Last updated: 22 October 2026 (draft, pending legal review)
This policy explains how The DB Method collects, uses, shares and protects your personal data when you visit dbmethodcoaching.com, complete the Female Performance Audit, send an enquiry or application, message us on WhatsApp or Instagram, or become a coaching, Training Blueprint or retreat client.
1. Who we are
This website and our coaching services are provided under the trading name The DB Method (“we”, “us”, “our”), based in Dubai, United Arab Emirates. “DB Method Coaching” and “Defined Beyond Coaching” refer to the same business.
- Address: Dubai, United Arab Emirates
The DB Method is the controller of your personal data.
Contact for privacy questions: definebeyondcoaching@gmail.com
2. Which laws apply
- United Arab Emirates: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations as in force.
- European Union: the General Data Protection Regulation (EU) 2016/679 (GDPR), when we offer services to, or monitor the behaviour of, people in the EU.
- United Kingdom: the UK GDPR and the Data Protection Act 2018, when we offer services to people in the UK.
- Cookies and similar technologies: the EU ePrivacy rules and the UK Privacy and Electronic Communications Regulations (PECR), where they apply.
Where these laws differ, we apply the higher standard to everyone.
3. The personal data we collect
| Where it comes from | What we collect |
|---|---|
| Enquiry and application forms (homepage, Online Coaching, Training Blueprint, Dubai coaching pages) | Name, email, location or country and time zone, training experience, training days, goals, what you want help with, optional Instagram handle and notes. The form also records the page you were on, the referring site, the time of submission and campaign tags such as utm_source, gclid or fbclid if you arrived from a link or ad. |
| Female Performance Audit | See section 4. |
| Coaching, Training Blueprint and retreat clients | Contact details; onboarding questionnaire; training history; goals; schedule; equipment; body measurements, body weight and progress photos ; training videos you send for review; training logs and check-ins; and, where you choose to share it, health information such as injuries, pain, medical conditions, medications, menstrual cycle, pregnancy or postpartum status, perimenopause or menopause symptoms, PCOS and nutrition. For retreats also: travel dates, dietary requirements and emergency contact. |
| Payments | Billing name, email, amount, date and payment status. Card details are handled by our payment provider, and we never see or store your full card number. |
| Messages | What you send us by WhatsApp, email, Instagram direct message or in your private coaching app. |
| Website use | Technical data processed by our host when you load a page (IP address, browser, device, pages requested and time). See section 9 for analytics and storage on your device. |
We do not knowingly collect data from anyone under 18. Our services are for adults only.
4. The Female Performance Audit and your health data
The audit asks 35 questions about training, nutrition, recovery, lifestyle, movement and female health, including your age, how regular your menstrual cycle is, heavy or painful periods, whether iron or vitamin D markers have been checked, fatigue, bloating, pain and injuries. Information about your health and menstrual cycle is special category data under the GDPR and UK GDPR and sensitive personal data under the UAE PDPL.
How it works today:
- While you answer, your answers are saved only in your own browser (local storage) so you can resume. They are not sent to us at that stage.
- When you request your report, we receive your first name, email, country or city, your consent choices, your overall score, your score for each of the six areas (including Female Health), your three priority areas, the recommendations shown to you, and the unscored context stored with the report: age, height and weight if you entered them, hormonal contraception, PCOS status, occupation, caring responsibilities, and your answer to “What is the biggest obstacle preventing progress?”. Your individual answers to the scored menstrual-cycle and symptom questions are used in your browser to calculate your Female Health score and are not sent to us as separate answers. The same report is stored with the form submission.
- Your report is generated in your browser as a PDF and sent through Resend so it can be emailed to you. A mailing list is updated only if you tick the optional marketing box, and that list receives your name and email, not your scores or PDF.
- If you later choose a “primary goal”, we receive that goal too.
Legal basis. We process this information only with your explicit consent, given by ticking the health-data consent box before you unlock your report (GDPR/UK GDPR Article 9(2)(a); PDPL consent). The audit works the same whether or not you agree to marketing emails, which is a separate, optional choice.
Withdrawing consent. You can withdraw at any time by emailing definebeyondcoaching@gmail.com. We will then delete your audit data, except anything we must keep by law. Withdrawal does not affect processing that took place before it.
