Legal

Privacy policy

Draft. This is a starting template, not legal advice. Have it checked, fill in the brackets, then delete this note.

Summit Business Academy Ltd (“we”) is the data controller for personal data collected through this website. Contact: hello@summitbusinessacademy.co.uk, [registered address].

What we collect

• Contact details you give us (name, email) when you enquire or enrol.
• Course progress, quiz results and certificates.
• Payment confirmations from our payment provider. We never see or store your full card details.
• Basic analytics and cookie data, only with your consent.

Why we use it, and our lawful basis

• To deliver the course you bought (contract).
• To reply to enquiries (legitimate interests).
• To send marketing emails, only if you opt in (consent).
• To keep accounting records (legal obligation).

Who we share it with

Our hosting provider, payment provider (PayPal), email provider and font provider (Google Fonts), each under appropriate data-processing terms. We do not sell your data.

How long we keep it

Account and course records for as long as your account is active plus [2] years. Financial records for 6 years, as UK law requires.

Your rights

You can ask to access, correct, delete or move your data, or object to how we use it. Email us to do so. You can also complain to the Information Commissioner’s Office (ico.org.uk).