Privacy Policy

The Data Controller responsible for your personal data is:

We may collect and process the following categories of personal data:

• —Identity data: your name and username as provided during account registration;
• —Contact data: your email address;
• —Transaction data: records of payments made for course enrolment or private consultations, including Stripe payment identifiers (we do not store card details);
• —Course access data: your enrolment status, access codes used, and course progress;
• —Consent records: the date and time you accepted the Participant Agreement and these Terms;
• —Technical data: your IP address, browser type, device information, and pages visited, collected automatically via server logs and analytics.

We do not collect any special category data (such as health data) unless you voluntarily share it with us in direct correspondence.

We use your personal data for the following purposes and on the following legal bases under UK GDPR:

We will never sell your personal data to third parties, nor use it for unsolicited marketing without your explicit consent.

We share your personal data only where strictly necessary with the following trusted third-party processors, each of whom is bound by appropriate data processing agreements:

• —Stripe, Inc. — for secure payment processing. Stripe's privacy policy is available at stripe.com/gb/privacy.
• —Manus AI — for hosting and infrastructure of the course platform.
• —Umami Analytics — for privacy-respecting website analytics (only if you have consented to analytics cookies). Umami does not use third-party cookies and does not share data with advertisers.
• —Email service providers — for transactional emails such as account confirmation.

We do not transfer your personal data outside the United Kingdom or European Economic Area unless adequate safeguards are in place in accordance with UK GDPR Chapter V.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• —Account and course access data: for the duration of your enrolment and up to 3 years thereafter for audit purposes;
• —Payment records: for 7 years in accordance with HMRC requirements;
• —Consent records: for the duration of your access to the course and 3 years thereafter.

When your data is no longer required, it will be securely deleted or anonymised.

You have the following rights in relation to your personal data:

• —The right to access — to request a copy of the personal data we hold about you;
• —The right to rectification — to request correction of inaccurate or incomplete data;
• —The right to erasure — to request deletion of your data where there is no compelling reason for its continued processing;
• —The right to restrict processing — to request that we limit how we use your data;
• —The right to data portability — to receive your data in a structured, machine-readable format;
• —The right to object — to object to processing based on legitimate interests;
• —The right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

This website uses cookies and similar technologies. We use strictly necessary cookies to maintain your login session and ensure the platform functions correctly. These do not require your consent. We also use an analytics tool (Umami) to understand how visitors use the site; this is activated only with your consent via the cookie banner when you first visit.

For full details of the cookies we use, their purpose, and how to manage your preferences, please read our Cookie Policy.

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. All data is transmitted over encrypted HTTPS connections. Payment processing is handled entirely by Stripe, which is PCI DSS compliant, and we never receive or store your full card details.

If you have any concerns about how we handle your data, please contact us at [email protected].

We may update this Privacy Policy from time to time to reflect changes in law or our practices. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Where changes are material, we will notify enrolled participants by email.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us at [email protected]. If you are not satisfied with our response, you have the right to make a complaint to the Information Commissioner's Office at ico.org.uk/make-a-complaint.