Privacy Policy
This page explains what personal information NEVER-LESS collects when you use Your Starting Numbers or apply for coaching, why it is collected, who handles it, how long it is kept, and how to have it deleted. It is written to be read, not to be survived.
Who is responsible for your information
NEVER-LESS is an online coaching business run by Garry and Gaggi (Gurinder Singh) from Sydney, New South Wales, Australia. For anything on this page, email [email protected].
Under UK GDPR we are the data controller for the information described here. Under PIPEDA we are the organisation accountable for it.
What we collect
Two different things, depending on what you did: your calculator answers, first name, email and country if you asked for your full sheet from Your Starting Numbers, or the answers to the application form if you applied for coaching. Plus a small amount of technical context either way.
If you used Your Starting Numbers
The calorie number on screen is worked out in your browser. Nothing you type into the calculator is sent to us unless you ask for the full sheet by giving your first name, email and country. Our analytics (below) do record that a result was shown, and which goal you picked.
When you ask for the full sheet, we store:
| What | Why we need it |
|---|---|
| Your first name, email address and country | To email you the sheet, and to know your time zone if we talk later. Every email we send has an unsubscribe link, or you can just write to us. |
| Your answers: goal, sex, age, height, current weight, target weight (if you gave one), days a week you can train, how active your job is, and whether you eat vegetarian | To work out your numbers. If you later apply, the coaches can see where you started. |
| The daily calorie and protein figures the calculator gave you | So the coaches can see the numbers you were given if you later apply |
| The tracked link code in the address you arrived on (the ?via= part, for example ?via=ig-garry) and any marketing parameters in it (utm_source and similar), the name of the site that referred you if your browser shares it, and which part of the page brought you to the calculator | To know which links and which parts of the page actually bring people in |
| A two-letter country code worked out from your IP address by our hosting provider, and the random session reference described under Analytics | Basic analytics. Your IP address is never stored. |
The rest of the sheet (carbs, fat, the food translation and the timeline) goes into the email we send you and is not saved in our database. If you later apply with the same email address, we link the two so the coaches see both. We don't sell or rent your details, and you can have them deleted at any time by writing to us.
If you applied for coaching
| What | Why we need it |
|---|---|
| Name, email address, how you would like us to reach you, and, if you choose those contact methods, your WhatsApp number or Instagram handle | To reply to your application and, if you become a client, to deliver coaching |
| Country and city | To know which market you're in and to schedule a weekly call in your timezone rather than ours |
| Which coach you would rather work with (or no preference), age, when you want to start, how long you have been training, days a week you can train, the longest you have trained without stopping, main goal, and current and target weight | To assess whether coaching is a fit and to build your first training plan and nutrition guidance |
| Your answers to the pre-exercise health screen, anything you add about injuries or conditions, and your answer to the question about performance-enhancing drugs | To avoid programming something that could hurt you, and to know when to send you to a doctor instead. This is health information and is treated as sensitive, see below. |
| Whether you can commit to the price, and what you tell us about where you are now and what you want to change | To decide who to take on, and to understand why people apply |
| Your tick in the consent box | A record that you agreed to the Terms and this policy |
| The tracked link code in the address you arrived on (the ?via= part) and any marketing parameters in it (utm_source and similar), the name of the site that referred you if your browser shares it, the address of the page you applied from, and which part of the page you started the application from (for example the top of the page, the offer, or the button fixed to the bottom of the screen) | To know which links and which parts of the page actually bring people who apply |
| A two-letter country code worked out from your IP address by our hosting provider, your browser's user-agent string, and the random session reference described under Analytics | Basic analytics and fraud prevention. Your IP address is never stored. |
If you used the calculator with the same email address, your application is linked to it.
Health information
The pre-exercise health screen, the free-text box beside it and the question about performance-enhancing drugs are "special category" data under UK GDPR and sensitive information under Australian law. We ask for them because programming exercise for someone without knowing this would be careless. We collect them only with your explicit consent, the tick box on the form, use them only to make your programme safe and to know when to refer you elsewhere, never share them, and delete them on request. Please don't include more detail than we need.
Only the two coaches and the site admin can see these answers, in a private staff console they sign in to. They never appear in any email. The email the coaches get when you apply says only whether you ticked something on the health screen, never what.
What we don't collect
- No cookies. This site sets none, which is why there is no cookie banner.
- No advertising or cross-site tracking pixels, and no third-party analytics service.
- No date of birth. We ask your age as a plain number instead.
- No payment card details on this site. There is no checkout here. If you become a client, we send you a Stripe payment link after your call, and your card details go to Stripe directly.
- No IP addresses in storage.
Our legal basis (UK and EU visitors)
- Consent, for storing your application and for any health details you provide. You give it by ticking the consent box; you can withdraw it at any time.
- Consent, for the calculator. You give it by asking for your sheet; you can withdraw it at any time.
- Contract, where you become a client, to deliver the coaching you've paid for.
