Privacy Policy

This notice explains what personal information TRUE FORM collects, why, and what you can do about it. It covers this website, the client portal, and the coaching and Membership services delivered through them.

Who is responsible for your information

TRUE FORM is the controller for the personal information described here. Our registration and address details are on the Company Information page.

For anything about your personal information, email info@trueformlifestyle.com. We have not appointed a Data Protection Officer; we are not required to.

What we collect

Account and contact details. Your name, email address and, where you give it, your phone number. Signing in is handled by our platform provider, which stores your sign-in credentials in a protected form. TRUE FORM never sees your password.

Enquiries. What you send through the contact form, a consultation booking, a free-guide request or a newsletter request, including the message itself and which page you sent it from.

Membership and coaching. Which plan or coaching package you hold, when it started, its status, and the date your access runs to.

Intake and readiness information. The answers you give in the coaching intake and in the readiness questionnaires. Depending on the form, this can include your age, training history, goals, lifestyle and nutrition habits, injuries, medical conditions, medication, and pregnancy or postnatal information. This is health information and is treated separately below.

Check-ins and progress. Your check-in answers, including training and nutrition adherence, energy, sleep and wellbeing ratings and your own notes, together with any measurements recorded and any progress photos you choose to upload.

Messages. Messages exchanged between you and your coach through the portal.

Orders and payments. What you bought, the amount, the currency, the payment status and the dates, plus the reference numbers our payment provider gives us so a payment can be matched to your order. Card and bank details are never sent to or stored by TRUE FORM — you enter them on our payment provider’s own checkout page.

Technical and administrative records. Records of significant account and coaching actions, kept so we can tell what happened and when if something needs checking, and records confirming a payment notification was received and processed once.

Why we use it, and on what legal basis

We use your information to create and run your account, to deliver the Membership or coaching you bought, to prepare and adjust your programme, to answer what you ask us, to take payment and keep the records that go with it, to send service messages about your purchase, renewal, cancellation or a failed payment, and to keep the service secure and working correctly.

The legal bases we rely on are:

• Performance of a contract — running your account, delivering coaching and Membership, handling your orders, and sending the service emails that go with them.
• Taking steps at your request before a contract — replying to a contact form, a consultation request or a free-guide request.
• Legal obligation — keeping the order and payment records that tax and accounting law requires us to keep.
• Legitimate interests — keeping the service secure, preventing misuse, keeping administrative records of what changed and when, and being able to answer a dispute. We use this only where it does not override your interests.
• Consent — health information, and newsletter messages where you asked for them. You can withdraw consent at any time.

Health information

Coaching cannot be done safely without knowing something about your health, so some of what you tell us is health information: injuries, medical conditions, medication, pregnancy and postnatal status, and answers that reveal how you sleep, eat, drink and feel.

Health information is a special category under data protection law and needs more than an ordinary legal basis. We rely on your explicit consent. Every form that asks health questions — the coaching intake, a consultation booking, and the two readiness questionnaires — requires you to tick a consent box before it can be submitted. The box is never ticked for you, and the form will not go through without it.

We store the date and the version of the consent wording you agreed to alongside the answers themselves, so there is a durable record of what you consented to and when. Our systems will not accept health answers without it.

Where a form asks health questions as optional extras, you can leave them blank, or say you would rather discuss something privately. If you would prefer we did not keep answers you have already sent us, email us and we will remove them.

We use health information to build and adjust your programme, to judge whether training is safe for you, and to decide when to ask you to speak to a doctor first.

Health answers are kept apart from ordinary enquiry details in our systems, and they are not included in any email we send. When a purchase notification goes out, it records only whether an intake was submitted — never what it said.

You can withdraw your consent at any time by emailing info@trueformlifestyle.com. Withdrawing consent stops us using that information going forward and does not affect what we did while the consent was in place. In practice, coaching that depends on knowing your health may not be able to continue without it.

You can also ask us to delete health information you have given us, and we will do so where applicable — some records, such as those tied to a payment, may have to be kept for a period the law sets. There is no self-service erase button: a request is handled by us individually, and we would rather say that than imply a tool exists.

Who else is involved

We do not sell your personal information, and we do not share it for anyone else’s marketing. Your information is handled by a small number of companies that provide the technology behind this service:

• Supabase — hosts our database, sign-in system and private file storage. Our project is hosted in the European Union.
• Mollie — our payment provider. You enter payment details on Mollie’s own checkout, and Mollie handles that under its own responsibility and its own privacy notice. Mollie receives what it needs to take the payment; it does not receive your intake, health or check-in information.
• Resend — sends our transactional email. It receives the message and the address it goes to. It does not receive your intake, health or check-in information.
• Vercel — hosts and serves this website.
• jsDelivr — a content delivery network your browser fetches one software library from. See the Cookie Policy for what that does and does not involve.

We may also share information where the law requires it, or where we need to establish or defend a legal claim.

Where your information is processed

Our database, sign-in system and file storage sit in a European Union region. Our other providers are international companies, and some of their processing, support or infrastructure may take place outside the European Economic Area. Where that happens, the transfer is intended to rely on the safeguards those providers put in place under their own data protection terms.

We would rather say this plainly than overstate it: we have not independently verified every provider’s full transfer arrangements, and we are reviewing their data protection documentation. If you need specifics for a particular provider before deciding to use the service, ask us and we will tell you what we know.

How long we keep it

We keep your account, coaching and health information for as long as you are a client and while you may still need it or we may still need it — for example to answer a question about past coaching or to deal with a complaint. Order and payment records are kept for as long as tax and accounting law requires, which is longer than the rest.

Deleting a client record removes the linked coaching, intake, check-in, progress, message and file records with it.

We do not yet operate a fixed, automated deletion schedule, so we are not going to quote you one. If you want your information removed, ask us and we will deal with it individually.

Security

Access to client information requires an account, and what an account can reach is restricted at the database level rather than only in the interface. Uploaded files are held in private storage and are not publicly reachable by URL. Administrative access is limited to accounts that need it, and significant actions are recorded.

Automated decisions

We do not make decisions about you by automated means that produce legal effects or similarly significantly affect you. Some rules are applied automatically — for example, whether a particular coaching package can be combined with one you already hold — but these are fixed product rules, not automated assessments of you as a person, and a human is behind every coaching judgement.

Children

These services are intended for adults. We do not currently operate an age check at sign-up or purchase, and one readiness questionnaire accepts an age below 18. If you are a parent or guardian and believe a child has given us personal information, contact us and we will deal with it.

Your rights

Under data protection law you can ask us to give you a copy of your information, correct it, delete it, restrict what we do with it, or provide it in a portable form. You can object to processing we base on legitimate interests, and you can withdraw consent you have given.

Some of these rights depend on the circumstances — for example, we may need to keep payment records even if you ask us to delete everything else, because the law requires it. If we cannot do what you ask, we will tell you why.

To exercise any of these, email info@trueformlifestyle.com. We may need to check who you are before we act, so that nobody else can obtain your information.

Cookies and browser storage

What this website does and does not store on your device is set out in the Cookie Policy.

Complaints

If you are unhappy with how we have handled your information, tell us first — email info@trueformlifestyle.com and we will look into it. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes to this notice

This notice describes how the service works today. If we change what we collect, why we collect it, or who is involved, we will update this page and change the date below.

Last updated: 18 August 2026