Summary
- The app reads sessions, attendance counts and booking prices from Wix Bookings to work out pay. It doesn’t store your customers’ names or contact details, only counts and totals.
- It stores your business details, your staff members’ details and pay rules, and the pay statements you lock.
- Data is stored on Cloudflare, restricted to Cloudflare’s EU jurisdiction.
- PDFs and CSVs are created in your browser. We don’t share data with anyone except Wix and Cloudflare, who run the app.
- Everything is deleted when you uninstall the app.
Who we are
Coach and Staff Pay is provided by Dylan Powell trading as ImpactLayer, a sole trader based in Bridgend, UK (“we”, “us”).
Contact for anything about privacy: [email protected]
Who is responsible for what
- The business that runs the Wix site (“the business”) is the controller for its staff members’ data. It decides what to enter and how to pay people.
- We are a processor for that data. We only use it to run the app, on the business’s instructions.
- We are the controller for the business owner’s own account details.
If you’re a coach or staff member, the business that pays you is your first point of contact. You can also email us and we’ll help.
What the app reads from Wix
When you open a pay period, the app reads from Wix Bookings:
- your staff list;
- the sessions in that period: date, time, service and which staff member ran them;
- attendance counts (booked or checked in) and booking prices, to work out per-participant pay and commission.
This is kept in a short cache, for minutes, so the page loads quickly. Customer names and contact details from bookings are not stored. Only counts and totals are.
What we store
| Data | Why |
|---|---|
| Business name and address | To print on statements and invoices. |
| For each staff member: name and email | To show and label their pay and statements. |
| For each staff member, only if you enter them: address, UTR and VAT number | For self-billing invoices. |
| Pay rules, and adjustments (bonuses, deductions, expenses) with their notes | To work out pay. |
| Locked pay statements: lines with dates, service names, participant counts, takings used for commission and amounts | So past pay stays exactly as it was when you locked it, and you can show what changed later. |
| Audit trail of when periods were locked and unlocked | So you can see when each period was locked or unlocked. |
| Period settings: weekly, fortnightly or monthly, and booked or checked in | To build each pay period. |
Where it’s stored
Everything above is stored on Cloudflare (Cloudflare, Inc.) using Durable Objects restricted to Cloudflare’s EU jurisdiction, so it’s stored and processed in EU data centres. Your bookings stay in Wix, as described in Wix’s own privacy policy.
Who it’s shared with
We don’t sell data and don’t share it with anyone else. Statements, invoices and CSV exports are generated in your browser and go only where you send them. These are our processors:
| Who | What for |
|---|---|
| Wix.com Ltd. | The platform the app runs on. |
| Cloudflare, Inc. | Hosting and storage. |
Cookies and tracking
The app sets no tracking cookies, runs no analytics and shows no advertising. This website sets no cookies.
How long we keep it
- While installed: we keep your data so past statements stay available.
- Bookings cache: minutes.
- Staff members: you can delete a staff member’s details in the app at any time.
- Uninstalling: everything we store for the site is deleted when the app is uninstalled, including locked statements. Download anything you need to keep first.
Lawful basis
For staff members’ data, the business decides the lawful basis, as the controller. Usually this is to pay people under their contract and to keep records the law requires. For the business owner’s account details, our basis is providing the app you installed (contract) and our legitimate interest in running it securely.
Security
- The app can only be opened through Wix sign-in, by people with access to the site.
- All data travels over encrypted connections (HTTPS), and Cloudflare encrypts stored data at rest.
Your rights
Under UK GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, or object to how it’s used. If you’re a staff member, you can ask the business or email us. We’ll act on the business’s instructions and help them answer your request.
Email [email protected]. If you’re unhappy with how your data is handled, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
If we change this policy, we’ll update this page and the date at the top.