Privacy policy
What data we collect, why, who sees it, how long we keep it, and how to get it removed.
Last updated: [[DATE]] · Version [[VERSION]]
1. Who we are
[[LEGAL ENTITY NAME]] ([[TRADING NAME]]), registered at [[REGISTERED ADDRESS]], registration number [[COMPANY OR SOLE TRADER NUMBER]], is the controller of the personal data described in this policy. In this document “we” and “us” mean that entity, and “you” means anyone who visits this website, enquires about a course, or enrols on one.
For any question about this policy or about your data, contact [[PRIVACY CONTACT EMAIL]]. [[IF YOU HAVE APPOINTED A DATA PROTECTION OFFICER OR EU/UK REPRESENTATIVE, NAME THEM HERE]]
2. What this policy covers
It covers the website at [[DOMAIN]], our email and messaging correspondence, enrolment and payment for the group and one-to-one programmes, and the delivery of those programmes including sessions, materials and feedback. It does not cover third-party websites we link to, which have their own policies.
3. The data we collect
3.1 Data you give us
- Enquiry data: your name, email address, any messaging handle you use, and the content of your message including what you tell us about your situation.
- Enrolment data: billing name, billing address, country, the programme chosen, and the intake questionnaire responses.
- Course data: worksheets, assignments and any financial documents you choose to send for review, such as bank statement exports, income figures, debt balances or invoices.
- Correspondence: messages between you and the instructor before, during and after the programme.
- Optional content: testimonials, quotations or case study material, only where you have given separate written permission.
3.2 Data collected automatically
- Technical data such as IP address, browser type, device type, language, referring page and pages visited. See the cookie policy for detail on what is set and why.
- [[LIST ANY ANALYTICS PROVIDER YOU USE, OR STATE THAT YOU USE NONE]]
3.3 Data we receive from others
- Payment confirmation and limited transaction data from [[PAYMENT PROVIDER]]. We do not receive or store your full card number.
- Attendance and recording data from [[VIDEO PLATFORM]].
- [[ANY OTHER SOURCE, e.g. a booking tool]]
4. Special categories
We do not ask for special category data such as health information, religious belief or political opinion. Course discussions occasionally touch on health or family circumstances because they affect financial planning. Please share only what you consider necessary; anything you do share is treated as confidential and is not recorded in writing beyond what is needed to help you.
5. Why we use your data, and our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Answering an enquiry | Enquiry data | Steps taken at your request before entering a contract |
| Enrolling you and taking payment | Enrolment data | Performance of a contract |
| Delivering the programme, reviewing your figures and giving feedback | Course data | Performance of a contract |
| Keeping accounting and tax records | Transaction data | Legal obligation |
| Improving the materials and understanding what students struggle with | Aggregated, de-identified course data | Legitimate interests |
| Sending course announcements and follow-up check-ins | Contact data | Performance of a contract |
| Sending a newsletter, if you subscribe | Email address | Consent, withdrawable at any time |
| Publishing a testimonial | Name, quotation | Consent, withdrawable at any time |
| Preventing fraud and enforcing our terms | Technical and transaction data | Legitimate interests |
6. Who we share it with
We do not sell personal data and we do not share it for anyone else's marketing. We share the minimum necessary with the following categories of processor:
- Payment processing: [[PAYMENT PROVIDER]]
- Video sessions: [[VIDEO PLATFORM]]
- Course materials and file storage: [[PLATFORM OR CLOUD STORAGE PROVIDER]]
- Email and messaging: [[EMAIL PROVIDER]], [[CHAT PLATFORM]]
- Website hosting: [[HOSTING PROVIDER]]
- Accounting: [[ACCOUNTANT OR SOFTWARE]]
We may also disclose data where required by law, by a court, or by a regulator, and where necessary to establish or defend legal claims.
7. International transfers
Some providers listed above may process data outside [[YOUR COUNTRY OR REGION]]. Where that happens we rely on [[TRANSFER MECHANISM, e.g. standard contractual clauses or an adequacy decision]]. You can ask us for details of the safeguards in place.
8. How long we keep it
| Category | Retention |
|---|---|
| Enquiries that do not lead to enrolment | [[N]] months, then deleted |
| Financial documents you send for review | Deleted within [[N]] days of the programme ending, unless you ask us to keep them |
| Assignments and feedback | [[N]] months after the programme ends |
| Session recordings | 6 months (group) or 12 months (one-to-one), then deleted |
| Invoices and accounting records | As required by law in [[COUNTRY]], typically [[N]] years |
| Newsletter subscription | Until you unsubscribe |
9. How we protect it
- Encrypted connections to this website and to all platforms used.
- Access limited to the instructor and, where strictly necessary, [[ANY ASSISTANT OR CONTRACTOR]].
- Multi-factor authentication on all accounts holding student data.
- Financial documents kept in a restricted folder and deleted on the schedule above.
- Wherever possible, worksheets stay on your own device and you share only conclusions.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, you, within the timescales set by law.
10. Your rights
Depending on where you live, you may have the right to: obtain a copy of your data; correct inaccurate data; delete data; restrict or object to processing; receive your data in a portable format; withdraw consent at any time; and complain to a supervisory authority.
To exercise any of these, write to [[PRIVACY CONTACT EMAIL]]. We respond within [[N]] days. We may ask you to confirm your identity first. Your supervisory authority is [[NAME AND WEBSITE OF THE AUTHORITY]].
11. Children
[[STATE YOUR AGE POLICY]]. We do not knowingly collect data from anyone below that age. If you believe a child has provided data, contact us and it will be deleted.
12. Confidentiality of what you share in sessions
Your figures and circumstances are not repeated to other students, published, or used as examples without your written permission. Where anonymised examples are used in teaching, identifying details are changed. Group students are asked to observe the same confidentiality, though we cannot guarantee the behaviour of other participants.
13. Changes to this policy
We may update this policy. The date at the top shows the current version. Where changes are significant, enrolled students will be told by email.
14. Contact
[[LEGAL ENTITY NAME]], [[REGISTERED ADDRESS]]. Email [[PRIVACY CONTACT EMAIL]].