Performance Laboratory privacy
Your Laboratory data, explained clearly.
Effective 22 September 2026
About this notice
This notice explains how Christopher Fennell trading as Science in Performance processes personal information within the private Performance Laboratory. For privacy enquiries contact science-in-performance@outlook.com.
1. Information the Laboratory may process
Account data: name, email, authentication/account status and security information. Profile data: date of birth, height, body mass, sporting discipline and sex where voluntarily and properly required for a calculation. Performance data: power, pace, speed, cadence, Critical Power, W′, FTP, Critical Speed, D′, CSS, training zones, strength and jump data. Physiological data: where supplied or collected, heart rate, blood lactate, VO₂max, thresholds and physiological test results. Sensor data: connected-device outputs and identifiers where retained. Usage/security data: login activity, security events, access records and technical device/browser information required for security or operation. Coach data: assignments, review status, authorised feedback and coach notes.
2. Special-category information
Some physiological or health-relevant information may amount to health data or other special-category personal data under UK data-protection law. Where that applies, Science in Performance must identify an appropriate Article 9 condition and any applicable Data Protection Act 2018 requirement in addition to an Article 6 lawful basis.
3. Why information is used
Purposes may include creating and securing athlete accounts; delivering the Performance Laboratory; storing testing history; calculating performance metrics; displaying longitudinal trends; providing athlete-specific coaching; enabling authorised coach review; managing assigned tests; recording Live Lab sessions; restoring settings; providing technical support; securing the service; and meeting legal obligations.
4. Lawful basis
Science in Performance processes account and coaching-service information where necessary to provide the Performance Laboratory and related coaching services, and relies on legitimate interests where appropriate for service security, administration, support and improvement. Information may also be processed where necessary to comply with legal obligations. Where physiological information constitutes special-category health data and explicit consent is the appropriate condition, that consent is requested separately and recorded. Agreement to the Terms of Use is not treated as automatic consent for every data-processing purpose, and unrelated marketing consent is not bundled into Laboratory access.
5. Recipients and service providers
Information is accessible only where required for legitimate Science in Performance purposes. Service providers used to operate the Laboratory include Supabase for authentication, database and secure application services, Cloudflare for website and infrastructure delivery, and authorised Science in Performance personnel where access is required for coaching, testing, support or administration. Science in Performance does not sell athlete personal data.
6. International transfers
Some service providers may store or process information outside the United Kingdom. Where a restricted international transfer occurs, Science in Performance uses an applicable lawful transfer mechanism or safeguard, such as UK adequacy regulations or appropriate contractual safeguards. The Laboratory does not represent that all information remains in the UK.
7. Retention
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected, including delivery of coaching and performance services, maintenance of relevant performance history, security, dispute handling and applicable legal or accounting requirements. Different criteria may apply to account information, historical tests, Live Lab data, coach notes, audit/security logs, invitation records and privacy-request records. When information is no longer required, it is deleted or anonymised where appropriate.
8. Security and access controls
The architecture uses authentication, role separation, least-privilege access, Row Level Security, protected server-side administration, encrypted transport, session controls and audit logging. Athletes can access only their own authorised records. Coach access is restricted to legitimate coaching, analysis, testing, support and account-administration purposes. Privileged service keys are not stored in browser code.
9. Live Lab and connected devices
Live Lab may process sensor values during an active testing session. Data are recorded only when a deliberate recording action is started. The service does not create hidden continuous monitoring. Raw high-frequency samples may be buffered before secure persistence for performance and reliability.
10. Your rights
Depending on the circumstances and applicable law, you may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent where consent is relied upon. You may also complain to the Information Commissioner's Office. Requests can be initiated from the Laboratory's Privacy & Data area or by contacting Science in Performance.
11. Export, correction and deletion requests
The Laboratory provides controlled workflows to request a data export, correction or account/data deletion. A deletion request is assessed against any lawful retention requirements; it is not implemented merely by hiding an account from the user interface.
12. Changes to this notice
The privacy notice is version controlled. Material changes will be communicated appropriately and the version displayed/acknowledged may be recorded for audit purposes.
Contact
Science in Performance · Christopher Fennell trading as Science in Performance · Email: science-in-performance@outlook.com. You may also complain to the UK Information Commissioner's Office where applicable.
This page applies specifically to the private Science In Performance Performance Laboratory.