Privacy Policy

Last updated: 5 March 2026

Unbroken Protocol ("we", "us", "our") is operated by Abraham Spring. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: Abraham Spring
Business: Unbroken Protocol
Email: welcome@unbrokenclub.com
Website: unbrokenclub.com

2. What Data We Collect

We collect personal data when you voluntarily provide it through our website forms:

Coaching Application Form

• Full name
• Email address
• Responses to discovery questions (sport level, training challenges, goals, coaching tier preference, commitment level, referral source)

Lead Magnet (Recovery Readiness Assessment)

• Email address

Newsletter Signup

• Email address

3. How We Use Your Data

We use your personal data for the following purposes:

• Coaching applications: To review your application, assess suitability for coaching, and contact you regarding a discovery call
• Lead magnet: To deliver the Recovery Readiness Assessment to your email
• Newsletter: To send you performance insights, recovery strategies, and exclusive content

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Lawful Basis for Processing

We process your data under the following lawful bases:

• Consent: You voluntarily submit your data through our forms. You may withdraw consent at any time.
• Legitimate interest: To respond to coaching enquiries and deliver requested content.

5. How We Store Your Data

Form submissions are processed and stored by Netlify (Netlify, Inc.), our website hosting provider. Netlify's servers are located in the United States and they comply with appropriate data protection standards.

We retain your data only as long as necessary for the purposes stated. You may request deletion at any time.

6. Cookies

We use a small number of cookies and similar storage technologies. None of the optional ones are loaded until you give explicit consent via the cookie banner.

Strictly necessary (always on, no consent required)

• up_consent: Stores your cookie preferences for 12 months so we don't ask again on every visit.
• up_admin: Admin authentication cookie. HttpOnly, signed, 30-day expiry. Only present for authorised admin sessions.
• Firebase Auth tokens: Stored in localStorage by Firebase for client sign-in (only after you sign in).
• popup_dismissed / popup_subscribed: Remembers your interaction with newsletter popups, 7-day and permanent respectively.

Analytics (off by default, optional)

• Google Analytics 4 (GA4): Anonymous page views, traffic sources, device type, country/region. IP is anonymised before being sent to Google. Helps us understand how people find the site. Cookies set by GA4 (_ga, _ga_*) last up to 2 years. Loaded only after you accept analytics in the cookie banner.

Anonymous Unbroken research (off by default, optional)

ub_research_consent_v1 stores your separate choice. If enabled, non-identifying race choices and activation stages may contribute to aggregate age-group research. We do not include email, name or health information in these behavioural records. Declining does not affect site or app functionality.

You can change your preferences at any time via the Cookie preferences link in the footer of any page. You can also clear all cookies through your browser settings or opt out of Google Analytics globally with the Google Analytics Opt-out Browser Add-on.

We do not use third-party tracking cookies for advertising.

7. Your Rights

Under the UK GDPR, you have the right to:

• Access. Request a copy of the personal data we hold about you
• Rectification. Request correction of inaccurate personal data
• Erasure. Request deletion of your personal data ("right to be forgotten")
• Restrict processing. Request that we limit how we use your data
• Data portability. Request your data in a structured, machine-readable format
• Object. Object to processing based on legitimate interests
• Withdraw consent. Withdraw consent at any time for consent-based processing

To exercise any of these rights, email us at welcome@unbrokenclub.com. We will respond within 30 days.

8. Third-Party Links

Our website contains links to external sites including Medium, Substack, Spotify, Instagram, and Amazon. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.

9. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

12. Contact

For any questions about this Privacy Policy or your personal data, contact:

Abraham Spring
welcome@unbrokenclub.com