Legal & policies

The Marathon Clinic (“we”, “us”) is operated from Australia. This notice explains the information our website, free tools, training-plan generator and coaching service currently collect and use.

Review status: this notice is an operational description of the current product. It does not claim compliance with every privacy regime and should be reviewed by Australian privacy counsel before a material public launch or expansion into new markets.

What we collect

We collect information you choose to give us, including your name, email, messages, newsletter choices, goal race, race date and time, recent results, training history, weekly volume, availability and location or time zone. When you build or save a plan, we may also store the plan, tool results and the answers used to produce them.

Our plan and coaching forms ask about matters such as pain, illness, pregnancy or postpartum status, bone-stress history, fatigue, fuelling, menstrual changes, injuries and other health context. This can be sensitive information. We collect it only when you provide it, to assess whether automated planning should pause, to prepare for a coaching conversation, and to shape a service you request. Before a generated plan or coaching application containing this context is stored, we ask for express consent and record the notice version and time of that consent. Do not include detail you would prefer to discuss privately.

Website and device information

On public pages, our first-party analytics records the page path, referring domain, campaign parameters, a random visitor identifier, a per-tab session identifier, browser, operating system, device category, user-agent string and, when supplied by our hosting platform, approximate city, region and country. Private plan-result and account paths are excluded from analytics, and public analytics URLs are stripped of query strings and fragments before transmission. We do not intentionally store your IP address in our own page-view records, although hosting and security providers receive network information when they process a request. We also use Vercel Web Analytics and Speed Insights for aggregate site and performance measurement.

Browser storage

The free tools can keep an anonymous runner profile in your browser so your goals, results, training volume, pace and fuelling choices carry between tools. That profile may include your email once you enter it. A separate random visitor identifier supports first-party visit measurement, and a per-tab identifier lasts for that browser tab. These use local or session storage, not an advertising cookie. See the Cookie and Browser Storage Policy for controls.

How we use information

We use information to provide and improve plans, tools, accounts and coaching; respond to enquiries; deliver requested emails; operate our customer and coaching records; protect and troubleshoot the service; measure site use; and meet legal obligations. Newsletter messages are sent only through the separate subscription and confirmation process, and every newsletter includes an unsubscribe route.

We do not sell personal information. We do not give it to other businesses so they can advertise their own products to you. Product analytics may use an email address or account identifier to connect service events such as saving a tool result or submitting an application; it is not used for third-party ad targeting.

Who processes information

Access is limited to The Marathon Clinic’s operator, authorised coaches or administrators, and service providers that need the information to perform work for us. Depending on how the service is configured, providers may include Vercel for hosting and performance analytics, Supabase for database and authentication services, Resend for email delivery, and PostHog for product analytics. Interactive course maps request styles and tiles from OpenFreeMap or another configured map provider, which receives the technical information needed to serve that request. We may change providers as the product develops and will update this notice when that materially changes how personal information is handled.

Overseas processing

We operate from Australia, but cloud, analytics and email providers may store or process information in the United States, European Union, Australia or other countries where they or their subprocessors operate. Privacy protections can differ between countries. Provider region and transfer arrangements depend on the production configuration and should be confirmed during legal review.

Retention and security

We keep account, plan, coaching and enquiry records while they are needed to provide the service, maintain an appropriate business record, resolve disputes or meet legal requirements. Newsletter records are kept until you unsubscribe, with a limited suppression record retained where needed to honour that choice. Analytics events may remain until they are deleted or aggregated. We are formalising fixed deletion schedules; until then, you can ask us to delete your information. Browser-stored information remains until you or your browser clear it.

We use access controls, opaque session identifiers and service-role separation, but no online service can promise absolute security. Please avoid sending detailed medical records, identification documents or payment information through open text fields.

Your choices and requests

Depending on where you live, privacy law may give you rights to access, correct, delete, restrict or object to uses of your information, or to complain to a regulator. Whether or not a particular law applies, you can ask us for a copy, correction or deletion of information linked to your email. We may need to verify your identity and may retain information where the law requires it.

You can unsubscribe from newsletters using the link in any issue, clear local browser data through the controls in our Cookie and Browser Storage Policy, and sign out to remove the active session cookie. Contact us through the contact form for a privacy request and include “Privacy request” in your message.