Legal

Privacy Policy

Last updated: September 2026

1. Who we are

DVOTION LTD (registered in England and Wales, company number 17196354), trading as DVOTION Labs ("we", "us"), is a health and performance testing and coaching business operating in London. Contact us at chrisgkoufas@dvotionlabs.com.

2. What data we collect

When you book, enquire or use our services, we collect:

  • Name, email address and phone number
  • Booking details (service, date, time)
  • Health and performance context you provide (training background, goals, injuries, event dates)
  • Payment information: processed by Stripe; we do not store card details
  • Calendar data used to schedule and block appointments

3. How we use your data

  • To process and confirm your booking
  • To deliver the service you have booked
  • To send booking confirmation and appointment reminder emails
  • To create calendar events for your appointment
  • To contact you about your booking or service
  • To maintain records of services delivered

4. Legal basis

We process your data on the basis of contractual necessity (to deliver the service you have booked) and legitimate interests (to manage our business and communicate with clients). Where we process health-related data, we do so with your explicit consent, provided when you complete the booking intake form.

5. Third parties

We share data with the following third parties only as necessary to deliver our services:

  • Stripe: payment processing. Card data is handled by Stripe directly. See stripe.com/gb/privacy.
  • Microsoft (Outlook / Teams): calendar event creation and appointment confirmation emails.
  • Supabase: secure database storage for booking records.
  • Vercel: website hosting, and the page view counts described in section 7.

We do not sell your data to any third party.

6. Data retention

We retain your booking and contact data for up to 3 years from the date of your last appointment, or as required by applicable law. You may request deletion at any time. See section 8.

7. Cookies and analytics

We use essential cookies, which are required for the site to function: for example, keeping your session while you book. These are always active.

With your consent, we also use analytics and advertising cookies. They tell us how visitors find the site and which pages lead to enquiries and bookings. They are set only after you accept them in the cookie banner, and declining does not affect your ability to use the site or make a booking.

Where you have consented, we use Google Analytics and Google Ads, provided by Google. These record the pages you view, actions such as starting a booking, and how you arrived at the site. We do not send Google your name, email address, telephone number or the content of any enquiry.

Where you have consented, we also use Microsoft Clarity, provided by Microsoft. Clarity is different from the tools above: rather than counting visits, it records a playback of your visit, showing how the page was scrolled and what was clicked, so we can see where the site is hard to use. Microsoft may use what it collects for its own purposes, which are described in their privacy statement at privacy.microsoft.com.

Clarity does not run everywhere on this site. It is switched off entirely on the form we email you before a session, which asks about injuries and training, and on the athlete portal, where your results are. On the booking screen it runs with what you type hidden from the recording, so the name, email address and telephone number you enter are never part of it.

You can withdraw consent at any time by clearing this site’s cookies in your browser, which restores the banner and returns you to essential cookies only.

One measurement tool sits outside all of the above, because it stores nothing on your device and so there is nothing to consent to. Vercel Web Analytics, provided by the company that hosts this site, counts page views. It records the page you opened, the site or search engine you arrived from, and your country, browser and device type. It sets no cookie and writes nothing to your browser. Repeat visits within the same day are counted using a one-way hash generated from the incoming request, which is discarded after 24 hours, so it cannot identify you or recognise you on a later day. We do not send it your name, email address, telephone number or the content of any enquiry, and the booking reference in the address of your confirmation page is removed before the page is counted.

8. Your rights (UK GDPR)

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing based on legitimate interests
  • Lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, contact us at chrisgkoufas@dvotionlabs.com.

9. Contact

Privacy questions: chrisgkoufas@dvotionlabs.com