Skip to main content
John McKean Academy crestJohn McKeanAcademy
Find your path
Menu

John McKean Academy

Privacy Notice

Clear information about how the academy uses personal information across the public website, services and member platform.

Last updated
21 September 2026
Applies to
Website and academy services

Part one

The information we handle

The categories depend on how you use the academy. We ask only for information that is relevant to the service, booking, purchase or support you have requested.

Who this notice covers

This notice explains how John McKean Academy handles personal information through its public website, enquiries and bookings, shop, ReEnergise applications and authenticated academy platform.

It covers prospective customers, applicants, members, linked guardians and people working with the academy. Third-party websites and services have their own privacy notices.

What we may collect

The information we handle may include the following, depending on the academy service you use:

  • Contact and account details, such as name, email address, telephone number, display name, account identifier, access role and settings.
  • Bookings, attendance, memberships, purchases and payment references. Card details are handled by Stripe and are not stored in the academy platform.
  • Learning and coaching information, such as programme activity, reflections, messages, study items, progress, coaching notes and next-step guidance.
  • Guardian links, relationship details and the specific attendance, progress or communication access that has been authorised for the linked account.
  • Authentication and security information, such as passkey public-key credential material, audit entries, security cookies, request identifiers and incident records.
  • Public-site enquiry details and, only where you allow it, optional analytics or advertising measurement on the public site.

Health, wellbeing and other sensitive information

Some applications or coaching processes may ask for health, injury, medication, wellbeing or other sensitive information to consider suitability and support safe delivery. We limit access to people who need it for that purpose and do not use it for general marketing.

Please do not include medical, therapeutic or other highly sensitive information in a general website enquiry unless it is necessary. We will explain the information needed for a particular service at the point we ask for it.

Where information comes from

Most information comes directly from you, a linked guardian, or an authorised instructor or staff member. We also generate records when you use the academy, for example through bookings, attendance, learning progress and support communications.

Payment and subscription updates may come from Stripe. We do not receive or store your full payment card details.

Part two

How we use and share it

Technology supports coaching and academy operations; it does not replace coaching judgement.

Why we use information

We use personal information to:

  • respond to enquiries, arrange visits and assess the suitability of a requested service;
  • create, secure and manage academy accounts, guardian access and member learning access;
  • run classes, bookings, coaching, progression and member support;
  • take or reconcile payments, administer memberships, purchases and entitlement access;
  • send essential service, booking, billing, safety and operational communications; and
  • protect the platform, investigate misuse or incidents, and improve public-site content where optional measurement is allowed.

The basis for using information

The basis we use depends on the purpose. It can include taking steps you ask us to take or delivering an academy service, meeting a legal obligation, protecting the academy's legitimate interests in a secure and well-run service, or consent where we ask for it.

Where we use sensitive or special-category information, we will apply the additional condition required by data-protection law for that specific purpose. If we rely on consent, you can withdraw it at any time; this does not affect processing that happened before withdrawal.

Service providers and sharing

We do not sell personal information. We share it only where needed to provide the service, meet a legal obligation, protect someone's safety, or deal with a valid request or dispute.

Providers used to operate the academy may include Supabase for authentication and data services, Stripe for payments, Resend for transactional email, Vercel for hosting, Vimeo for video delivery, and Sentry for error monitoring. Optional public-site measurement may use Google or Meta technology only where it is configured and your choice allows it.

Some suppliers may process information outside the UK. Where that happens, we will use the transfer safeguards required by applicable data-protection law. Contact us if you need more information about a particular supplier.

Cookies and optional measurement

Essential cookies and similar technologies support sign-in, security and the member platform. They are not optional because the service cannot operate safely without them.

Optional public-site analytics and advertising measurement are presented with a choice. Google measurement starts with analytics and advertising storage denied until you allow it; the Meta Pixel is only added after you allow it. Declining optional measurement does not affect academy login or member access.

Part three

Retention and your rights

We aim to keep information for no longer than its purpose requires, while recognising that safety, accounting, disputes and security can require a longer record.

How long we keep information

We keep account, learning and coaching information while it is needed to provide the academy service. After an account closes or becomes inactive, we review information against the service purpose, safeguarding needs, complaints or dispute holds, security needs and financial record-keeping duties.

Payment and purchase records may need to be retained for accounting, tax, fraud or dispute purposes. We then delete, anonymise, restrict or securely archive information when it is no longer needed. Some learning-state information can remain only in your own browser unless it has been synced to your account.

Your information rights

Depending on the circumstances, you may ask us for access to your information, correction, deletion, restriction, portability or an explanation of how it is used. You may also withdraw consent where consent is the basis for processing.

We may need to check identity or guardian authority before responding, and some information may have to be retained for legal, safety, security or accounting reasons. We normally respond without undue delay and no later than one month after receiving the information needed to verify the request.

Your right to object

You can object at any time to processing based on legitimate interests, including direct marketing. Contact us using the details below and tell us what processing you object to. We will consider the request against the relevant legal requirements.

Questions or complaints

Please contact us first if you have a question or concern about this notice or your information. You also have the right to complain to the UK Information Commissioner's Office.

Part four

Contact and updates

Use these details for privacy questions, rights requests or to ask about a specific academy service.

Contact John McKean Academy

For a rights request, please provide enough detail for us to identify the person and the service involved. Do not send highly sensitive information by ordinary email unless we have agreed a secure way to receive it.

We review this notice when academy services, suppliers or data uses change. Material updates will be reflected on this page.