- Legitimate interests, for basic, cookieless analytics that tell us how the page performs and which links bring people in. The events hold no name, no email address and no IP address.
For Canadian visitors, PIPEDA applies and we rely on your express consent, given at the point of submission.
Analytics, and why there's no cookie banner
We measure how the page performs: page views, how far people scroll, which buttons get tapped, how far people get through the calculator and the application, which questions in the FAQ get opened, and how many applications are completed. This is our own analytics. It goes to our own server and into our own database, not to an analytics company.
It is done without cookies and without any persistent identifier. A random session reference is generated in your browser's memory, is never written to your device, and disappears the moment you close the tab. There is nothing stored that could be used to recognise you on a later visit or on another website.
Each event carries:
- that session reference, the page, and how long after the page loaded it happened
- a two-letter country code worked out from your IP address by our hosting provider. Your IP address is never stored.
- the tracked link code in the address you arrived on (the ?via= part), any marketing parameters in it (utm_source and similar), and the name of the site that referred you if your browser shares it
- on the first page view, your screen width and whether you are in Instagram's in-app browser
Each Instagram account we run has its own tracked link, so the code tells us which account's link you tapped. Other links we share get codes of their own. If you then ask for your calculator sheet or send an application, we also note which part of the page you started from, and the session reference is saved with what you sent. That lets us see which steps of that one visit led to it. It is never used to recognise you on another visit.
Who your information is shared with
We do not sell your information and we do not share it for anyone else's marketing. It is handled by these service providers on our behalf:
- Cloudflare hosts this website and the server functions behind its forms and analytics, runs its domain name system, and forwards email sent to [email protected]. It works from a global network.
- Supabase is the database where calculator answers, applications and analytics events are stored. Our project is in Sydney, Australia.
- Resend sends our email: the notice to the coaches when you apply, your calculator sheet if you asked for it, and the sign-in links for our staff console. It sends from Tokyo, Japan, through Amazon SES.
- Stripe takes payments, only if you become a client. Your card details go to Stripe directly; we never see them.
We will also disclose information where we are legally required to, or where it is necessary to protect someone's safety.
International transfers
Our database is in Sydney, Australia (Supabase, region ap-southeast-2). Email is sent from Tokyo, Japan (Resend, through Amazon SES), so the emails we send you or the coaches about you pass through Japan. Cloudflare serves the site from its global network, so your visit is handled at a location near you before it reaches our server functions.
If you are outside Australia, your information is sent to Australia to be stored. If you are in the UK, the EU, or Canada, your information may be processed outside your country. Where that happens we rely on the providers' Standard Contractual Clauses and the UK International Data Transfer Addendum, and we choose providers that offer comparable protection to your local law.
How long we keep it
| Record | Kept for |
|---|---|
| Applications from people who don't become clients | 24 months from submission, then deleted. This includes people who answered "not right now" on price. |
| Calculator requests (your name, email, country and answers) | Until you ask us to delete them. If you unsubscribe, we stop emailing you. |
| Client records, including health details | 7 years after coaching ends, for tax, insurance and liability reasons |
| Cookieless analytics events | 14 months, then deleted |
You can ask for earlier deletion at any time, see below.
Your rights
Wherever you live, you can ask us to:
- Show you what we hold about you
- Correct anything that's wrong
- Delete it
- Send you a copy in a portable format
- Stop using it, or withdraw consent you previously gave
- Object to any processing based on legitimate interests
Email [email protected] from the address you used on the calculator or the application. We'll respond within 30 days and there is no charge. Withdrawing consent doesn't undo anything done before you withdrew it.
When you ask us to delete your information, we delete your record and everything linked to it: your applications, your calculator answers and our notes about you.
If you're not happy with how we handled it
- Canada. Office of the Privacy Commissioner of Canada, priv.gc.ca
- United Kingdom. Information Commissioner's Office, ico.org.uk
- Australia. Office of the Australian Information Commissioner, oaic.gov.au
We'd rather you came to us first, but you don't have to.
Client photographs
The before and after images on this site are real clients. Each one gave separate, written permission for their photographs to be published here. That permission can be withdrawn at any time by emailing us, and we will remove the images from the live site promptly. Coaching has never been and will never be conditional on agreeing to have your photos used.
Security
The site is served over HTTPS. Calculator answers, applications and client records are stored in a database with row-level security enabled. The website itself can only add new records; it cannot read any of them back. Only the two coaches and one site admin can read and manage them, by signing in to a private staff console. No system is perfectly secure, and if a breach ever affected your information we would tell you and the relevant regulator as required by law.
Children
Coaching is not offered to anyone under 16, and neither the application form nor the calculator will accept an age below that. We don't knowingly collect information from children. If you believe a child has submitted the form, email us and we'll delete it.
Changes
If this policy changes materially we'll update the date at the top. If the change affects how we use information you've already given us, we'll email you.