Privacy Policy
This Privacy Policy explains how Target in Mind collects, uses, stores and protects your personal information when you visit targetinmind.com, book a discovery call, subscribe to a programme, sign up to my newsletter, or contact me directly.
1. Who I am
Target in Mind is operated as a sole trader by Alex Wilkinson, a Sport and Exercise Psychologist in Training based in Nantwich, Cheshire. For the purposes of UK data protection law, I am the data controller for any personal data you provide.
- Business name: Target in Mind
- Operated by: Alex Wilkinson (sole trader)
- Business address: Nantwich, Cheshire. Full correspondence address available on request.
- Email for privacy enquiries: Alex@targetinmind.com
- ICO registration: Registered with the Information Commissioner's Office (ICO).
2. The personal data I collect
When you visit the website
- IP address (in anonymised form, via Google Analytics, with your consent)
- Browser type, device type, operating system
- Pages visited, time on site, referring URL
- Cookies (see my Cookie Policy for full detail)
When you book a discovery call via Calendly
- Your name and email address
- Any notes or information you choose to share when booking
- The date and time of the booking
When you submit the programme builder
- Your selections (online / in person / combination; frequency; range time; competition support)
- Your training ground or town (used to calculate travel distance, not shared publicly)
- Your name and email address (so I can follow up)
When you become a paying client
- Billing name and email
- Payment information (collected and processed by Stripe; I do not see or store card details)
- Your sport, level, goals, performance challenges, and any other information you share during our work together
- Notes from our sessions and your progress through the programme
When you subscribe to The Mental Range newsletter
- Your name (optional) and email address
- Your consent to receive marketing emails (recorded with timestamp)
When you contact me directly
- Any information you choose to share in your email, message, or phone call
3. Why I collect your data and the lawful basis
| What I collect | Why | Lawful basis |
|---|---|---|
| Discovery-call bookings | To confirm and prepare for our call | Legitimate interest |
| Programme builder submissions | To follow up on your enquiry | Legitimate interest |
| Subscription and payment data | To deliver the service you've contracted | Contract |
| Athlete performance notes | To deliver effective sport psychology support | Contract + explicit consent for health-related information |
| Newsletter subscribers | To send you content you've asked for | Consent |
| Marketing emails to past clients | To tell you about similar services you may want | Legitimate interest (PECR soft opt-in), with opt-out in every email |
| Cookies that aren't strictly necessary | Website analytics, embeds, etc. | Consent (via the cookie banner) |
4. Who I share your data with
I share your data only with the third parties I rely on to run the business. I do not sell, rent, or trade your data to anyone.
| Recipient | Purpose | Location |
|---|---|---|
| Calendly | Booking and managing discovery calls | USA (EU-US Data Privacy Framework) |
| Stripe | Processing payments and subscriptions | USA / UK |
| Google (Analytics, Workspace) | Website analytics; business email | USA / EU |
| Microsoft Clarity | Website heatmaps and anonymised session analytics (only with your consent) | USA / EU |
| MailerLite | Marketing emails and newsletter delivery | EU (Lithuania) |
| Netlify | Website hosting | USA |
| My accountant | Tax and bookkeeping | UK |
Where data is transferred outside the UK, transfers are made under the EU-US Data Privacy Framework, the UK International Data Transfer Agreement, or Standard Contractual Clauses.
5. How long I keep your data
| Data | Retention period |
|---|---|
| Discovery-call enquiries that don't convert to clients | 12 months from last contact |
| Active client records and performance notes | 5 years after our work together ends (psychology professional standard) |
| Accounting and tax records | 7 years after the end of the tax year (HMRC requirement) |
| Newsletter subscribers | Until you unsubscribe, then 12 months in a suppression list |
| Anonymous analytics data | 14 months (Google Analytics 4 retention set to minimum) |
| Cookie consent records | 12 months |
6. Your rights under UK GDPR
You have the right to access the personal data I hold on you, correct inaccurate data, request deletion (subject to legal retention requirements), restrict processing, object to certain processing such as marketing, port your data, withdraw consent at any time, and complain to the Information Commissioner's Office.
To exercise any of these rights, email me at Alex@targetinmind.com. I will respond within 30 days.
If you're not satisfied with my response, you can complain to the ICO — ico.org.uk, phone 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
7. How I keep your data secure
- Personal data is stored in password-protected systems with two-factor authentication
- Athlete performance notes are stored in an encrypted workspace accessible only to me
- Payment details are never seen or stored by me; they are handled directly by Stripe (PCI-DSS compliant)
- Email is hosted through Google Workspace with two-factor authentication
- My laptop is encrypted (FileVault) and locked when not in use
- I review my security practices annually
In the event of a data breach that poses a risk to you, I will notify the ICO within 72 hours and notify you directly if the risk is high.
8. Cookies
When you first visit targetinmind.com, you'll see a cookie banner asking for your consent. You can accept all, reject all (except strictly necessary), or manage individual categories. You can withdraw or change your preferences at any time via the Cookie Settings link in the footer of any page. For full detail, see my Cookie Policy.
9. Children's data
Target in Mind is a service for competitive athletes. I work primarily with adults. If you are under 18 and want to work with me, your parent or guardian must be the contracting party and must consent to your data being processed. I do not knowingly collect data from anyone under 13.
10. Confidentiality of psychological work
Information you share with me during our work together is treated with the additional confidentiality expected of a sport psychology professional under the BASES Sport and Exercise Psychology Accreditation Route (SEPAR) code of conduct. The limits of confidentiality are: where I believe there is a serious risk of harm to you or another person; where I am required to disclose information by law (for example, by court order or safeguarding obligation); and for supervision purposes, where I may discuss your case anonymously with my professional supervisor as part of standard practice. I will always tell you if confidentiality has been broken under one of these circumstances, except where doing so would itself put someone at risk.
11. Changes to this policy
I may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent change. Material changes will be communicated by email if I hold your contact details.
12. Contact
Alex Wilkinson, Target in Mind
Alex@targetinmind.com