Last updated: 5 March 2026
This Privacy Policy explains how Nicholas James Hancock (trading as Maximum Mileage Coaching) (“we”, “us”, “our”) collects, uses, discloses and protects your personal information when you use our websites, applications, coaching portals, community spaces, and related services (together, the “Services”).
We are committed to using your data responsibly and in line with the UK GDPR and the Data Protection Act 2018, and — where relevant — the Privacy and Electronic Communications Regulations (PECR).
Controller: Nicholas James Hancock, trading as Maximum Mileage Coaching
Registered/Postal address: 2 St Philip St, Corsham, SN13 0FS
Email: nick@maximummileagecoaching.com
Data protection contact: Privacy Lead (same email as above)
ICO Registered Person — Nicholas Hancock t/a Maximum Mileage Coaching
We collect and process the following categories of personal data, depending on how you interact with us:
Name, email, phone number, postal address, country, emergency contact (optional).
Login details, preferences, messages you send us (email, chat, forms, WhatsApp/DM where applicable), call/meeting recordings where you’ve agreed.
Training history, performance metrics, race results, injury status, goals, scheduling constraints, and health-related information you choose to share (e.g. past injuries, nutrition notes, relevant medical information). This is considered special category data under UK GDPR.
Purchase history (plans, subscriptions), invoice details. Card data is handled by our payment processor — we do not store full card numbers.
IP address, device identifiers, browser type, pages viewed, time on site, clicks, referral URLs, approximate location, and cookie identifiers.
Your marketing preferences, email opens/clicks, webinar attendance, lead magnet downloads, community participation.
Data we receive if you connect third-party services to your account. This includes training platforms, calendar tools, and fitness wearable platforms. When you authorise a connection to a device platform (such as Garmin Connect or Coros), we may receive:
We only request the permissions necessary to deliver your coaching service. You can revoke access to any connected platform at any time through that platform’s own settings or through your account on our platform. Examples of platforms we integrate with include: Garmin Connect, Coros, Intervals.icu, TrainingPeaks, Google/Apple calendars, GoHighLevel, Zapier, Stripe, Calendly, and similar tools. We will only connect or ingest what is needed to deliver the Services you request.
Directly from you: forms, checkout, email/DM, calls, questionnaires, webinars, coaching portal.
Automatically: through cookies, pixels, and similar technologies when you use our websites/apps.
From third parties (when you authorise it): training platforms, calendars, payment providers, scheduling tools, analytics providers, and social networks.
From connected wearable platforms (when you authorise it): fitness data from Garmin Connect, Coros, and similar platforms, accessed via OAuth 2.0 authorisation. We store access tokens securely using encryption at rest to maintain your connection.
We use your data under one or more of the following lawful bases:
Contract — to provide and support the Services you’ve asked for (e.g. coaching, subscriptions, training plans, support).
Consent — for:
Legitimate Interests — to run, improve, and protect our Services (e.g. usage analytics, service improvement, network security, preventing fraud, reasonable personalisation). We balance these interests against your rights and expectations.
Legal Obligation — to meet tax, accounting, and regulatory requirements.
If we rely on consent, you can withdraw it at any time — this won’t affect processing that already happened lawfully.
We do not use your data for automated decision-making that produces legal or similarly significant effects.
We may process health-related data that you choose to share to enable tailored coaching. Because this is sensitive data, we process it only with your explicit consent (UK GDPR Art. 9(2)(a)).
You can decline to share health data, but it may limit our ability to coach safely and effectively.
You can withdraw consent at any time — if you do, we’ll stop processing going forward and securely delete or anonymise this data unless retention is required by law or to establish/exercise/defend legal claims.
We use cookies, pixels, and similar technologies to operate our site and understand usage.
Types of cookies:
Under PECR, we seek your consent for non-essential cookies. You can change your preferences at any time via our Cookie Settings link (where available) or your browser settings.
We share personal data with trusted processors that help us deliver the Services, under contracts that require them to protect your data and only act on our instructions. Typical categories include:
We also share data where required by law, to protect rights and safety, to respond to lawful requests, or in connection with a business reorganisation. We never sell your personal data.
Some processors are located outside the UK/EEA (e.g. in the United States). When we transfer your data internationally, we use lawful safeguards such as:
You can request more information about international transfer safeguards by contacting us.
We use a combination of technical and organisational measures to protect personal data, including encryption in transit, access controls, least-privilege permissions, audit logging where supported, and staff confidentiality obligations. No method is 100% secure, but we work to prevent unauthorised access, alteration, disclosure, or loss.
Access tokens for connected third-party platforms (such as Garmin Connect and Coros) are stored using field-level encryption and are never exposed in logs or to unauthorised parties.
We keep personal data only as long as needed for the purposes described, including to meet legal/accounting obligations, resolve disputes, and enforce agreements. Typical retention periods are:
We may retain anonymised data (which no longer identifies you) for research and business insights.
Under UK GDPR, you have rights to:
To exercise any right, email nick@maximummileagecoaching.com. We may need to verify your identity. There’s no fee unless your request is excessive or unfounded.
You’ll only receive marketing from us if you:
You can unsubscribe at any time via the link in any marketing email or by contacting us. We don’t send third-party marketing without your permission.
Our Services aren’t directed to children. We don’t knowingly collect data from anyone under 13 without parental/guardian consent. If you believe a child has provided us personal data, please contact us and we’ll delete it.
Our Services may include links to third-party sites, apps, or platforms. We’re not responsible for their privacy practices. Please review their policies before you share data with them.
We may update this Privacy Policy to reflect changes to our practices or for legal/regulatory reasons. We’ll post the updated version with a new “Last updated” date and, if changes are significant, we’ll notify you.
Questions about this policy or your data?
Email: nick@maximummileagecoaching.com
Postal: 2 St Philip St, Corsham, SN13 0FS
Exact providers may change from time to time. We keep contracts in place with each provider to ensure UK GDPR-level protections.
If you’d like the current, detailed list of processors and sub-processors, contact us at the email above.
Legal note: This policy is provided for information and transparency. It does not create any contractual or legal rights for third parties. For tailored legal advice, please consult a solicitor.