Automated scoring. Your score and the suggested coaching route are calculated automatically. They are educational, have no legal or similarly significant effect on you, and do not decide whether you can work with us. Every application is reviewed by a person. You can ask for any recommendation to be explained or reviewed by a human.
The audit does not diagnose, treat or rule out any medical condition.
5. Why we use your data and our legal bases
| Purpose | GDPR / UK GDPR basis | UAE PDPL basis |
|---|---|---|
| Reply to enquiries and assess applications | Steps at your request before a contract (Art. 6(1)(b)) | Consent / performing a contract you requested |
| Deliver coaching, Blueprints and retreats, including programme design and video review | Contract (Art. 6(1)(b)) | Performing a contract |
| Use health, cycle and body data to tailor your training | Explicit consent (Art. 9(2)(a)) | Explicit consent for sensitive data |
| Create and send your audit report | Explicit consent (Art. 6(1)(a) and 9(2)(a)) | Consent |
| Send educational and marketing emails | Consent (Art. 6(1)(a)); PECR/ePrivacy | Consent |
| Take payments, keep accounts and meet tax obligations | Legal obligation (Art. 6(1)(c)) and contract | Legal obligation / contract |
| Website security and keeping the site working | Legitimate interests (Art. 6(1)(f)) | Legitimate grounds permitted by law |
| Measure which pages and campaigns lead to enquiries (Google Analytics 4) | Consent (Art. 6(1)(a); ePrivacy/PECR), given in the cookie banner once analytics is switched on | Consent |
| Handle complaints and legal claims | Legitimate interests / Art. 9(2)(f) for health data | As permitted by law |
6. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, or where the law requires it.
| Provider | What they do | Where data may be processed |
|---|---|---|
| Netlify, Inc. | Website hosting, contact and application forms (Netlify Forms), the function that emails audit reports, and server logs | United States and global edge network |
| Private coaching app | Coaching platform: your programme, training logs, check-ins, video uploads and messages | As described in the coaching app provider’s privacy policy |
| Resend | Sends your audit report email | United States |
| Google (Gmail) | Our business email inbox, definebeyondcoaching@gmail.com | Google’s global data centres |
| Marketing email | Occasional educational emails, only if you opt in. No separate newsletter platform is connected yet. | Named in this policy if a platform is added |
| Google Analytics 4: Google Ireland Limited (for visitors in the EEA/UK) and Google LLC (elsewhere), acting as our processor under Google’s Ads Data Processing Terms | Website statistics, only if you accept analytics cookies (see section 9) | United States and Google’s global data centres |
| Meta Platforms (WhatsApp, Instagram) | Messages you send us on these apps | Global |
| Payment provider | Card payments. We never see or store the full card number. | Named in this policy before it is final |
| Video-call provider | Consultations and calls | Named in this policy before it is final |
| Professional advisers (accountants, lawyers, insurers) | Under confidentiality | United Arab Emirates |
| Retreat partners (venue, transfers) | Only what is needed for your booking, such as name and dietary needs | Thailand |
We may also disclose data if required by law, a court or a regulator, or to protect someone’s vital interests in an emergency.
7. International transfers
We are based in the UAE and some of our providers process data in other countries, including the United States. Where the GDPR or UK GDPR applies, we use recognised safeguards such as adequacy decisions, the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum, plus our providers’ security commitments. Where the UAE PDPL applies, we transfer data abroad only as the PDPL permits. You can ask us for a copy of the relevant safeguards.
8. WhatsApp and Instagram
If you message us on WhatsApp (+971 58 594 7812) or Instagram, Meta processes those messages under its own privacy policy, and we see your name, number or handle and your messages. WhatsApp messages are end-to-end encrypted in transit, but they are stored on our devices and backups. We keep chats for up to 12 months after our last conversation unless you become a client. Please don’t send detailed medical information by WhatsApp or Instagram. Once you’re a client, we’ll move coaching conversations into your private coaching app.
