Privacy Policy

Last Updated: [DATE TO BE UPDATED]

Data Controller: Bollinger Academy Ltd
Company Number: [TO BE UPDATED]
Registered Address: [TO BE UPDATED], United Kingdom
Contact: info@bollingeracademy.com

Bollinger Academy Ltd (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website (bollingeracademy.com) and purchase our products.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Information We Collect

1.1 Information You Provide Directly

Account Information: Name, email address, and password when you create an account.
Purchase Information: Billing address, payment method details (processed by our payment providers — we do not store full card numbers).
Communication Data: Information you provide when contacting us via email or contact forms.
Profile Data: Any additional information you choose to add to your account profile.

1.2 Information Collected Automatically

Technical Data: IP address, browser type and version, operating system, device information.
Usage Data: Pages visited, time spent on pages, click patterns, features used.
Cookie Data: Information collected through cookies and similar tracking technologies (see Section 7).

1.3 Information from Third Parties

Payment Providers: Transaction confirmation and billing information from Stripe, PayPal, Amazon Pay, or Shopify Payments.
Analytics Providers: Aggregated usage data from analytics services.

2. How We Use Your Information

We process your personal data for the following purposes and legal bases:

Contract Performance: To provide you with access to purchased products, process payments, and manage your account.
Legitimate Interests: To improve our platform, analyse usage patterns, prevent fraud, and ensure security.
Legal Obligation: To comply with applicable laws, regulations, and legal processes.
Consent: To send marketing communications (where you have opted in) and to set non-essential cookies.

3. Data Sharing and Third-Party Processors

We may share your personal data with the following categories of third-party processors:

3.1 Payment Processors

Stripe (Stripe, Inc.) — Payment processing. Privacy Policy: https://stripe.com/privacy
PayPal (PayPal Holdings, Inc.) — Payment processing. Privacy Policy: https://www.paypal.com/privacy
Amazon Pay (Amazon.com, Inc.) — Payment processing. Privacy Policy: https://pay.amazon.com/help/201212490
Shopify Payments (Shopify Inc.) — Payment processing. Privacy Policy: https://www.shopify.com/legal/privacy

3.2 Hosting and Infrastructure

Web hosting providers for platform delivery and data storage.
Content delivery networks (CDNs) for performance optimisation.

3.3 Analytics and Marketing

Analytics services to understand platform usage (data is anonymised where possible).
Email service providers for transactional and marketing communications.

We require all third-party processors to process your data in accordance with our instructions and applicable data protection laws. We do not sell your personal data to any third party.

4. International Data Transfers

4.1 Some of our third-party processors are based outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the Information Commissioner’s Office (ICO)
Transfers to countries with an adequacy decision from the UK government
Other appropriate safeguards as required by UK GDPR

5. Data Retention

5.1 We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Account Data: Retained for the duration of your account plus 2 years after account closure.
Transaction Data: Retained for 7 years to comply with tax and accounting obligations.
Communication Data: Retained for 2 years from the date of last communication.
Technical/Usage Data: Retained for 26 months from collection.

5.2 After the retention period, data is securely deleted or anonymised.

6. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data.
Right to Erasure (Article 17): You have the right to request deletion of your personal data in certain circumstances.
Right to Restrict Processing (Article 18): You have the right to request restriction of processing in certain circumstances.
Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object (Article 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at info@bollingeracademy.com. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide you with a better experience and allow certain features to function.

7.2 Types of Cookies We Use

Strictly Necessary Cookies: Required for the website to function (e.g., shopping cart, authentication). These cannot be disabled.
Functional Cookies: Remember your preferences and settings to enhance your experience.
Analytics Cookies: Help us understand how visitors use our website so we can improve it. Data is anonymised.
Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. Only set with your consent.

7.3 Managing Cookies

You can manage your cookie preferences through our cookie consent banner when you first visit our site. You can also control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

7.4 Third-Party Cookies

Our payment providers and analytics services may set their own cookies. Please refer to their respective privacy policies for information about their cookie practices.

8. Data Security

8.1 We implement appropriate technical and organisational measures to protect your personal data, including:

SSL/TLS encryption for all data in transit
Encryption of sensitive data at rest
Regular security assessments and updates
Access controls and authentication measures
Staff training on data protection

8.2 While we take all reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Children’s Privacy

Our products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

10. Changes to This Policy

10.1 We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.

10.2 For material changes, we will notify you via email or a prominent notice on our website.

10.3 We encourage you to review this policy periodically.

11. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us:

Email: info@bollingeracademy.com
Address: [TO BE UPDATED], United Kingdom

You also have the right to contact the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113