Privacy Policy

UnlockByOliver (the UNLOCK coaching program, run by Oliver Hoskins) is the data controller for the information described here. Contact us about anything in this policy at ohoskins3@gmail.com.

• Application details. Name, age, email, playing background and your written answers. Collected so applications can be assessed for fit. Lawful basis: steps taken at your request before entering a contract.
• Client account data. Email, password (stored hashed by our authentication provider), profile details, session notes, tasks, Blueprint documents, match footage links, annotations and messages. Collected to deliver the coaching program. Lawful basis: performance of a contract.
• Marketing contact. Only where you have ticked the opt-in box. Lawful basis: consent, withdrawable at any time.
• Technical data. Standard server and security logs from our hosting provider (IP address, browser type, timestamps). Lawful basis: legitimate interest in keeping the site secure.

We collect the minimum needed to run the program. We do not buy contact lists, we do not sell or share personal data for advertising, and we do not run behavioural advertising trackers on this site.

Coaching conversations may touch on mental performance, wellbeing or injury. Anything you choose to share is kept confidential to Oliver Hoskins, is stored inside your private portal record and is never published or shared with your club without your explicit written permission. This program is coaching, not medical or psychological treatment.

• Supabase (database, authentication and file storage for the portal).
• Lovable / Cloudflare (website hosting and delivery).
• Google Gemini via the Lovable AI gateway, used only to draft coaching summaries inside the private coach view. Drafts are reviewed and signed off by Oliver before a client sees them, and inputs are not used to train public models.
• Professional advisers or authorities where we are legally required to disclose.

Some providers process data outside the UK. Where that happens, transfers rely on the UK International Data Transfer Addendum or equivalent safeguards.

• Unsuccessful applications: 12 months, then deleted.
• Client portal records: for the duration of the program plus 2 years.
• Financial and tax records: 6 years, as required by UK law.
• Marketing contacts: until you withdraw consent.
• Security and server logs: typically 30 to 90 days by our hosting providers.

Under UK GDPR and the EU GDPR you have the right to access your data, correct it, delete it, export it in a portable format, restrict or object to processing, and withdraw consent at any time. Email ohoskins3@gmail.com and we will respond within 30 days. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

California residents may request disclosure of the categories of personal information collected, request deletion or correction, and request a copy of their information. You will not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined by the CCPA/CPRA, and we do not process it for cross-context behavioural advertising.

Data is transmitted over HTTPS, portal records are protected by row level security so each client can only reach their own record, and administrative access is restricted to Oliver Hoskins. Our database provider takes automated daily backups. You can request an export of your own data at any time by emailing us.

Players under 18 may only apply with the knowledge and consent of a parent or guardian, and we will confirm that consent before any coaching begins.

If this policy changes materially we will update the date at the top of this page and, where the change affects active clients, notify them by email.