Privacy Notice
We Care About Your Data & Online Security
Last updated: 21 October 2026
1. Who we are
MTB Strength Factory (“we”, “us” or “our”) provides mountain bike fitness coaching, strength and conditioning programs, training resources, educational content and related products and services.
Our website is: mtbstrengthfactory.com
We are based in the United Kingdom and serve customers and website visitors internationally.
Data controller: Ben Plenge - TSF Coaching Ltd
Contact email: Contact form on website
We are responsible for deciding how and why your personal information is used, in accordance with applicable data protection laws.
2. Information we collect
Depending on how you interact with us, we may collect the following information.
Information you provide directly
This may include:
Your name and email address.
Contact details and information you provide when contacting us.
Your preferences, interests and responses to surveys.
Information you submit through website forms, lead magnets, questionnaires, competitions or feedback forms.
Purchase, subscription and order information relating to our products and services.
Information relevant to your training, fitness goals, exercise experience, lifestyle and progress, where you choose to provide it.
Communications you send to us, including emails and messages through social media.
Payment information
When you purchase a product or service, payments may be processed by third-party payment providers, such as Stripe.
We may receive information about your transaction, including your name, contact details, purchase amount, payment status and subscription status.
Your full payment card details are processed by the payment provider rather than stored directly by us.
Information collected automatically
When you visit our website, we or our service providers may collect certain technical information, including:
IP address and approximate geographical location.
Browser type, device information and operating system.
Pages visited, links clicked and interactions with our website.
Referral sources and information about how you arrived at our website.
Cookie identifiers and similar online identifiers, where applicable.
The information collected depends on your browser settings, cookie preferences and the tools we use.
3. How we use your information
We may use your personal information to:
Operate, maintain and improve our website.
Provide training programs, coaching services, products and resources you request or purchase.
Process orders, payments, subscriptions and refunds.
Deliver downloads, lead magnets and other resources you request.
Send newsletters, educational content and marketing emails where permitted by law.
Respond to enquiries and provide customer support.
Understand our audience, including their mountain biking interests, fitness goals and training challenges.
Conduct surveys, analyse feedback and improve our products and services.
Measure website performance, marketing effectiveness and advertising campaigns.
Maintain website security, prevent fraud and comply with legal obligations.
Establish, exercise or defend legal claims where necessary.
We will only use your personal information where we have an appropriate legal basis to do so.
4. Our legal bases for processing
Under UK data protection law, we rely on one or more of the following legal bases, depending on the circumstances:
Consent: Where you have actively agreed to a particular use of your information, such as receiving marketing emails or accepting non-essential cookies where consent is required.
Contract: Where processing is necessary to provide a product or service you have purchased, or to take steps at your request before entering into a contract.
Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include improving our services, maintaining website security and certain business administration activities.
Legal obligation: Where we need to process or retain information to comply with applicable laws, including tax and accounting requirements.
Where we process health information or other special-category personal data, we will also need an applicable special-category condition under data protection law.
You can withdraw consent at any time where consent is the basis for processing. This does not affect processing lawfully carried out before consent was withdrawn.
5. Our mailing list and marketing emails
If you sign up to our mailing list, request a free resource or otherwise consent to receive marketing communications, we may use your name and email address to send you information such as:
MTB fitness advice, training tips and educational content.
Newsletters, including our MTB Momentum mailing list.
Information about new programmes, products, services and coaching.
Special offers, promotions, events and webinars.
Relevant updates about MTB Strength Factory.
We may use an email marketing provider, such as Aweber, to manage subscriptions, send emails and administer our mailing list.
Where applicable, our email marketing provider may process information such as subscription dates, consent records, email delivery information, clicks and other engagement data.
Your choice matters. We will obtain consent for marketing emails where required by law. Where a legally applicable exception permits marketing without consent, we will meet the conditions for that exception.
Signing up to marketing communications is not a condition of purchasing a product unless the marketing is genuinely necessary to provide the service requested.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included in our emails or contacting us directly.
Unsubscribing from marketing will not prevent us from sending essential service communications, such as purchase confirmations, account notices or important information about a service you use.
We may retain a minimal record of your unsubscribe preference to ensure that we respect your choice.
We do not sell your mailing list to third parties.
