1. Overview and Scope

Gridsfeedhous Athletic Performance Systems Ltd. ("Gridsfeedhous", "we", "us", or "our") operates the web domain gridsfeedhous.pics. We are committed to upholding rigorous standards of privacy protection, information security, and user transparency. This Privacy Policy details the exact mechanisms by which we collect, process, store, and safeguard personal data and performance metrics when you interact with our website, access our research protocols, or register for diagnostic training bulletins.

Our operations strictly align with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (Regulation (EU) 2016/679), and applicable international standards including the California Consumer Privacy Act (CCPA/CPRA).

2. Categories of Information We Collect

We gather data through direct interactions and automated diagnostic telemetry:

• Directly Provided Identity Data: Name, professional title, coaching affiliation, contact email address, and diagnostic submission notes submitted through our contact forms or technical newsletters.
• Performance Diagnostic Inputs: Voluntary user-submitted parameters regarding sprint times, velocity measurements, ground reaction forces, or recovery metrics used within our client calculators.
• Technical & Network Data: Internet Protocol (IP) addresses, browser type, operating system version, time zone settings, referring URLs, and interaction patterns gathered via server log files.
• Cookie & Local Storage Data: Consent state markers (stored locally via browser LocalStorage), security session tokens, and aggregate traffic diagnostics.

3. Legal Bases for Processing

Under Article 6 of the GDPR, we process personal information exclusively under the following established lawful grounds:

• Consent: Where you have provided clear, affirmative consent for specific newsletter communications or diagnostic evaluations.
• Contractual Necessity: To fulfill coaching service agreements, facility assessments, and technical consultations.
• Legitimate Interests: To optimize system security, prevent unauthorized data extraction, and enhance our sports science research content delivery.
• Legal Compliance: To satisfy corporate accounting, statutory record retention, and regulatory compliance obligations in the UK.

4. Third-Party Data Disclosures

We do not sell, rent, or monetize your personal data. We disclose operational data solely to vetted third-party service processors operating under strict confidentiality and data-processing agreements:

• Cloud Infrastructure Providers: Secure hosting servers, network firewalls, and Content Delivery Networks (CDNs) situated in the UK and European Economic Area (EEA).
• Communication Channels: Transactional email service gateways used solely to deliver requested research papers.
• Regulatory Authorities: Where compelled by valid law enforcement warrants, court orders, or statutory legal obligations.

5. International Data Transfers

Where data is processed outside the United Kingdom or EEA, we ensure that adequate safeguards are enforced, including UK International Data Transfer Agreements (IDTAs) and Standard Contractual Clauses (SCCs) certified under the European Commission framework.

6. Data Subject Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess explicit legal rights regarding your personal information:

• Right of Access: Obtain confirmation of whether your data is processed and request copies of recorded personal records.
• Right to Rectification: Request correction of inaccurate or incomplete athletic registry files.
• Right to Erasure ("Right to be Forgotten"): Request complete deletion of your records where retention is no longer legally mandated.
• Right to Restrict Processing: Suspend specific processing operations during data accuracy disputes.
• Right to Data Portability: Obtain your submitted data in a structured, commonly used, machine-readable format.
• Right to Opt-Out: Withdraw consent for non-essential communications at any time.

To exercise any of these statutory rights, submit an official request to our Data Protection Officer at: [email protected].

7. Data Retention & Security Architecture

We implement advanced technical safeguards including TLS 1.3 cryptographic transport protocols, restricted least-privilege administrative access, and encrypted server storage. We retain personal inquiry data for a maximum of 24 months from last active engagement unless a longer statutory retention period is required by law.

8. Policy Amendments

We reserve the right to modify this Privacy Policy to reflect advancements in our performance technologies or statutory regulatory revisions. Any updates will be published immediately to gridsfeedhous.pics with a revised operational version timestamp.