PRIVACY NOTICE

Last updated: 8 October 2026

This Privacy Notice explains how Keane Ventures Ltd, trading as Compound², collects, uses, stores and shares personal information when you visit our Squarespace website, enquire about or receive coaching (including Individual Coaching, Compound Together, Running Coaching and Face-to-Face Coaching), use Compound² Blueprint, purchase services or otherwise interact with us.

1. Who we are

Keane Ventures Ltd is the controller of the personal information described in this notice. Compound² is a trading name of Keane Ventures Ltd, a private limited company registered in Scotland (company number SC856718).

·  Registered office: 34 Orbiston Drive, Bellshill, ML4 2LP

·  Email: admin@compoundsquared.co.uk

·  Website: www.compoundsquared.co.uk

If you have a question about this notice or how we use your personal information, please contact us using the email address above.

2. Personal information we may collect

Depending on how you interact with Compound², we may collect:

·  Identity and contact information, such as your name, date of birth, email address, telephone number and account details.

·  Transaction and subscription information, such as the service purchased, payment status, billing history, cancellations and refunds. We do not normally receive or store your full payment-card details where payment is processed by a specialist payment provider.

·  Blueprint setup information, such as your goals, training experience, training availability, equipment access, exercise preferences, height, weight, activity levels, nutrition-related information and other information needed to set appropriate starting targets.

·  Health and safety information, such as answers to pre-exercise screening, injuries, physical limitations, relevant medical conditions or symptoms, and other information you choose or are required to provide so that we can assess suitability and provide the service safely.

·  Progress information you choose to record, which may include body weight, measurements, progress photographs, exercise performance, steps, habits, nutrition logs and other activity data.

·  Communications and support information, including questions, messages, feedback, complaints and records of our communications with you.

·  Technical and usage information, such as IP address, device/browser information, login records and information about how our website or client platforms are used, where this is collected by us or our service providers.

·  Marketing preferences, including whether you have asked to receive or stop receiving marketing communications.

We aim to collect only information that is relevant and reasonably necessary for the purpose for which it is requested.

3. Health information and other special-category data

Some information used for our coaching services, health screening or Blueprint may reveal information about your physical or mental health. Health information is special-category personal data and receives additional protection under data-protection law.

Where we rely on your explicit consent to process health information, we will ask for that consent separately and clearly. You can withdraw that consent at any time by contacting admin@compoundsquared.co.uk. Withdrawal does not make earlier processing unlawful. If particular health information is necessary to assess suitability or provide an exercise programme safely, withdrawing consent may mean that we cannot continue to provide some or all of the service.

Please do not provide medical or other sensitive information that we have not asked for unless you believe it is relevant to your safe use of the service.

4. How and why we use your information

We may use personal information for the following purposes:

·  To set up and administer your account, subscription and purchases.

·  To respond to website coaching enquiries, assess service suitability, and provide coaching, Blueprint and any add-ons purchased, including personalising appropriate training, nutrition and activity targets.

·  To complete health screening, identify potential safety concerns and decide whether further information or professional clearance may be appropriate before exercise programming is provided.

·  To provide programme-related support and respond to questions, requests or complaints.

·  To monitor service use, maintain security, prevent misuse and troubleshoot technical problems.

·  To keep financial, contractual and business records and meet legal, tax, accounting and regulatory obligations.

·  To establish, exercise or defend legal claims where necessary.

·  To improve our services, resources, onboarding and customer experience using information that is appropriate for that purpose.

·  To send service messages, such as account, payment, subscription, safety or operational communications.

·  To send marketing communications where permitted by law and in accordance with your preferences.

5. Our lawful bases

Under UK data-protection law we must have a lawful basis for using personal information. The basis depends on the purpose and information involved.

·  Contract: where processing is necessary to take steps at your request before you join, or to provide and administer a service you have purchased.

·  Legal obligation: where we need to keep or use information to comply with a legal requirement.

·  Legitimate interests: where we have a legitimate business reason to use information and your rights and interests do not override that reason, for example appropriate service administration, security, fraud prevention, business management and the establishment or defence of legal claims.

·  Consent: where you have given us a genuine choice and have agreed to a particular use, for example certain marketing activities.

