Privacy Policy

1. Who we are

Will's Masterclass is a trading name of [YOUR FULL LEGAL NAME], a sole trader, and is the data controller for the personal data described in this policy.

• Website: https://willsmasterclass.com
• Address for correspondence: [YOUR ADDRESS FOR SERVICE]
• Email: will@peakforgemarketing.com

2. We do not sell your data

We do not sell, rent, trade or licence your personal data to anyone, for any purpose, ever. We do not share it with advertisers or data brokers. We share it only with the service providers listed in section 5, and only so we can run the course and take payment.

3. What we collect

You give us:

• Name and email address
• Billing name, billing address and country
• Any information you include in support emails

Collected automatically when you use the course:

• Course progress and usage time (this is also used to assess refund eligibility — see our Refund Policy)
• Login timestamps
• IP address, browser type and device type
• Cookie data (see section 9)

We do not collect or store your card details. Card numbers, expiry dates and security codes are entered directly into Wix Payments and never reach our systems. We only ever see the last four digits, card type and transaction status.

4. Why we use it, and our legal basis

You can withdraw consent to marketing at any time by replying to any email from us with "unsubscribe", or by emailing will@peakforgemarketing.com.

5. Who we share it with

• Base44 — website hosting, course platform and site analytics. Acts as our data processor.
• Wix Payments — payment processing. Wix Payments acts as a separate data controller for payment and cardholder data and processes it under its own privacy policy and card scheme rules.
• HMRC — where required for tax and financial records.
• Law enforcement or regulators — where we are legally required to disclose.

We do not use a third-party email marketing platform. Emails are sent directly from the address above.

6. International transfers

Some of our providers are based outside the UK, including in the United States and Israel. Where your data is transferred outside the UK, it is protected by UK adequacy regulations or by an International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses. You can request details of these safeguards at will@peakforgemarketing.com.

7. How long we keep it

• Account and course access data: for as long as you have an account, plus 12 months.
• Financial and transaction records: at least 5 years after the 31 January self-assessment deadline for the relevant tax year, as required by HMRC for sole traders.
• Support correspondence: 3 years.
• Marketing data: until you unsubscribe, plus 30 days.

8. Security and our liability

We take the security of your data seriously and use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS/TLS), access controls on administrator accounts, two-factor authentication on our platform accounts, and vetting of the processors we use.

However, no method of transmitting or storing data over the internet is completely secure, and we cannot guarantee absolute security. To the fullest extent permitted by law, we are not liable for:

• unauthorised access, loss or disclosure of data caused by circumstances outside our reasonable control;
• security failures originating within the systems of a third-party provider, where those systems were not under our operational control;
• your own failure to keep your account password confidential, or your use of a compromised device, network or email account;
• indirect, consequential or economic loss arising from a security incident.

Nothing in this policy excludes or limits our liability where it cannot lawfully be excluded or limited, including our liability under Article 82 of the UK GDPR and section 168 of the Data Protection Act 2018.

If a breach happens: we will notify the relevant supervisory authority within 72 hours where the breach is likely to result in a risk to your rights and freedoms, and we will tell you directly and without undue delay where the risk to you is high.

9. Cookies

We use cookies that are strictly necessary to run the site and keep you logged in. We also use analytics cookies, which we only set with your consent through our cookie banner. You can change or withdraw your cookie consent at any time via the cookie settings link in the site footer, or in your browser settings.

10. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), subject to our legal record-keeping duties
• Restrict how we process your data
• Object to processing based on legitimate interests, and to direct marketing at any time
• Data portability — receive your data in a machine-readable format
• Withdraw consent where consent is our lawful basis

To exercise any of these, email will@peakforgemarketing.com. We will respond within one month. This is free of charge.

11. Complaints

If you're unhappy with how we've handled your data, please contact us at will@peakforgemarketing.com so we can try to put it right.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when. Where changes are significant, we'll email registered users.