Confident Sons Academy
Privacy Policy
(effective 08 March 2026 – replaces all prior versions)
1. Introduction
This Privacy & Cookie Policy (“Policy”) explains how Raising Confident Adults Ltd (company 10129417) trading as Confident Sons Academy (“RCA”, “we”, “us”) collects, uses, and protects your personal data when you visit www.confidentsonsacademy.com (the “Website”).
2. Key definitions
| Term | Meaning |
|---|---|
| Data | Any information that identifies or can reasonably identify you, collected through the Website, booking forms, ScoreApp™, Mailchimp®, or other channels. |
| UK GDPR | The General Data Protection Regulation as incorporated into UK law by section 3(10) of the Data Protection Act 2018, plus any applicable EU GDPR provisions. |
| Cookies | Small text files placed on your device to store or track information. |
| User / you | Anyone accessing the Website who is not an RCA employee, contractor, or agent acting in the course of their work. |
3. Data controller
For UK GDPR purposes, Raising Confident Adults Ltd (30 Circus Mews, Bath, BA1 2PW, UK) is the data controller.
4. What data we collect
We may collect:
- Name, parent/guardian name, teen participant name
- Email address, telephone number, postal address
- Demographic information (age, postcode, preferences)
- Payment and billing details (via Stripe)
- Marketing and analytics data (cookie identifiers, IP address, browser type, referring pages)
5. How we collect data
- Directly from you – when you complete enquiry forms, ScoreApp surveys, programme check-out, intake forms, or contact us by email/phone.
- Automatically – via Cookies and similar technologies when you browse the Website.
- From advertising partners – Meta (Facebook), LinkedIn, Google Ads (including Enhanced Conversions) provide us aggregated or hashed analytics data for ad measurement.
6. Legal bases for processing
We rely on:
- Contract – to fulfil services you purchase.
- Consent – when you opt-in to marketing emails or non-essential cookies.
- Legitimate interests – to improve our Website, run remarketing campaigns, and measure advertising effectiveness. You may object to processing based on legitimate interest at any time by disabling non-essential cookies or emailing us. A documented Legitimate Interests Assessment is held on file and available on request.
7. Children's data
Some of our programmes involve Teen Participants aged 14–18. We take the following approach to their data:
a. We collect and process teen participant data only with explicit parental or guardian consent, obtained via our intake forms prior to programme enrolment.
b. We collect only the minimum data necessary to deliver the programme – typically name, age, and questionnaire responses.
c. We do not use teen participant data for marketing purposes.
d. We do not create online profiles of teen participants or use their data for automated decision-making.
e. Teen participants aged 13 or over may exercise their own data rights (access, erasure, etc.) by contacting us directly or through their parent/guardian.
f. Our services are designed with regard to the ICO's Age Appropriate Design Code (Children's Code) where applicable to our processing activities.
8. Purposes of processing
We use your data to:
a. deliver coaching services and digital content;
b. maintain internal records and accounts;
c. improve our programmes and Website;
d. send service emails and, where consented, marketing communications;
e. run targeted advertising through Meta, LinkedIn, and Google.
9. Sharing your data
We only share data with:
- Service providers (Stripe, ScoreApp, Mailchimp, Zoom, Google Workspace) under contract;
- Professional advisers (legal/accounting) under confidentiality;
- Advertising platforms (Meta, LinkedIn, Google) for pseudonymised analytics;
- UK authorities if legally required.
We never sell your personal data.
10. International transfers
Your data may be stored or processed outside the UK (e.g., USA-based servers). Where we transfer data internationally, we rely on:
a. UK adequacy regulations; or
b. UK International Data Transfer Agreement / Standard Contractual Clauses.
Specifically:
– Stripe: certified under the UK Extension to the EU-US Data Privacy Framework.
– Mailchimp (Intuit): transfers governed by Standard Contractual Clauses.
– ScoreApp, Zoom, Google Workspace: transfers governed by Standard Contractual Clauses or UK adequacy decisions as applicable.
11. Data retention
We keep personal data only as long as necessary:
- Enrolled clients: 7 years after programme end for adults, and 7 years after reaching the age of majority (18) for minors, as required for tax and accounting purposes under the Companies Act 2006 and HMRC record-keeping requirements, for the purposes of professional liability indemnity, and to meet safeguarding obligations.
- Marketing leads: 3 years from last interaction or until you unsubscribe. Back-ups may persist longer but are securely stored and access-restricted.
12. Your rights
Under UK GDPR you may: access, correct, erase, restrict, object, or port your data; or withdraw consent. Email [email protected]. If unresolved, you may complain to the UK ICO (www.ico.org.uk).
13. Security
We protect data via encryption (HTTPS, TLS), password controls, and restricted-access servers. Suspect a breach? Email [email protected].
14. Links to other sites
External sites are not governed by this Policy; check their privacy policies separately.
15. Business changes
If RCA is sold or restructured, data may transfer to the new owner under this same Policy.
Cookies
16. What cookies we use
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| _fbp | Meta | Ad retargeting & measurement | 90 days |
| _ga, _gid | Google Analytics | Site usage stats | 2 yrs / 24 hrs |
| scoreapp_visitor | ScoreApp | Tracks quiz progress | Session |
| mailchimp_landing_site | Mailchimp | Source tracking for opt-in form | 30 days |
17. Managing cookies
On first visit we display a cookie banner. You can accept or reject non-essential cookies. Adjust settings anytime in your browser; see www.aboutcookies.org.
18. Changes to this Policy
We may update this Policy; new versions are posted here with a revision date. Continued use of the Website after changes indicates acceptance.
Contact:
Raising Confident Adults Ltd, 30 Circus Mews, Bath, BA1 2PW, UK
Email: [email protected]