Privacy Policy

How we collect, use, and protect your personal data.

Last updated: September 2026

Who We Are

O'Hanlon Performance is a GAA speed and strength training service operated by Peter O'Hanlon, Chartered Physiotherapist and S&C Coach.

Data Controller: Peter O'Hanlon, O'Hanlon Performance
Email: info@ohanlonperformance.com
Location: Carrickmacross, Co. Monaghan, Ireland

Your Rights Under GDPR

As a resident of the European Union, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of access — You can request a copy of the personal data we hold about you.
  • Right to rectification — You can request that we correct inaccurate or incomplete data.
  • Right to erasure — You can request that we delete your personal data in certain circumstances.
  • Right to data portability — You can request your data in a structured, machine-readable format.
  • Right to object — You can object to the processing of your personal data for direct marketing purposes.
  • Right to restrict processing — You can request that we limit how we use your data in certain circumstances.
  • Right to withdraw consent — Where we rely on your consent (marketing emails, health data, testimonials), you can withdraw it at any time without affecting processing that happened before.

To exercise any of these rights, contact us at info@ohanlonperformance.com.

What Data We Collect

We collect the following types of personal data:

  • Identity and contact data — Name, email address, phone number (if provided).
  • Payment data — Payment information is processed securely via Stripe. We do not store your full payment card details.
  • Performance and training data — For Custom Programming and Teams clients, we collect training history, goals, position, available equipment, logged sessions, check-in answers and programme feedback via the training app. This data is used to create and adjust individualised programming.
  • Health data — For Custom Programming and Teams clients, the health screen and intake forms in the training app ask about medical conditions, injuries, pain and medication. This is special-category data under GDPR and is collected only with your explicit consent, given in the app, so that your programme is safe and appropriate for you.
  • Usage data — Information about how you use our website, collected via Google Analytics (anonymised).
  • Communications — If you contact us via email or the contact form, we store your messages and responses.

How We Use Your Data

We use your personal data for the following purposes:

  • Service delivery — To deliver training programs through your account on our website (Program Library) and via the O'Hanlon Performance training app (Custom Programming and Teams).
  • Program customisation — To create individualised training programs based on your profile, goals, and injury history (Custom Programming only).
  • Payment processing — To process one-time payments and recurring subscriptions via Stripe.
  • Customer support — To respond to your questions, feedback, or technical support requests.
  • Service improvement — To understand how users interact with our website and improve our services.
  • Anonymised case studies and marketing — To use training results, check-in answers and programme feedback with all identifying details removed. We only publish your name, club or image with your separate, specific permission, which you can withdraw at any time.
  • Legal compliance — To comply with legal obligations, such as record-keeping for financial transactions.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Legal Basis for Processing

We process your data under the following legal bases:

  • Contractual necessity — To deliver the services you have purchased.
  • Consent — For marketing emails (you can unsubscribe at any time) and for using your name, club or image in testimonials or case studies.
  • Explicit consent — For the health and injury information you give us in the training app (special-category data), so we can build and adjust your programme safely.
  • Legitimate interests — To improve our services, provide customer support, and use anonymised results and feedback in case studies and marketing.
  • Legal obligation — To comply with tax and financial record-keeping requirements.

Third-Party Services

We use the following third-party services to deliver our programs and process payments:

  • Stripe — Payment processing for one-time purchases and subscriptions. Stripe's privacy policy is available at stripe.com/privacy.
  • Supabase — Database and authentication infrastructure for the O'Hanlon Performance training app. Supabase's privacy policy is available at supabase.com/privacy.
  • Netlify — Website and app hosting, and contact/waitlist form processing. Netlify's privacy policy is available at netlify.com/privacy.
  • Resend — Transactional email (sign-in links, welcome emails). Resend's privacy policy is available at resend.com/legal/privacy-policy.
  • Google Analytics — Website analytics (anonymised data). Google's privacy policy is available at policies.google.com/privacy.

These third parties may process your data outside of Ireland, but we only work with providers that comply with GDPR or have adequate safeguards in place (such as Standard Contractual Clauses).

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

  • Program Library purchases — We retain purchase records for 7 years (tax compliance), but you can request deletion of your personal details at any time.
  • Custom Programming and Teams subscriptions — We retain your training, check-in and health-screen records for 6 years after your last session with us, because our professional liability insurer requires records to be kept for that period. For athletes under 18, records are kept until 6 years after their 18th birthday. You can ask us to delete your account and contact details at any time; the training record itself is kept for that period only, held securely, and used for nothing else.
  • Contact form submissions — Deleted after 2 years unless you become a client.
  • Analytics data — Anonymised data is retained by Google Analytics for 26 months.

Data Security

We take data security seriously and implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS encryption for all website traffic.
  • Secure third-party payment processing via Stripe (PCI DSS compliant).
  • Access controls to limit who can view your personal data.
  • Regular backups to prevent data loss.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Data and the Training App

For Custom Programming and Teams, your training programs are delivered via the O'Hanlon Performance training app. When you sign up, we create an app account for you using your name and email. Your training data is stored on our infrastructure providers (Supabase for database and authentication, Netlify for hosting). You can request deletion of your account and data at any time by contacting us, or from the account section in the app.

Marketing and Communications

We may send you marketing emails if you have opted in to receive them (e.g., by subscribing to our mailing list or purchasing a product). You can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of any email or by contacting us at info@ohanlonperformance.com.

Cookies

We use cookies to improve your experience on our website. For full details, see our Cookie Policy.

Children's Privacy

Athletes under 18 may use Custom Programming or Teams only where a parent or guardian accepts our terms, completes the health screen and consent in the training app, and acts as our point of contact; in-app messaging is switched off for under-18s. Where we rely on consent for a child under 16, that consent must come from the parent or guardian. If we become aware that we have collected personal data from a child without the required parental consent, we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our services after changes are made constitutes acceptance of the updated policy.

Contact and Complaints

If you have any questions about this privacy policy or how we handle your data, contact us at:

Email: info@ohanlonperformance.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: dataprotection.ie
Phone: +353 (0)761 104 800