6. How we share your information
We may share personal information with trusted third-party service providers where necessary to operate our business and provide our services.
These may include:
Website hosting and infrastructure providers, including IONOS.
Website and page-building providers, including WordPress, Elementor and LeadPages where used.
Email marketing providers, including Aweber.
Payment providers, including Stripe.
Training and coaching platforms, including any third-party apps used to deliver our programmes.
Communication and scheduling providers, where used.
Analytics and advertising providers, such as Google Analytics and Meta, where enabled on our website.
Professional advisers, such as accountants, lawyers or insurers, where necessary.
Regulators, law enforcement agencies or other parties where disclosure is required by law.
The providers involved will depend on the service you use and the technologies active on our website.
These providers may process information on our behalf or, in some circumstances, act as independent controllers under their own privacy policies.
We do not sell your personal information to third parties.
We do not share personal information with other organisations for their own marketing purposes unless we have a lawful basis and have provided the required information and choices.
7. International transfers
Because we serve an international audience and use online service providers, your personal information may be processed or stored outside the United Kingdom, including in countries where our service providers or their infrastructure are located.
Where personal information is transferred internationally, we will take the steps required by applicable data protection law. Depending on the circumstances, these may include relying on an adequacy regulation or decision, using approved contractual safeguards or applying another legally permitted transfer mechanism.
You can contact us using the details in this policy if you would like further information about relevant international transfers and safeguards.
9. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, taking account of legal, accounting, operational and security requirements.
For example:
Mailing list information: Retained while you remain subscribed and for as long as reasonably necessary afterwards to maintain suppression records and demonstrate compliance.
Customer and transaction records: Retained for the periods necessary to provide services, manage customer relationships and meet legal and accounting obligations.
Training and coaching information: Retained for as long as needed to deliver your programme or service and for any appropriate follow-up or record-keeping purposes.
Enquiry and correspondence records: Retained for as long as reasonably necessary to respond to enquiries, manage our business and resolve disputes.
Analytics and cookie information: Retained in accordance with the settings and retention periods of the relevant tools.
Actual retention periods may vary depending on the type of information and the circumstances.
When information is no longer needed, we will take reasonable steps to delete it or anonymise it.
10. Your data protection rights
Depending on your circumstances and applicable law, you may have the right to:
Request access to the personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Request deletion of your personal information.
Ask us to restrict how we process your information.
Object to certain processing, including direct marketing.
Request a copy of certain information in a portable format.
Withdraw consent where processing relies on consent.
Complain to a relevant data protection authority.
These rights are subject to legal conditions and exceptions.
To exercise your rights, contact us using the details in Section 1. We may need to verify your identity before responding.
You can also unsubscribe from our marketing emails at any time using the link provided in each email.
Complaints
If you are based in the UK and have concerns about how we handle your personal information, please contact us first so we can try to resolve the issue.
You also have the right to complain to the UK Information Commissioner's Office (ICO):
https://ico.org.uk/make-a-complaint/
If you live elsewhere, you may also have the right to contact your local data protection authority.
11. Information about children
Our website, mailing list and training services are primarily intended for adults.
We do not knowingly collect personal information from children in circumstances where parental authorisation or other safeguards are legally required but have not been provided.
If you believe a child has provided personal information to us inappropriately, please contact us so that we can review the circumstances and take appropriate action.
12. Data security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, secure service providers and appropriate security practices.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
13. Links to third-party websites and services
Our website may contain links to third-party websites, social media platforms, payment pages, training applications and other services.
If you follow a link or use a third-party service, your information may be handled under that provider's own privacy policy and terms.
We are not responsible for the privacy practices of third-party websites or services that we do not control.
We recommend reviewing their privacy information before providing personal information.
14. Changes to this privacy policy
We may update this policy from time to time to reflect changes to our business, services, technology or legal obligations.
The latest version will be published on our website, with the updated date shown at the top.
Where required by law, we will provide additional notice or seek consent for material changes to how we use your personal information.
15. Contact us
If you have questions about this privacy policy, how we use your information or how to exercise your data protection rights, please contact:
The Strength Factory
Website: www.mtbstrengthfactory.com
Email: Contact form on website
Business name: TSF Coaching Ltd trading as MTB Strength Factory