1. Introduction
30 Day Skills ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website 30dayskills.co.uk (the "Site"), sign up for our email series, make purchases, or use our services.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Site.
2. Information We Collect
Information You Provide
We collect information you voluntarily provide, including:
- Contact Information: Name, email address when you sign up for our email series or create an account.
- Purchase Information: Payment details, billing address, and transaction history when you make a purchase. Payment card details are processed by our payment provider (Stripe) and are not stored on our servers.
- Communications: Any information you provide when you contact us or respond to surveys.
Information Collected Automatically
When you visit our Site, we may automatically collect:
- Device Information: Browser type, operating system, device type.
- Usage Data: Pages viewed, time spent on pages, links clicked, referring website.
- IP Address: Your internet protocol address (may be anonymised).
3. How We Use Your Information
We use your information for the following purposes:
- To Provide Services: Process purchases, deliver digital products, and manage your account.
- To Communicate: Send you the 7-day email series you signed up for, transaction confirmations, and respond to inquiries.
- To Send Marketing: With your consent, send occasional emails about new products, offers, or content. You can unsubscribe at any time.
- To Improve Our Site: Analyse usage patterns to enhance user experience and develop new features.
- To Ensure Security: Detect and prevent fraud, abuse, and security issues.
- To Comply with Law: Meet legal obligations and respond to lawful requests.
4. Legal Basis for Processing (UK GDPR)
We process your personal data on the following legal bases:
- Contract: Processing necessary to perform a contract with you (e.g., delivering purchased products).
- Consent: Where you have given clear consent (e.g., subscribing to marketing emails).
- Legitimate Interests: Where processing is necessary for our legitimate interests and does not override your rights (e.g., improving our services, preventing fraud).
- Legal Obligation: Where we need to comply with a legal requirement.
5. Data Processors & Third Parties
We share your information with the following third-party service providers who process data on our behalf:
- Stripe: Payment processing (USA, EU) — processes payment card data securely.
- Postmark: Email delivery service (USA) — sends transactional and marketing emails.
- Analytics Providers: Website analytics to understand usage patterns.
These providers are contractually obligated to protect your data and may only use it as directed by us. Where data is transferred outside the UK, appropriate safeguards are in place (e.g., Standard Contractual Clauses).
6. Data Retention
We retain your personal data only as long as necessary:
- Purchase Records: 7 years (for tax and legal compliance).
- Email Subscribers: Until you unsubscribe, plus a short period to process the request.
- Analytics Data: Typically 26 months, often in anonymised form.
- Account Data: Until you request deletion or the account is inactive for an extended period.
7. Cookies
Our Site uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us provide and improve our services.
We use:
- Essential Cookies: Necessary for the Site to function (e.g., session management).
- Analytics Cookies: Help us understand how visitors use the Site.
- Functional Cookies: Remember your preferences.
You can control cookies through your browser settings. Disabling certain cookies may affect Site functionality.
8. Your Rights
Under UK GDPR, you have the following rights:
- Access: Request a copy of your personal data.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Restriction: Request limitation of processing.
- Portability: Request transfer of your data in a machine-readable format.
- Objection: Object to processing based on legitimate interests or for marketing.
- Withdraw Consent: Where processing is based on consent, withdraw it at any time.
To exercise these rights, contact us at privacy@30dayskills.co.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our Site and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@30dayskills.co.uk
Website: 30dayskills.co.uk