Privacy Policy — Roost Training

This Privacy Policy explains how Vannapha Lance Vihongkham, trading as Roost Training ("we," "us," or "our"), collects, uses, stores, and shares your personal information when you use our website, programs, and coaching services (the "Service").

We act as the data controller for the personal information we process. For payment-related data, our Merchant of Record, Paddle, processes data as a separate controller for the purpose of completing transactions. Paddle's privacy practices are described in its own privacy notice.

1. Information We Collect

We collect the following categories of personal information:

Account information: name, email address, password, and login credentials.
Contact information: email address and any messages you send to support.
Usage and telemetry: pages visited, features used, workout plan interactions, and device or browser information.
Device identifiers: IP address, browser type, operating system, and referral information.
Payment information: we do not store full payment card details on our servers. Payment information is collected and processed by Paddle, our Merchant of Record.

2. How We Use Your Information

We use personal information for the following purposes:

To create and manage your account;
To provide the programs, coaching, and services you purchase;
To process payments and subscriptions through Paddle;
To communicate with you about your account, updates, and support requests;
To maintain security, detect fraud, and prevent abuse;
To improve the Service and understand how users interact with it;
To send marketing communications, where you have consented or where permitted by law.

3. Legal Basis for Processing

We process your personal information on the following legal bases: (a) performance of a contract with you, (b) our legitimate interests in operating and improving the Service, (c) your consent, where required, and (d) compliance with legal obligations.

4. How We Share Your Information

We share personal information with the following categories of recipients:

Service providers: hosting, analytics, email, customer support, and other tools that help us operate the Service.
Merchant of Record: Paddle, for sale of the product, subscription management, payments, tax compliance, and invoicing.
Professional advisers: legal, accounting, and other advisers where necessary.
Authorities: law enforcement, regulators, or courts when required by law or to protect our legal rights.

5. Data Retention

We keep your personal information for as long as necessary to provide the Service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

6. International Transfers

If you are located in the United Kingdom or European Economic Area, your personal information may be transferred to countries outside of those regions. We use appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions, to protect your information during those transfers.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you;
Request correction of inaccurate information;
Request deletion of your personal information;
Request restriction or object to processing;
Request portability of your information;
Withdraw consent where processing is based on consent;
Complain to a supervisory authority.

We will respond to requests within one month of receipt. To exercise your rights, contact us at roost@roosttraining.com.

8. Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption, access controls, and regular review of our practices. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Cookies and Tracking

We use cookies and similar technologies to operate the Service, analyze usage, and improve your experience. Essential cookies are necessary for the Service to function. Analytics and marketing cookies may be used where you have provided consent. You can manage your cookie preferences through your browser settings.

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact

If you have questions or concerns about this Privacy Policy, please contact us at roost@roosttraining.com.