This policy explains what personal data is collected when you use this website or work with Emily Lades as a coaching client, why it is collected, and what rights you have over it.
It is written to meet UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, where clients are located in the European Economic Area or the United Kingdom, the EU and UK General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller is:
- [TO CONFIRM: registered trading name]
- [TO CONFIRM: trade licence number and issuing authority]
- [TO CONFIRM: registered address, Dubai, United Arab Emirates]
- Email: lades.emily@yahoo.de
- WhatsApp: +971 50 867 5998
2. What data is collected
When you browse the site
Standard technical data is processed by the hosting provider and by analytics, including IP address, browser type and version, device type, pages viewed, referring page, and date and time of the visit.
When you book a call or message
Name, email address, phone number, the time slot chosen, and anything you choose to write in your message or booking notes.
When you become a coaching client
To deliver coaching safely, the following is collected and stored in the coaching app:
- Contact and billing details.
- Body metrics such as weight, measurements and progress photographs.
- Training logs, food logs and weekly check-in responses.
- Health information you disclose, including injuries, medical conditions, medication, allergies, pregnancy, sleep and stress.
Health and body data is special category data under GDPR and sensitive personal data under the PDPL. It is processed only on the basis of your explicit consent, only to design and adjust your programme, and it is never sold or used for advertising.
3. Why it is processed and on what legal basis
- To answer enquiries and arrange a consultation. Basis: steps taken at your request before entering a contract.
- To deliver the coaching you have paid for. Basis: performance of a contract.
- To design training and nutrition safely around your health. Basis: your explicit consent, which you may withdraw at any time.
- To take payment and keep accounting records. Basis: legal obligation.
- To understand how the site is used and to improve it. Basis: your consent, given through the cookie banner.
- To send marketing emails. Basis: your consent. Every email contains an unsubscribe link.
4. Progress photographs and testimonials
Progress photographs are used solely to track your results privately, unless you give separate written permission for a specific image to be published. That permission is always optional, is never a condition of coaching, and can be withdrawn at any time, after which the image will be removed from the website and social channels going forward.
5. Who your data is shared with
Data is shared only with the service providers needed to run the business. Each acts as a processor under contract:
- Calendly for consultation bookings.
- WhatsApp (Meta) where you choose to message on that channel.
- [TO CONFIRM: coaching app name] for training plans, nutrition targets, check-ins and progress data.
- [TO CONFIRM: analytics provider] for website usage statistics.
- [TO CONFIRM: email marketing provider] for newsletters, where you have subscribed.
- [TO CONFIRM: payment provider] for taking payment. Full card numbers are never seen or stored.
- Google Fonts, which serves the typefaces used on this site. Your IP address is transmitted to Google to deliver them.
- [TO CONFIRM: hosting provider], which hosts the site and keeps server logs.
Your data is not sold, rented or traded. It may be disclosed if required by law or by a competent authority.
6. International transfers
Several providers listed above store data outside the United Arab Emirates, mainly in the United States and the European Union. Where data belonging to EEA or UK clients is transferred, it relies on the European Commission Standard Contractual Clauses or an adequacy decision. Under the PDPL, transfers are made to jurisdictions with adequate protection or under appropriate contractual safeguards.
7. Cookies and tracking
A consent banner appears on your first visit. Nothing that tracks you is loaded before you make a choice.
Strictly necessary
These make the site work and remember your cookie choice. They are stored in your browser's local storage under el_consent_v1 and set on the basis of legitimate interest. They cannot be switched off.
Analytics
Google Analytics 4, loaded only if you accept. It records which pages are read, how long visits last and roughly where visitors come from. IP addresses are anonymised.
Marketing
The Meta Pixel, loaded only if you accept. It lets advertising on Instagram and Facebook be measured and targeted, and may match your activity to your Meta account. Google Consent Mode v2 is used so that advertising and analytics storage stay denied until you agree.
You can change or withdraw your choice at any time using the Cookie settings link in the footer of every page. Withdrawing consent stops further collection. It does not undo processing that already took place.
8. How long data is kept
- Enquiries that do not become clients: up to 12 months.
- Client coaching records including health and progress data: for the duration of coaching and 24 months afterwards, so that a returning client keeps their history.
- Invoices and accounting records: as long as UAE tax and commercial law requires, currently at least 5 years.
- Marketing contacts: until you unsubscribe.
- Analytics data: up to 14 months.
9. Your rights
You may at any time:
- Request a copy of the data held about you.
- Have inaccurate data corrected.
- Request deletion of your data, subject to records that must be kept by law.
- Withdraw consent, including consent to process health data or to use your photographs.
- Object to or request restriction of processing.
- Receive your data in a portable, machine-readable format.
- Lodge a complaint. In the UAE this is with the UAE Data Office. In the EEA or UK it is with your national supervisory authority.
To exercise any of these, email lades.emily@yahoo.de. A response will be given within 30 days.
10. Security
Access to client data is limited to Emily Lades and the processors listed above. Accounts are protected by strong passwords and, where the provider supports it, two-factor authentication. No transmission over the internet can be guaranteed completely secure, but data is not kept for longer than needed and is not shared beyond what is described here.
11. Children
Coaching is offered to adults aged 18 and over. Data relating to children is not knowingly collected. If you believe a minor has provided data, contact the address above and it will be deleted.
12. Changes to this policy
This policy may be updated as the business or its providers change. The date at the top shows the current version. Material changes affecting existing clients will be communicated directly.