Legal

Privacy Policy

We understand that privacy and the security of your personal information is extremely important. This policy sets out what we do with your information and what we do to keep it secure. It also explains where and how we collect your personal information, as well as your rights over any personal information we hold about you.

Introduction

This privacy notice applies to this website and other interactions — for example when you create an account, purchase or sign up for a product or service, sign up to our newsletter, or contact us by email, phone, or social media. If you do not agree with these terms, please do not access this website. If you have any questions about our privacy practices, please contact us using the contact form on the website or by emailing michelle@peakpositive.co.uk.

What Data Do We Collect

Personal data means any information capable of identifying an individual. It does not include anonymised data. We may collect and process your personal data in the following ways:

Communication Data — any communication you send us whether through the contact form, email, text, social media messaging, or any other channel.

Customer Data — data relating to purchases of goods and/or services such as your name, billing address, email address, phone number, and payment details.

User Data — data about how you use our website and any online services, together with any data you post for publication on our website or through other online services.

Technical Data — data about your use of our website and online services such as your IP address, login data, browser details, length of visit, page views and navigation paths, and time zone settings. The source of this data is our analytics tracking system.

Marketing Data — data about your preferences in receiving marketing from us and your communication preferences.

Other Information Collected

We may collect data directly from you (for example by filling in forms on our site or sending us emails). We may automatically collect certain data as you use our website by using cookies and similar technologies — please see our Cookie Policy for more details. We may also receive data from third parties such as analytics providers (Google), advertising networks (Facebook), and payment processors (Stripe, PayPal).

Third Party Integrations

We may receive personal data about you from third party integrations including:

  • Zapier
  • Mailchimp
  • Google
  • Facebook

Sensitive Data

We do not collect any sensitive data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, or genetic and biometric data. We do not collect any information about criminal convictions or offences.

How We Use Your Personal Data

We will only use your personal data when legally permitted. The most common uses are:

  • Where we need to perform the contract between us.
  • Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.

Generally, we do not rely on consent as a legal ground for processing your personal data, other than in relation to sending marketing communications via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

Marketing Communications

Our lawful ground for processing your personal data to send marketing communications is either your consent or our legitimate interests. Under the Privacy and Electronic Communications Regulations (PECR), we may send you marketing communications if you have made a purchase or asked for information from us and have not opted out. You can ask us to stop sending marketing messages at any time by following the opt-out links on any marketing message or by emailing us directly.

Disclosures of Your Personal Data

We may share your personal data with the following parties:

  • Our online course platform provider (Systeme.io) who will be a data processor of your data.
  • Service providers who provide cloud infrastructure, video hosting, email, and IT services — including Amazon, Sendgrid, and Vimeo.
  • Professional advisers including lawyers, bankers, auditors, and insurers.
  • Government bodies that require us to report processing activities.
  • Third parties to whom we sell, transfer, or merge parts of our business or assets.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

International Transfers

Many of our third party service providers are based outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection by implementing appropriate safeguards, including data processing agreements and adherence to adequacy decisions by the European Commission.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those who have a legitimate business need. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for. For tax purposes the law requires us to keep basic information about our customers for six years after they stop being customers. In some circumstances we may anonymise your personal data for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Withdraw consent at any time.

For more information on these rights visit ico.org.uk. To exercise any of these rights please contact us via the contact form on the website. We try to respond to all legitimate requests within 30 days.

Third Party Links

We may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookie Policy.

Age Limitations

By providing us with your data, you confirm that you are over 13 years of age.

How to Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your statutory rights, please contact us at michelle@peakpositive.co.uk.

Data Protection Authority

If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues at www.ico.org.uk. We would ask that you contact us at michelle@peakpositive.co.uk first so that we can try to resolve any complaint for you.

Please also see our Terms & Conditions and Cookie Policy.