9. Cookies, local storage and analytics
- Essential browser storage (no consent needed): the audit saves your progress in your browser’s local storage. The site uses session storage to remember whether you have seen the opening animation (
db-intro-seen) and to keep campaign tags for the length of your visit (db_attribution) so they can be included with a form you send. You can clear these at any time in your browser settings. - Analytics: Google Analytics 4, only with your consent, and not switched on yet. No analytics cookies are set today. When analytics is switched on, a banner will ask whether you accept analytics cookies, and nothing will be sent to Google until you click “Accept analytics”. We will use Google Consent Mode, so analytics storage stays “denied” unless you agree, and all advertising storage and personalisation stay off.
- If you accept: Google Analytics sets first-party cookies (
_gaand_ga_<ID>, which last up to 2 years) to count visits and understand which pages and links people use. For example, it tells us whether someone clicked “Apply for Online Coaching”, started or completed the Female Performance Audit, sent an enquiry, or clicked WhatsApp. It also receives your device and browser type, approximate location (country/city, derived from your IP address, which GA4 does not store) and the referring site or campaign tags. - What we never send to Google: your name, email, audit answers, health or cycle information, audit priority areas, or the contents of any form.
- Settings: Google Signals and ad personalisation are switched off, and Google keeps analytics data for 14 months.
- Google’s role: Google acts as our processor for this data. See how Google uses data from sites that use its services.
- If you reject, or later change your mind: no analytics cookies are set, and any existing Google Analytics cookies are deleted. Your choice is saved in your browser (
db-analytics-consent) for 12 months. You can change it at any time with Cookie settings, a link that also appears in every page footer. - Marketing pixels: none. We don’t use advertising or social-media tracking pixels. If that changes, we will ask for your consent first and update this policy.
10. How long we keep your data
| Data | How long |
|---|---|
| Enquiries and applications that don’t lead to coaching | 12 months after our last contact |
| Female Performance Audit report data | 24 months or until you withdraw consent or unsubscribe, whichever is sooner |
| Marketing email list | Until you unsubscribe |
| Client coaching records (programmes, check-ins, notes) | the duration of coaching plus 2 years |
| Health, cycle and body information for clients | the duration of coaching plus 2 years, or sooner on request |
| Training videos sent for review | 90 days after review, unless kept with your permission |
| Progress photos | the end of coaching plus 6 months, or sooner on request |
| Invoices and payment records | 5 years, or longer if UAE tax or commercial law requires |
| WhatsApp chats | See section 8 |
| Server logs (Netlify) | As set by Netlify |
| Google Analytics data (only if you accepted) | 14 months; _ga cookies up to 2 years in your browser unless you clear them or withdraw consent |
| Your cookie choice | 12 months in your browser, then we ask again |
11. Your rights
Depending on where you live, you have the right to:
- access your personal data and receive a copy;
- correct inaccurate data;
- erase your data (“right to be forgotten”);
- restrict or stop processing;
- object to processing based on legitimate interests, and to direct marketing at any time;
- data portability, i.e. receive your data in a machine-readable format or have it sent to another provider;
- withdraw consent at any time, including for health data and marketing;
- not be subject to decisions based solely on automated processing that significantly affect you, and to ask for human review.
To use any of these rights, email definebeyondcoaching@gmail.com. We may need to verify your identity. We will respond within one month (GDPR/UK GDPR), or within the time the PDPL requires, and we’ll tell you if we need longer.
Complaints. Please contact us first so we can help. You can also complain to a regulator: - UAE: the UAE Data Office - EU: your local data protection authority - UK: the Information Commissioner’s Office (ICO), ico.org.uk
12. Marketing emails
We send educational and marketing emails only if you opt in, for example with the separate tick box on the audit. Every email has an unsubscribe link, and you can also email definebeyondcoaching@gmail.com.
13. Security
We use reputable providers with encryption in transit (HTTPS) and access controls, and we limit access to your data to the people who need it to coach you. No system is perfectly secure, but we will notify you and the relevant regulator of a breach where the law requires.
14. Health and fitness disclaimer
Coaching and the audit are educational fitness services, not medical care. Information you share about your health is used to tailor your training, not to diagnose or treat you.
15. Changes to this policy
We will update this page when our practices or the law change, and tell clients about significant changes by email.
16. Contact
The DB Method · Dubai, United Arab Emirates · definebeyondcoaching@gmail.com
Legal entity, trade licence and VAT details will be added here if they apply.