Privacy Policy

• Identity and contact details: name, email, country, date of birth or age.
• Athlete profile: position, level, club or school, goals, strengths, weaknesses, barriers.
• Program activity: module progress, submitted work, notes and review history.
• Media you submit: match or training film, images and documents.
• Payment records processed by our payment provider. Talon never stores full card numbers.
• Basic technical data such as device and log information used to keep the platform secure.

To build your development plan, deliver the program, give accurate feedback, track progress across a term, handle payments and meet legal obligations. Athlete information is used to coach you. It is not sold.

Your athlete profile and submitted work are visible to Sama and to any Talon staff involved in delivering your program. Service providers used to run the platform, including hosting, email and payments, process data on Talon's instructions.

Your information is never sold. It is never shared with clubs, coaches, agents or third parties for opportunity purposes without your express written permission on each occasion.

Where an athlete is under 18, a parent or guardian consents during onboarding and may request access to the athlete's information. Communication may be directed through the consenting adult.

Data is stored on secure infrastructure with access limited to people who need it. Athlete records are kept while the account is active and for a reasonable period afterwards to meet tax and record keeping obligations, then deleted or de-identified.

• Athlete records, module progress and coaching notes: while the account is active, then up to 12 months after the program ends, then deleted or de-identified.
• Applications and waitlist entries that do not convert: up to 24 months, then deleted.
• Enquiry messages: up to 24 months, then deleted.
• Payment and tax records: 7 years, as required for Australian tax record keeping.
• Marketing email consent records: while you stay subscribed, plus 24 months after you unsubscribe, as proof consent was given.
• Security and access logs: up to 12 months.

• Website and platform hosting, database and file storage.
• Stripe, for payments. Stripe handles card details directly. Talon never sees or stores full card numbers.
• Email delivery, for account emails, receipts and any newsletter you opt in to.

Marketing emails are only sent if you tick the opt-in box yourself. It is never pre-ticked. Program, account, payment and coaching emails are service emails and are sent because you have an account or an order. Every marketing email has an unsubscribe link.

You can request a copy of your information, ask for corrections, ask for an export, withdraw consent or ask for deletion by emailing hello@taloncoaching.com. Requests are actioned within 30 days, subject to records Talon is legally required to keep. Deletion requests are confirmed in writing once completed.

You have the right to access, correct, delete, restrict, object to and export your personal data, and the right to complain to your data protection authority.

Lawful bases used: performance of a contract, to deliver a program you bought; consent, for marketing emails and non-essential cookies; legitimate interests, to keep the platform secure and answer enquiries; legal obligation, for tax and accounting records.

You have the right to know what personal information is collected, to request deletion or correction, to request a copy, and not to be discriminated against for exercising those rights.

Talon does not sell personal information and does not share it for cross-context behavioural advertising. There is nothing to opt out of, because it does not happen. Exercise any right by emailing hello@taloncoaching.com.

The site runs over HTTPS only. Access to athlete records is restricted by database-level row security, so athletes see their own records and only Talon staff see the wider roster. Passwords are hashed by the authentication provider and checked against known breached password lists. The database is backed up by the hosting provider, and you can request an export of your own data at any time.

Cookies and similar storage are covered in the Cookie Policy, which lists every cookie actually in use.