An online coach launches their sales page, sets up their booking form, connects Stripe or PayPal, and forgets to publish their legal notices. A few weeks later, an unhappy client reports the site to the DGCCRF. The issue is not commercial; it is legal.
Legal notices are mandatory for any professional site, including a simple showcase page presenting coaching sessions. This framework stems from the law for confidence in the digital economy (LCEN) of June 21, 2004, and the penalties for non-compliance can reach up to a criminal fine.
Health data and online coaching: a gray area to address in advance
When collecting information about injuries, pathologies, or physical limitations of a coachee via a registration form, one is handling health data as defined by the GDPR. Article 9 of the regulation classifies this information in the “special categories” of personal data, which requires explicit consent and enhanced security measures.
In practical terms, this means that a simple cookie banner is not enough. The privacy policy must detail the exact nature of the data collected, the legal basis for processing (explicit consent, not “legitimate interest”), and the technical protection measures implemented.
On the other hand, the Public Health Code does not subject traditional coaching to the obligation of hosting with a certified HDS provider (Health Data Host). This certification pertains to activities of prevention, diagnosis, or care. A sports coach or life coach does not fall within this scope unless they also practice as a paramedical professional. Feedback on this point varies according to local interpretations, but the distinction remains clear in the texts.
To illustrate what a complete legal notice page looks like on a coaching site, one can access Mon Coach A Domicile and observe the adopted structure: identification of the publisher, host, data policy, and cookies.
Mandatory legal notices: what the LCEN requires on a coaching site
The law does not distinguish a coaching site from an e-commerce site or a culinary blog. The obligation is the same for all professional publishers. Here are the information to be published visibly and accessibly:
- Complete identity of the publisher: name, first name (or business name), legal status (micro-enterprise, EURL, SASU), SIRET number, and registered office address
- Contact details: email address and phone number, the postal address may be that of the registered office
- Name of the publication director, usually the head of the structure
- Identity of the site host: business name, address, and phone number (OVH, Ionos, Hostinger, it doesn’t matter, it must be mentioned)
For a coach who sells programs or sessions directly online, the general terms and conditions of sale (GTCS) are added to this list. They frame the right of withdrawal (14 days for a service, unless immediate execution is accepted by the client), payment methods, and cancellation policy.
The trap of copied-pasted notices
Taking the legal notices from another coaching site is tempting. It is also the best way to publish incorrect information. The SIRET number, legal status, host: everything differs from one site to another. A copy-paste generates inconsistencies that the DGCCRF or an attentive client will immediately spot.
Incorrect legal notices are legally equivalent to absent notices. The penalty remains the same.
Privacy policy and GDPR for an online coach
The GDPR requires any professional collecting personal data to publish a privacy policy separate from the legal notices. On an online coaching site, the data collected goes far beyond just the name and email.
A sports history form, a skills assessment questionnaire, a client area with session history: each of these elements generates personal data processing. The privacy policy must specify for each processing the purpose, retention period, and user rights (access, rectification, deletion, portability).
Cookies and third-party tools: what is often forgotten
Google Analytics, a Meta pixel, a chatbot, an embedded YouTube video: each third-party tool potentially places cookies. The cookie banner must allow for a refusal as simple as acceptance, without dark patterns (a “refuse” button grayed out or hidden).
The CNIL has tightened its position on this subject. Simply installing Google Analytics without specific configuration can pose a problem if the data is transferred outside the European Union without adequate safeguards. For a coach using a video conferencing platform integrated into their site, the question also arises for the connection data of participants.
GTCS and coaching contract: securing the online commercial relationship
The general terms and conditions of sale are not a formality. For an online coach, they frame very concrete situations: a client requesting a refund after the first session, an absence without notice, a dispute over the content of a program.
The GTCS must specify the conditions for cancellation and rescheduling of sessions. Without an explicit clause, the 14-day right of withdrawal fully applies to services sold remotely. If coaching begins before the expiration of this period, the express consent of the client must be obtained, and they must be informed that they then lose their right of withdrawal.
Another point not to be overlooked: the intellectual property clause. Coaching materials (PDFs, videos, exercise sheets) remain the property of the coach unless otherwise stated. Without a clause in the GTCS, a client could argue that they have acquired unlimited usage rights by paying for their session.
Coaching and obligation of means
A coaching contract is based on a obligation of means, not of results. The GTCS and the sales page must reflect this reality. Promising a specific weight loss or guaranteed career change exposes the coach to legal action for misleading commercial practices. The wording of the offers on the site is an integral part of the legal framework.
An online coaching site in compliance rests on four pillars: complete legal notices, a privacy policy adapted to the data actually collected, GTCS covering common dispute scenarios, and a functional cookie banner. Publishing these documents takes only a few hours; correcting them after a review takes much longer.
