The Potential Method
PRIVACY POLICY
Welcome to The Potential Method, a coaching and wellness service led by Yianni Charalambous. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access or use our Website, Coaching Partnership, online programs, or any related services.
By accessing or using our Services, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please discontinue use of our Services immediately.
01 — Data We Collect
Information We Collect
Provided Directly by You
- Identity data: full name, date of birth, profile photo
- Contact data: email address, phone number, mailing address
- Account credentials: username and password
- Payment & billing data: processed by third-party payment processors — we do not store raw card data
- Health & fitness data: exercise history, nutrition, injuries, medical conditions, lifestyle details shared for coaching
- Communications: messages, emails, feedback, and support requests
Collected Automatically
- Usage data: pages visited, features used, session duration, and content interactions
- Device & technical data: IP address, browser type, operating system, device identifiers
- Cookies and tracking technologies (see Section 09)
From Third Parties
- Data from platforms such as Everfit used to deliver workouts and track progress
- Payment confirmation data from payment processors (e.g. Stripe, PayPal)
02 — Why We're Allowed
Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contractual necessity — to deliver the Services you have purchased or enrolled in
- Legitimate interests — to improve our Services, prevent fraud, and ensure security
- Legal obligation — to comply with applicable laws, regulations, or court orders
- Consent — where you have explicitly given consent (e.g. marketing communications). You may withdraw consent at any time.
03 — How It's Used
How We Use Your Data
- To provide, manage, and personalise your Coaching Partnership and online program experience
- To track your progress and tailor recommendations based on your health and fitness data
- To process payments, manage subscriptions, and issue receipts or refunds
- To communicate with you regarding program updates, scheduling, and administrative notices
- To send promotional communications — only with your consent; you may opt out at any time
- To comply with legal obligations, resolve disputes, and enforce our agreements
- To detect, prevent, and address fraud, security breaches, or technical issues
We will not use your health or fitness data for any purpose other than delivering your coaching Services without your explicit consent.
04 — Who Sees It
Sharing Your Data
We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:
Service Providers
Trusted third-party vendors assisting in operating our Services, including coaching platforms, payment processors, email tools, and cloud hosting. All providers are contractually required to process your data only on our instructions.
Legal Requirements
Where required by law, regulation, legal process, or government request, or to protect the rights, property, or safety of The Potential Method, our clients, or others.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you before your data is subject to a different privacy policy.
05 — How Long We Keep It
Data Retention
- Active coaching client data retained for the duration of your program plus 2 years
- Payment records retained for a minimum of 7 years for tax and accounting compliance
- Health and fitness data deleted upon written request, unless retention is required by law
- Inactive account data reviewed and purged after 3 years of inactivity
You may request earlier deletion by contacting [email protected]
06 — How We Protect It
Data Security
- Encrypted data transmission (TLS/SSL) for all web communications
- Access controls and authentication requirements for all systems holding personal data
- Regular review of data handling practices and service provider security standards
- Access to personal data limited to authorised personnel only
No method of electronic transmission or storage is 100% secure. You use our Services at your own risk. In the event of a data breach that affects your rights, we will notify you as required by applicable law.
07 — Cross-Border Data
International Data Transfers
The Potential Method operates primarily under the laws of the Emirate of Abu Dhabi, UAE. Your data may be processed or stored on servers located outside your country of residence.
Where data is transferred internationally, we ensure appropriate safeguards are in place through contractual protections with service providers. By using our Services, you consent to the transfer of your data to jurisdictions that may have different data protection laws.
08 — Third-Party Platforms
Third-Party Services
Our Services involve integration with third-party platforms such as Everfit, payment processors, and social media. We are not responsible for the privacy practices of these third parties and encourage you to review their respective privacy policies.
We are not liable for any downtime, errors, data loss, or unauthorised access attributable to third-party platform failures.
09 — Cookies
Cookies & Tracking
- Essential cookies — required for the Website to function correctly
- Analytics cookies — used to understand how visitors interact with our Website
- Marketing cookies — used to deliver relevant communications (only with your consent)
You may control cookie preferences through your browser settings. Disabling certain cookies may affect Website functionality.
10 — Your Rights
Your Data Rights
Subject to applicable law, you have the following rights:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate or incomplete data
- Erasure — request deletion of your data, subject to legal retention obligations
- Restriction — request that we limit how we use your data in certain circumstances
- Portability — request your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests or for direct marketing
- Withdraw Consent — withdraw consent at any time, without affecting prior processing
We will respond to your request within 30 days. We may require proof of identity before processing your request.
11 — Children
Children's Privacy
Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a person under 18, please contact us immediately so we can take appropriate steps to delete it.
Clients Under 18
If a Client is under the age of 18, a parent or legal guardian must provide written consent before any services commence. The parent or legal guardian will be treated as the contracting party and accepts full responsibility under these Terms. Services will not begin until this consent has been received by the Company.
12 — Refunds
Refund Policy & Results Disclaimer
Health, fitness, and performance outcomes vary based on individual effort, consistency, and lifestyle. No specific result is guaranteed.
13 — Policy Updates
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, legal obligations, or Services. When we make material changes, we will:
- Update the "Last Updated" date at the top of this Policy
- Notify active clients by email where changes are significant
Your continued use of our Services after changes take effect constitutes your acceptance of the revised Policy.
14 — Legal Jurisdiction
Governing Law & Disputes
This Privacy Policy is governed by and construed in accordance with the laws of the Emirate of Abu Dhabi, United Arab Emirates.
Disputes will first be referred to informal negotiation. If unresolved, they shall be subject to the exclusive jurisdiction of the courts of Abu Dhabi, UAE.
15 — Your Responsibility
Personal Responsibility
By using our Website, programs, and services, you acknowledge that you are responsible for your own data security and privacy practices. Yianni Charalambous and The Potential Method disclaim any liability for unauthorised access to your information through your own actions, negligence, or the actions of third-party platforms.
16 — Get in Touch
Contact Us
For any questions, concerns, or data requests regarding this Privacy Policy: