YOUR DATA

PRIVACY NOTICE

This explains what we collect, why we need it, and the rights you have over it. We've kept it as plain as we can.

Last updated: 29 October 2026

Who we are

UNFINISHED is a coaching service run by Stuart Morgan, a sole trader trading as Unfinished Method ("we", "us"). We are the data controller for the information you give us through unfinishedmethod.com and the client portal. For anything privacy-related, email unfinishedmethod@gmail.com or use our contact page.

What we collect

Enquiries: your name, email, and anything you tell us about your goals.
Client account: name, email, phone number, sign-in details and your coaching tier.
Onboarding answers: your goals, training experience, availability and equipment, anything else you tell us at the start, and an emergency contact.
Check-ins and coaching records: body weight, measurements, sleep, energy, stress, nutrition notes, training logs, progress photos and any documents you upload, such as blood test results. This includes your programme and nutrition plans and the feedback Stuart writes on your check-ins.
Treatment records: if you are on testosterone therapy (TRT) or peptides, the details you or your prescriber share with us: the product, dose and directions as written, who prescribed or supplied it, monitoring notes, and the letters or documents they come from. We record these to coach around your treatment. We don't prescribe or change treatment.
Technical data: basic security information such as your IP address, used to stop spam and keep accounts safe.

Health information

Check-ins, photos, blood results and TRT or peptide records count as health data, which UK GDPR treats as special category data. We only collect it with your explicit consent, which you give on the onboarding form in the client portal, and only use it to coach you. You can withdraw that consent at any time, though we won't be able to keep coaching you without it. We are a coaching service, not a medical one, and nothing we do replaces advice from your GP.

Why we use it (and our lawful basis)

To reply to enquiries and deliver coaching — to take steps towards, and perform, our contract with you.
To process health information — your explicit consent.
To send UNFINISHED Notes and updates — your consent, which you can withdraw with one click.
To keep the site secure and prevent abuse — our legitimate interests.
To keep financial records — our legal obligations.

Who we share it with

We never sell your data. We use a small number of trusted providers to run the service: secure cloud hosting and database storage, Cloudflare for spam protection, Calendly for booking calls, Google if you choose to sign in with Google, and Stripe for payments once they're live. Each only receives what it needs. Where data leaves the UK, it is protected by UK adequacy rules or approved contract clauses.

How long we keep it

Enquiries that don't become coaching: up to 12 months.
Client coaching records, photos and documents: while you're a client, then up to 2 years.
Financial records: 6 years, as the law requires.

You can ask us to delete your records sooner, and we will unless the law says otherwise.

How we protect it

Data is encrypted in transit and stored with access controls so clients can only see their own records. Photos and documents are kept private, not on public links. Only Stuart and approved staff can see client records.

Your rights

You can ask to see, correct, delete or download your data, object to or restrict how we use it, and withdraw consent at any time. We'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

See our cookie policy for what we store on your device.