PRE-LAUNCH DRAFT — 7 OCTOBER 2026
Privacy Policy
Platform Weightlifting Ltd is the intended controller of your Platform account information. The intended contact is info@platformweightlifting.com, which is not yet available.
Before sales: Jake must confirm controller contact and address, lawful bases, processor arrangements, international transfers and safeguards, retention criteria and the data-request procedure. This notice is incomplete until those facts are supplied.
Information held by the app
The app stores your name, email, salted one-way password hash, account terms version and registration date. It stores lifting profiles, goals, programme snapshots and saved workout information. Membership records include Stripe customer, checkout and subscription references, membership status and billing-period information. Successful webhook event identifiers prevent duplicate processing. Essential sign-in cookies and hashed session tokens support authentication; limited security counters help prevent abuse.
Video and file uploads are disabled for launch. Cancellation, pausing or changing membership does not automatically delete saved training records. Membership access restrictions still apply to saved programmes.
Purposes and lawful bases — draft for confirmation
Account and training information provides the requested service, including saving profiles and calculating training loads; the intended basis is performance of the service agreement. Security information protects accounts and prevents misuse; the intended basis is legitimate interests in operating a secure service. Payment records support billing and applicable record-keeping duties. Jake must confirm the applicable bases and obligations before launch. Registration agreement to this notice is not blanket consent to unrelated processing.
Hosting and payments
The planned production architecture uses a Cloudflare Worker and D1 database. Stripe processes checkout and billing in a dedicated Platform merchant account. Card entry happens on Stripe-hosted pages; the app stores payment references rather than full card numbers. Production provider contracts, processing locations and any transfer safeguards must be confirmed before sales.
Retention and account closure
The current app retains account and saved training information; it does not implement automatic deletion when membership ends. Retention periods or criteria, deletion procedures and legal or accounting exceptions must be agreed before launch. No fixed retention period is promised by this draft.
Your rights
You may request access, correction or deletion and, where applicable, restriction, objection or portability. Requests need proportionate identity verification through the confirmed support contact. You can complain to the UK Information Commissioner’s Office at ico.org.uk.