Privacy Policy

I Who is responsible for your data

The controller of the personal data described in this policy is SAIL TO SUCCESS LTD, a private limited company registered with Companies House (Northern Ireland) under company number NI730922, whose registered office is at 103 Corbally Road, Fintona, Omagh, BT78 2PB, Northern Ireland, United Kingdom. In this policy “we”, “us” and “our” mean SAIL TO SUCCESS LTD.

For any question about your personal data, or to use any of your rights, write to hello@sail-to-success.co.uk. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

II What we collect

When you buy

On our own checkout page we ask for your first and last name, email address, country, address, postcode, town or city and, if you choose to give them, your county, company name and VAT number. We also record what you ordered, the amount and the date.

We pass these details to our payment services provider, which shows you its secure payment page. You enter your card or wallet details only on that page; they go directly to our payment services provider and we never see or store them. We receive confirmation that the payment succeeded, the amount and currency charged, and the billing details held with the payment.

When you study

To open your place in the course area we use your name and email address to create your login, and we email your login details to you.

When you write to us

• Contact form: your name, email address, the topic you choose, your message and the page you sent it from.
• Chat: your messages, any file you attach, the email address if you add one, the page you were on and the time of each message.
• Email: your email address and whatever you choose to include.

When you browse

Like any website, our server receives your IP address, browser type and the pages requested, and the hosting provider keeps these in server logs for a short period for security and to diagnose faults. We also keep our own visit log: for each page request, the time, your IP address, the country it belongs to, the page, the page you came from and your browser. To find the country, the IP address is checked with an IP location service. We use this log to spot attacks, fraud and misuse, and it is deleted automatically after 90 days. We do not use analytics tools, advertising trackers or social media plug-ins. The small files this site stores in your browser are listed in our Cookie Policy.

We do not ask for special category data (such as health information), and we do not make decisions about you by automated means.

III Why we use it and on what legal basis

Where we rely on legitimate interests, we have weighed them against your interests and rights, and you can object at any time (see “Your rights” below). You do not have to give us your details, but without the checkout details we cannot take your order, and without an email address we cannot send your login.

We do not send marketing emails, and we never sell or rent your personal data to anyone.

IV Who receives your data

We share personal data only as far as each of the following needs it:

• Our payment services provider receives your checkout details and processes your payment. For the payment itself it acts as the merchant of record: it calculates and collects any VAT due, handles any payment dispute, issues your tax receipt and carries out its own fraud and legal checks. For those purposes it is a controller in its own right, and its own privacy notice, linked from the payment page, applies to what it does with your data.
• Our hosting and email providers store the website, the course area, order records and our messages, and carry our email. They act on our instructions only.
• An IP location service receives IP addresses from our visit log, and nothing else, and tells us which country each one belongs to.
• Our professional advisers, such as our accountant, see order and billing records where needed to prepare our accounts and tax returns.
• Public authorities, such as HM Revenue & Customs, where the law requires us to share information.

If our business, or part of it, is ever transferred to another organisation, the relevant personal data would pass to that organisation, which would have to use it as described in this policy.

Your order page

After payment you receive a private link to your order page. It shows your name, email address and what you bought (never your card details). Anyone who has the link can open the page, so please keep it private.

V Transfers outside the UK

Some of our providers, in particular our payment services provider, process data in other countries, including the European Economic Area and the United States. Where personal data leaves the UK, it goes only to a country covered by UK adequacy regulations, or it is protected by safeguards approved under UK law, such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for more information about these safeguards.

VI How long we keep it

If a complaint or legal claim is under way, we keep the records concerned until it is resolved.

VII How we protect it

The site is served over an encrypted connection. Card details are handled only by our payment services provider and never reach our server. Order records, contact messages and chat conversations are stored in folders that cannot be reached from the web, and only the people who run the business have access to them. No system is perfectly secure, but if a breach ever puts your data at risk we will act promptly and tell you and the Information Commissioner’s Office where the law requires it.

VIII Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data, where we no longer have a reason to keep it;
• ask us to restrict how we use your data while a question about it is resolved;
• object to our use of your data where we rely on legitimate interests;
• receive the data you gave us in a structured, machine-readable format, or have it sent to another organisation;
• withdraw your consent at any time, where we rely on consent. Withdrawing consent does not affect anything we did before.

To use any of these rights, email hello@sail-to-success.co.uk. There is normally no charge. We may ask you to confirm your identity, for example by writing from the email address used for your order, and we will reply within one month. Some rights have limits: for example, we cannot delete order records that tax law requires us to keep.

IX Complaints

If you are unhappy with how we have handled your personal data, please tell us first at hello@sail-to-success.co.uk so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk or by telephone on 0303 123 1113.

X Children

Our courses are for adults running or setting up a business. We do not knowingly collect personal data from anyone under 18.

XI Changes to this policy

We will update this policy when the way we use personal data changes. The date at the top of the page shows when it was last revised. If a change significantly affects how we use data we already hold about you, we will tell you by email.