Privacy Policy

1. Who is responsible for your data

Xclusive Academy Ltd, a company registered in England and Wales, is the data controller for the personal data described in this policy. You can contact us about privacy using the contact details published on our website.

2. What we collect

• Purchase and account data: name, email address, billing details, order reference and purchase history.
• Payment data: handled by our checkout and payment providers. We do not store your full card details.
• Account and usage data: login records and progress or download activity on the course platform.
• Support data: the content of emails or messages you send us.
• Technical and analytics data: IP address, device and browser type, pages viewed and referral source (for example a link from TikTok or Instagram), collected via cookies or similar technologies where permitted.
• Marketing data: your email address and preferences if you sign up for updates.

3. Why we use it, and our legal basis

• To provide the toolkit, create your account and give you access — to perform our contract with you.
• To take payment and keep records of transactions — contract and legal obligation.
• To provide customer support and handle complaints or refunds — contract and legitimate interests.
• To keep the website secure and prevent fraud or misuse of accounts and materials — legitimate interests.
• To measure how the site performs and improve it — consent (for non-essential cookies) or legitimate interests.
• To send marketing about our products — consent, or legitimate interests where you are an existing customer and we are contacting you about similar products. You can opt out at any time.
• To comply with tax, accounting and other legal obligations — legal obligation.

4. Who we share it with

We share personal data only where necessary, with service providers acting on our instructions or as independent controllers where they determine their own use. These include our course and checkout platform (Teachable), payment processors, email and hosting providers, analytics providers, and our professional advisers. We may also disclose data where required by law.

We do not sell your personal data.

5. International transfers

Some of our providers are based outside the UK. Where personal data is transferred overseas, we rely on appropriate safeguards recognised under UK data protection law, such as adequacy regulations or standard contractual clauses with the UK addendum.

6. How long we keep it

We keep account and purchase records for as long as you hold an account and afterwards for as long as needed for legal, tax and accounting purposes (normally six years for financial records). Support messages are kept for as long as needed to handle the matter and any follow-up. Marketing data is kept until you unsubscribe. Analytics data is kept for a limited period set by the relevant tool.

7. Cookies

We use cookies and similar technologies that are necessary for the site to work, and, where you consent, cookies for analytics and measuring advertising performance. You can manage cookies through your browser settings and, where offered, through our cookie controls. Third-party platforms you arrive from may also set their own cookies subject to their policies.

8. Your rights

Under UK data protection law you have the right to:

• access a copy of your personal data
• have inaccurate data corrected
• ask us to erase data in certain circumstances
• restrict or object to certain processing, including direct marketing
• data portability in certain circumstances
• withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us using the details on our website. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk — though we would appreciate the chance to resolve things first.

9. Security

We take reasonable technical and organisational measures to protect personal data, including using reputable providers and restricting access. No online service can be guaranteed to be completely secure, so please keep your account password confidential.

10. Children

This website and product are intended for adults aged 18 or over. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. The current version is always available on this page. Please also see our Terms & Conditions.