Privacy Policy

Last updated: 9 November 2026

1. Who we are

CancerCoach.Me is the trading name of Steph Lightfoot, a French-based independent business operating as a micro-entrepreneur. For data protection purposes, Steph Lightfoot is the data controller responsible for personal information collected and processed through CancerCoach.Me.

Business name: Steph Lightfoot – CancerCoach.Me
Business status: French micro-entrepreneur
SIRET number: 48054695100033
Business email: hello@cancercoach.me
Business address: 2546 Route de Coupeau, 74310 Les Houches, France

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, enquire about our services, become a coaching client or participate in one of our retreats. We aim to collect only the information we genuinely need.

2. The information we collect

Personal and contact information

  • Your name, email address and telephone number.

  • Country of residence.

  • Contact and communication preferences.

Health and fitness information

For coaching or retreat participation, we may collect:

  • Cancer diagnosis and treatment history.

  • Relevant medical history and current health conditions.

  • Medication and symptoms.

  • Physical limitations, injuries and exercise considerations.

  • Exercise assessments, fitness levels and training history.

  • Exercise programmes, progress and feedback.

  • Relevant information you choose to share about your health and wellbeing.

This is special-category health data under data protection legislation and receives additional protection. We only request information relevant to the service or safe organisation of a retreat.

Payment information

Payments are processed through Stripe. We may receive your name, email address, payment confirmation and transaction details. We do not ordinarily receive or store your full payment card details.

Website and marketing information

If you subscribe to our mailing list, we collect your name, email address and marketing preferences. Our website may also collect technical information such as IP address, browser type and usage data through cookies or similar technologies.

3. How we use your information

  • Respond to enquiries and arrange introductory calls.

  • Assess your exercise needs and provide appropriate coaching.

  • Develop and adapt exercise programmes.

  • Communicate with you about coaching.

  • Monitor progress and provide ongoing support.

  • Organise retreats and help manage participant safety.

  • Process payments and manage bookings.

  • Send newsletters and marketing communications where permitted and where you have agreed.

  • Meet legal, accounting and administrative obligations.

  • Protect our business, clients and services.

We do not sell your personal information or use your health information for unrelated marketing purposes.

4. Our legal basis for processing your information

We process personal information in accordance with applicable data protection legislation, including the EU GDPR and, where applicable, the UK GDPR.

Contractual necessity

We process relevant personal and contact information to respond to enquiries, provide coaching, manage bookings and fulfil our agreement with you.

Health information and explicit consent

Where we process health information, we intend to rely on your explicit consent under Article 9(2)(a) GDPR, alongside an appropriate Article 6 legal basis. We explain what information we collect and why, and request explicit consent separately from agreement to our Terms and Conditions.

You can withdraw consent at any time. This does not affect processing carried out before withdrawal. However, withdrawing consent may mean we can no longer safely or appropriately provide some aspects of coaching or retreat services.

Legitimate interests and legal obligations

We may process limited information for legitimate business interests, such as managing enquiries, maintaining business records and improving services, where these interests do not override your rights. We may also retain information to meet accounting, tax, insurance and other legal requirements.

Marketing

We send marketing emails where we have obtained the consent required by applicable law. You can unsubscribe at any time using the link in our emails.

5. Platforms and service providers

CancerCoach.Me uses third-party platforms to operate its services. Providers may process information on our behalf or act as independent controllers for particular services.

  • Squarespace: Website hosting and email mailing list.

  • Jotform: Initial client information, including health and exercise questionnaires.

  • Trainerize: Training plans, progress monitoring and client communication. Relevant assessment information may be transferred where needed to provide coaching.

  • Stripe: Payment processing and payment-related information.

  • WhatsApp: Occasional client calls and messages where appropriate. We generally aim to keep coaching communication within Trainerize.

  • Google Forms and Google services: Retreat information, including relevant health and safety information.

These providers may process information in different countries. We take reasonable steps to ensure appropriate contractual and legal safeguards are in place. You can ask for further information by emailing hello@cancercoach.me.

6. International transfers

CancerCoach.Me operates from France and works with clients in the UK, USA, Australia and elsewhere. Some providers may store or process information outside the EEA. Where personal information is transferred outside the EEA, we will ensure an appropriate legal transfer mechanism is in place, such as an adequacy decision or approved Standard Contractual Clauses, where required. We also take account of applicable UK GDPR requirements.

7. How we protect your information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These include:

  • Using established third-party platforms for client information and payments.

  • Restricting access to people who need it.

  • Using password protection and appropriate account security.

  • Avoiding unnecessary duplication of sensitive health information.

  • Reviewing the providers and systems we use.

No electronic storage or communication method is completely secure. We cannot guarantee absolute security, but we take our responsibilities seriously and will respond appropriately to suspected personal data breaches.

8. How long we keep your information

We retain personal information only for as long as necessary for the purposes for which it was collected, or where required by law. Our intended retention periods are normally:

  • Enquiries that do not become clients: 6 months.

  • Active coaching records: For the duration of the coaching relationship.

  • Health questionnaires and exercise assessments: 6 months after coaching ends.

  • Retreat health and safety information: 6 months after the retreat.

  • Payment and accounting records: For the legally required accounting and tax retention period.

  • Marketing information: Until you unsubscribe or withdraw consent, subject to any necessary suppression records.

When information is no longer required, we will securely delete or anonymise it where appropriate.

9. Your data protection rights

Depending on applicable law and circumstances, you may have the right to:

  • Request access to your personal information.

  • Ask us to correct inaccurate or incomplete information.

  • Request deletion of your information.

  • Restrict or object to certain processing.

  • Request a copy of information in a portable format.

  • Withdraw consent where processing is based on consent.

  • Complain to a relevant data protection authority.

Some rights are subject to legal exceptions. For example, we may need to retain certain financial records even if you ask us to delete your information. To exercise your rights, contact hello@cancercoach.me. We may need to verify your identity before responding.

10. Complaints

Please contact us first if you have a concern about how we handle your personal information, so we have an opportunity to address it.

French data protection authority: Commission Nationale de l'Informatique et des Libertés (CNIL) – https://www.cnil.fr/
UK Information Commissioner's Office: https://ico.org.uk/

11. Children

Our coaching services are intended for adults. We do not knowingly collect children's personal information through our coaching services without appropriate parental or legal authorisation. If you are enquiring about a service for someone under 18, please contact us before submitting personal or health information.

12. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, systems or legal obligations. The latest version will be available on our website, with the date of the most recent update shown at the top.

13. Contact us

For questions about this Privacy Policy or how we use your information, contact Steph Lightfoot – CancerCoach.Me: hello@cancercoach.me