·  Explicit consent: where appropriate, for the processing of special-category health information required for specified coaching and Blueprint health-screening, suitability and programme purposes.

Where consent is our basis, you may withdraw it at any time. Where we rely on legitimate interests, you may have a right to object to the processing.

6. Automated routing and decision support

Blueprint or our onboarding process may use rules based on information you provide to help route you towards an appropriate programme, starting target or onboarding pathway. Health-screening answers may also trigger a pause or referral for further review. We do not intend to use solely automated decision-making that produces legal or similarly significant effects on you. Where a safety flag requires judgement, it may be reviewed by a person before the service proceeds.

7. Who we may share information with

We do not sell your personal information. We may share information with trusted service providers where this is necessary to run Compound² and provide your service.

·  Client-management and fitness-platform providers used to deliver programmes, resources, tracking, forms, messaging or client accounts, including Kahunas where used for your service.

·  Payment providers, including Stripe, where used to process subscriptions or other payments.

·  Cloud productivity, email and file-storage providers, including Google Workspace.

·  Website hosting, analytics, communications, IT, security, professional advisory or administrative providers where required.

·  Accountants, insurers, solicitors or other professional advisers where reasonably necessary.

·  Government bodies, regulators, law-enforcement agencies, courts or other parties where disclosure is required by law or necessary to protect legal rights.

Service providers acting on our behalf are permitted to use personal information only for the relevant service and subject to appropriate contractual and security arrangements.

8. International transfers

Some technology or service providers may process personal information outside the United Kingdom. Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate lawful transfer mechanism and safeguards are in place where required, such as an adequacy regulation or approved contractual safeguards.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing the service, meeting legal and accounting requirements, resolving disputes and establishing or defending legal claims.

·  Active account and programme information is normally retained while you use the relevant service.

·  Core contractual, transaction and accounting records may normally be retained for up to six years after the relevant relationship or transaction ends where needed for legal, tax, accounting or claims purposes.

·  Health-screening and programme-safety records will be reviewed and retained only for as long as reasonably necessary for service, safety, insurance and legal-claims purposes.

·  Marketing preference and suppression records may be retained so that we can respect a request not to receive marketing.

·  Information that is no longer required will be deleted, anonymised or securely disposed of where reasonably practicable.

Different retention periods may apply where the law requires a longer or shorter period, a dispute or claim is ongoing, or there is another legitimate reason to retain the information.

10. Keeping information secure

We use appropriate organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures may include controlled access, passwords and authentication, reputable cloud providers, device and account security, staff/contractor access restrictions and appropriate supplier arrangements.

No internet-based system can be guaranteed to be completely secure. You are responsible for keeping your own account credentials confidential and for telling us promptly if you believe your account or personal information has been compromised.

11. Your data-protection rights

Depending on the circumstances, you may have rights to:

·  be informed about how your personal information is used;

·  request access to the personal information we hold about you;

·  ask us to correct inaccurate or incomplete information;

·  ask us to erase personal information in certain circumstances;

·  ask us to restrict processing in certain circumstances;

·  receive certain information in a portable format and/or ask for it to be transferred where the right to data portability applies;

·  object to certain processing, including direct marketing and some processing based on legitimate interests;

·  withdraw consent at any time where we rely on consent or explicit consent; and

·  raise concerns about certain automated decision-making where applicable.

These rights are not absolute and may depend on the reason we hold the information. We may need to verify your identity before acting on a request. To exercise a right, email admin@compoundsquared.co.uk.

12. Marketing

We may send you marketing about Compound² only where permitted by applicable data-protection and electronic-marketing rules. Where consent is required, it will be requested separately and will not be bundled into acceptance of coaching or Blueprint terms and conditions or health-data consent.

You can opt out of marketing at any time using an unsubscribe option where provided or by contacting admin@compoundsquared.co.uk. You may still receive non-marketing service communications that are necessary to administer your account, subscription or safety.

13. Cookies and website analytics

Our Squarespace website uses cookies and similar technologies for website operation and may use analytics or other non-essential technologies depending on the settings enabled. Where consent is required, we will seek it before setting non-essential cookies. Visitors can use the cookie banner and cookie preferences controls to manage their choices. Further information about the cookies actually in use is available through those controls; we will review this notice when website features or tracking settings change.

