Privacy Policy — Beyond Binge Eating

This privacy policy sets out how Beyond Binge Eating uses and protects your personal data when you use this website or engage with our services.

Contents

Important information and who we are
Types of personal data we collect
How is your personal data collected?
How we use your personal data
Disclosures of your personal data
International transfers
Data security
Data retention
Your legal rights
Contact details
Complaints
Changes to this policy
Third-party links

1. Important information and who we are

This privacy policy gives you information about how Beyond Binge Eating collects and uses your personal data through your use of this website, including any data you may provide when you purchase a service from us.

This website is not intended for children and we do not knowingly collect data relating to children.

Controller

Beyond Binge Eating is the controller and responsible for your personal data (referred to as "Beyond Binge Eating", "we", "us" or "our" in this privacy policy).

If you have any questions about this privacy policy, including any requests to exercise your legal rights (section 9), please contact us using the information set out in section 10.

2. The types of personal data we collect about you

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data — first name, last name, username or similar identifier, title, and date of birth.
Contact Data — billing address, email address and telephone numbers.
Financial Data — bank account and payment card details.
Transaction Data — details about payments to and from you and other details of services you have purchased from us.
Technical Data — internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Profile Data — your purchases or orders made, your interests, preferences, feedback and survey responses.
Usage Data — information about how you interact with and use our website and services.
Marketing and Communications Data — your preferences in receiving marketing from us and your communication preferences.

We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as it does not directly or indirectly reveal your identity.

3. How is your personal data collected?

We use different methods to collect data from and about you, including through:

Your interactions with us

You may give us your personal data by filling in online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

apply for or purchase our services;
subscribe to our service or publications;
request marketing to be sent to you; or
give us feedback or contact us.

Automated technologies or interactions

As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies.

Third parties or publicly available sources

We will receive personal data about you from various third parties, including:

Analytics providers such as Google and Meta based outside the UK;
Advertising networks such as ClickFunnels (outside the UK) and Hyros (inside the UK);
Scheduling providers such as Calendly based outside the UK;
Providers of technical, payment and delivery services based both inside and outside the UK.

4. How we use your personal data

Legal basis

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following:

Performance of a contract — where we need to perform the contract we are about to enter into or have entered into with you.
Legitimate interests — where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and deliver a secure customer experience.
Legal obligation — where it is necessary for compliance with a legal obligation we are subject to.
Consent — where we have obtained your active agreement to use your personal data for a specified purpose, for example subscribing to our email newsletter.

Purposes for which we will use your personal data

Purpose / Use	Type of data	Legal basis
To register you as a new client	Identity; Contact	Performance of a contract
To process and deliver services, manage payments and recover money owed	Identity; Contact; Financial; Transaction	Performance of a contract; Legitimate interests (debt recovery)
To manage our relationship with you, including notifying you of changes to our terms or policy	Identity; Contact; Profile	Performance of a contract; Legal obligation; Legitimate interests
To administer and protect our business and website (troubleshooting, security, maintenance)	Identity; Contact; Technical	Legitimate interests; Legal obligation
To deliver relevant website content and measure advertising effectiveness	Identity; Contact; Profile; Usage; Marketing; Technical	Legitimate interests
To use data analytics to improve our website, services and marketing	Technical; Usage	Legitimate interests
To send you relevant marketing communications	Identity; Contact; Technical; Usage; Profile; Marketing	Consent
To carry out market research through voluntary surveys	Identity; Contact; Profile	Legitimate interests

Direct marketing

You will receive marketing communications from us if you have requested information from us or purchased services from us and have not opted out of receiving marketing.

Opting out of marketing

You can ask us to stop sending you marketing communications at any time by following the opt-out links within any marketing communication sent to you or by contacting us at mark@beyondbingeeating.com.

5. Disclosures of your personal data

We may share your personal data where necessary with the following parties:

Hyros, Meta and Google — for advertisement tracking;
Slack — for internal team communication;
Zapier — for automations connecting different software;
DocuSign — for clients to sign our Terms and Conditions;
Payfunnels — for processing payment details;
Stripe — for storing payment details;
ActiveCampaign — for email marketing;
Skool.com — for hosting our services;
Calendly — for scheduling sessions; and
Sub-contractors who assist us in providing our services.

We may also share your personal data in connection with a business transfer, sale, or merger. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

6. International transfers

We may transfer your personal data to service providers outside the UK. Whenever we do so, we ensure a similar degree of protection is afforded to it — for example, by only transferring to countries deemed adequate by the UK, or by putting in place appropriate contractual safeguards.

7. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to those who have a business need to know and they are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

8. Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

By law we have to keep basic information about our clients (including Contact, Identity, Financial and Transaction Data) for six years after they cease being clients for tax purposes.

In some circumstances you can ask us to delete your data — see section 9 below for further information.

9. Your legal rights

Under data protection law, you have the following rights:

Request access to your personal data (a "subject access request"), allowing you to receive a copy of the data we hold about you.
Request correction of any incomplete or inaccurate data we hold about you.
Request erasure of your personal data in certain circumstances.
Object to processing where we rely on a legitimate interest as the legal basis.
Request restriction of processing in certain scenarios.
Request transfer of your personal data to you or a third party in a structured, machine-readable format.
Withdraw consent at any time where we are relying on consent to process your personal data.

You will not have to pay a fee to exercise any of these rights in most circumstances. We aim to respond to all legitimate requests within one month.

To exercise any of these rights, please contact us using the details in section 10.

10. Contact details

If you have any questions about this privacy policy or wish to exercise your privacy rights, please contact us:

Email: mark@beyondbingeeating.com
Postal address: Duke Street, Mayfair, London, UK

11. Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

12. Changes to this policy

We keep our privacy policy under regular review. We will update the "last updated" date at the top of this page whenever changes are made. It is important that the personal data we hold about you is accurate and current — please keep us informed if your personal data changes during your relationship with us.

13. Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.