs ("we", "us"), is a health and performance testing and coaching business operating in London. Contact us at chrisgkoufas@dvotionlabs.com.

2. What data we collect

When you book, enquire or use our services, we collect:

• Name, email address and phone number
• Booking details (service, date, time)
• Health and performance context you provide (training background, goals, injuries, event dates)
• Optional event research survey responses about training habits, spending bands and assessment interests, plus your name and email when you claim a survey reward
• Assessment and support payments are processed by DVOTION Stripe. New coaching subscriptions are collected by CG Performance through GoCardless Direct Debit. DVOTION does not collect card or bank account details.
• Calendar data used to schedule and block appointments

3. How we use your data

• To process and confirm your booking
• To deliver the service you have booked
• To send booking confirmation and appointment reminder emails
• To create calendar events for your appointment
• To contact you about your booking or service
• To maintain records of services delivered
• To understand athlete preferences in aggregate, improve assessment offerings, and provide earned event survey discount codes
• To send occasional promotional emails only when you separately opt in, with an option to unsubscribe

4. Legal basis

We process your data on the basis of contractual necessity (to deliver the service you have booked) and legitimate interests (to manage our business and communicate with clients). We rely on legitimate interests to understand aggregate, non-clinical event survey answers and manage our services, and on the requested reward arrangement to record participants and provide their discount. Promotional survey emails are only sent where the participant has actively opted in. Where we process health-related data from booking intake, we do so with the explicit consent given on that form.

5. Third parties

We share data with the following third parties only as necessary to deliver our services:

• Stripe: DVOTION assessment and standalone support payment processing. Card data is handled by Stripe directly. See stripe.com/gb/privacy.
• CG Performance and GoCardless: CG Performance collects new DVOTION coaching subscriptions via GoCardless Direct Debit, including the plan, payment status and mandate reference. GoCardless handles bank details securely; DVOTION does not receive them.
• Microsoft (Outlook / Teams): calendar event creation and appointment confirmation emails.
• Supabase: secure database storage for booking and event survey records.
• Vercel: website hosting, and the page view counts described in section 7.

We do not sell your data to any third party.

6. Data retention

We retain booking and contact data for up to 3 years from your last appointment, or as required by law. Event survey contact details and answers are also retained for up to 3 years and used primarily for aggregate service research; you can request deletion earlier. See section 8.

7. Cookies and analytics

We use essential cookies, which are required for the site to function: for example, keeping your session while you book. These are always active.

With your consent, we also use analytics and advertising cookies. They tell us how visitors find the site and which pages lead to enquiries and bookings. They are set only after you accept them in the cookie banner, and declining does not affect your ability to use the site or make a booking.

Where you have consented, we use Google Analytics and Google Ads, provided by Google. These record the pages you view, actions such as starting a booking, and how you arrived at the site. We do not send Google your name, email address, telephone number or the content of any enquiry.

Where you have consented, we also use Microsoft Clarity, provided by Microsoft. Clarity is different from the tools above: rather than counting visits, it records a playback of your visit, showing how the page was scrolled and what was clicked, so we can see where the site is hard to use. Microsoft may use what it collects for its own purposes, which are described in their privacy statement at privacy.microsoft.com.

Clarity does not run everywhere on this site. It is switched off entirely on the form we email you before a session, which asks about injuries and training, and on the athlete portal, where your results are. On the booking screen it runs with what you type hidden from the recording, so the name, email address and telephone number you enter are never part of it.

You can withdraw consent at any time by clearing this site’s cookies in your browser, which restores the banner and returns you to essential cookies only.

One measurement tool sits outside all of the above, because it stores nothing on your device and so there is nothing to consent to. Vercel Web Analytics, provided by the company that hosts this site, counts page views. It records the page you opened, the site or search engine you arrived from, and your country, browser and device type. It sets no cookie and writes nothing to your browser. Repeat visits within the same day are counted using a one-way hash generated from the incoming request, which is discarded after 24 hours, so it cannot identify you or recognise you on a later day. We do not send it your name, email address, telephone number or the content of any enquiry, and the booking reference in the address of your confirmation page is removed before the page is counted.

8. Your rights (UK GDPR)

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing based on legitimate interests
• Lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, contact us at chrisgkoufas@dvotionlabs.com.

9. Contact

Privacy questions: chrisgkoufas@dvotionlabs.com