14. Photographs, testimonials and promotional use

Progress photographs, messages, results or testimonials supplied as part of your service will not automatically be used in Compound² marketing. If we wish to use identifiable client content for promotional purposes, we will seek separate, specific permission. Refusing marketing permission will not affect your access to our coaching services or Blueprint.

15. Children

Our coaching and Blueprint services are intended for adults aged 18 and over. We do not knowingly offer these services to children or intentionally collect their personal information through service application or subscription processes.

16. Complaints and the ICO

If you are unhappy with how we have handled your personal information, please contact us first at admin@compoundsquared.co.uk so that we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator. Current contact and complaint information is available at www.ico.org.uk.

17. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in law, our services, technology or how we use personal information. The latest version will be made available through the Compound² website and/or client platform. Where a change materially affects how we use existing personal information, we will bring it to your attention where required.

18. Contact us

Keane Ventures Ltd t/a Compound²
Company number: SC856718
Registered office: 34 Orbiston Drive, Bellshill, ML4 2LP
Email: admin@compoundsquared.co.uk
Website: www.compoundsquared.co.uk

In-Person and Compound Together Coaching

For clients receiving in-person coaching, Compound² may also process appointment and session records, training-location information, emergency contact details, and information needed to arrange access to gyms or other agreed training facilities.

If an accident, injury, medical event or other incident occurs during an in-person session, Compound² may create and retain an accident or incident record. This may include details of what happened, any injury or symptoms reported or observed, first aid or other action taken, witnesses, emergency-service involvement and relevant follow-up information. Where such records contain health information, they are treated as special category personal data and handled accordingly.

Where an alternative gym or training venue is requested, limited personal information may need to be shared with the venue where necessary to arrange lawful access or attendance. Compound² will only share information that is reasonably necessary for that purpose.

Compound Together coaching involves two separate clients. Each participant has their own client record, health screening, consent, programme, goals, nutrition information and progress data. One participant does not automatically have access to the other participant's private information. Compound² will not disclose one participant's confidential health or coaching information to the other unless there is an appropriate lawful basis or the individual has asked us to do so.

Emergency contact details are collected for safety purposes where appropriate to in-person coaching. They will be used only where reasonably necessary in connection with an emergency or serious welfare concern and will not be used for marketing.

19. Website enquiries and applications

When you submit an application or enquiry through our Squarespace website, we collect the information entered into the form, such as your name, email address, coaching goals and any optional details you choose to provide. We use this information to respond, discuss the service you requested and decide whether to take steps towards a coaching agreement. The usual lawful basis is taking steps at your request before entering a contract; legitimate interests may apply to proportionate administration and follow-up. Please do not submit detailed medical information through general enquiry forms. We may use Squarespace and our business email provider to receive, store and respond to enquiries.

20. Enquiry retention and optional email marketing

Where an enquiry does not lead to a client relationship, we normally delete or anonymise the enquiry information within six months of our last substantive contact, unless we need to retain particular records longer for a lawful reason. If you separately opt in to promotional emails, we may keep your name, email address, marketing preferences and evidence of your consent while your permission remains valid and the information remains necessary. You can withdraw your consent at any time using the unsubscribe option (where provided) or by emailing us. Withdrawal does not affect earlier lawful processing. We will not treat submitting a coaching application as consent to marketing.

21. Social media and future audience targeting

We publish organic content on social media platforms. Viewing our public posts does not by itself add you to our marketing contact list. We do not currently upload website applicants’ email addresses to advertising platforms to build customer-matched audiences. If we decide to use customer-list advertising in future, we will first review the appropriate lawful basis, transparency and any consent requirements, update our notices and collection processes where needed, and consider the platform’s own data-processing arrangements. Consent to receive marketing emails alone does not automatically authorise every form of advertising-data sharing.

22. Service-provider clarification

Our website is hosted by Squarespace, which may process website visitor information and application-form submissions on our behalf. Other providers may include Kahunas for coaching delivery, Google Workspace for business email and files, and Stripe where payment processing is used. The specific providers used will depend on the services and features in operation. We review relevant provider arrangements and international data transfers as appropriate.