Privacy Policy

The FTP Lab uses Skool to provide its online community.

When you join the community, Skool will process your personal data in accordance with its own privacy policy and terms. We may also access and process information made available to us through Skool for purposes including administering your membership, providing services and support, communicating with you, moderating the community and improving our services.

Information that you voluntarily post or share within the community may be visible to other members, depending on the functionality and privacy settings of the Skool platform.

This may include your name, username, profile information, comments, posts, photographs, videos and other content.

You should therefore take care when deciding what personal information you disclose within the community. In particular, you should avoid posting information about your health, medical conditions, injuries or other sensitive information unless you are comfortable with that information being visible to other members.

We cannot guarantee that information voluntarily shared within a community will not be copied, screenshot or otherwise retained by another member.

Our website is hosted and operated using Wix.

When you purchase a product or service through our website, Wix and the relevant payment service provider may process personal data necessary to complete and administer the transaction.

We may receive information such as your name, email address, billing information, details of the product or service purchased, transaction information and payment status.

Payment card information is processed by the relevant payment service provider and is not ordinarily stored by us.

Wix and any relevant payment service provider may process personal data in accordance with their own privacy policies and may process personal data outside the UK.

We may use your personal data to send you information about products, services, offers or other information that may be relevant to you.

Where required by law, we will obtain your consent before sending direct marketing communications by electronic means.

Where permitted by applicable law, we may send marketing communications to existing customers about our own similar products or services where the relevant requirements for the "soft opt-in" are satisfied.

You can opt out of marketing communications at any time by using the unsubscribe facility included in our marketing communications or by contacting us.

Opting out of marketing will not prevent us from sending you important service or transactional communications, such as information about your purchase, membership, account or changes to our terms.

We will not sell your personal data or share it with third parties for their own direct marketing purposes without obtaining any consent required by law.

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to operate, while others may be used for purposes such as analytics, functionality and marketing.

Where required by law, we will ask for your consent before placing or using non-essential cookies and similar technologies.

Further information about the cookies used on our website and how you can manage your preferences is set out in our Cookie Policy.

We may share your personal data with trusted third parties where this is necessary to operate our business and provide our products and services.

These may include:

• Wix and its relevant service providers;

• Skool;

• payment and transaction service providers;

• website hosting, IT and technical service providers;

• email and communications providers;

• analytics and marketing service providers;

• accounting and professional advisers;

• insurers and other professional service providers; and

• regulators, government authorities, law enforcement agencies or other third parties where required or permitted by law.

Where a third party processes personal data on our behalf, we will take appropriate steps to ensure that the processing is carried out in accordance with applicable data protection law.

Some third parties may process your personal data as independent controllers for their own purposes. Where this is the case, their own privacy policies will apply to their processing.

Some of our service providers may process personal data outside the UK.

Where personal data is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

These safeguards may include an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another lawful transfer mechanism.

Further information about international transfers carried out by particular service providers may be available in their own privacy policies.

We have put in place appropriate technical and organisational measures designed to protect your personal data against accidental loss, unauthorised access, use, alteration or disclosure.

We limit access to personal data to those employees, contractors, advisers and service providers who have a legitimate business need to access it.

We also maintain procedures for dealing with suspected personal data breaches. Where required by applicable law, we will notify the ICO and/or affected individuals of a personal data breach.

We will retain your personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting and reporting requirements.

Different categories of personal data may be retained for different periods depending on the nature and purpose of the processing.

When determining how long to retain personal data, we consider:

• the amount, nature and sensitivity of the personal data;

• the potential risk of harm from unauthorised use or disclosure;

• the purposes for which we process the data;

• whether those purposes can be achieved by other means;

• applicable legal, regulatory, tax and accounting requirements; and

• whether we need to retain information in connection with complaints, disputes or potential legal claims.

Where appropriate, personal data may be securely deleted or anonymised when it is no longer required.

We do not currently use your personal data to make decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects on you.

If this changes, we will update this privacy policy and provide any information required by applicable data protection law.

Under certain circumstances, you have rights under data protection law in relation to your personal data, including the right to:

• request access to your personal data;

• request correction of inaccurate or incomplete personal data;

• request erasure of your personal data;

• request restriction of processing;

• object to processing, including direct marketing;

• request the transfer of certain personal data to you or another organisation; and

• withdraw consent where we rely on consent as our lawful basis for processing.

These rights are subject to certain legal conditions and exceptions and therefore may not apply in every circumstance.

If you wish to exercise any of these rights, please contact us using the contact details above.

You will not normally have to pay a fee to exercise your data protection rights.

However, we may charge a reasonable fee or refuse to comply with a request where the request is clearly unfounded or excessive, particularly where requests are repetitive.

We may need to request specific information from you to help us confirm your identity before responding to a request.

This is a security measure to ensure that personal data is not disclosed to someone who does not have a right to receive it.

We may also contact you to request further information where this is necessary to clarify or respond to your request.

We will normally respond to a valid request without undue delay and within one month of receiving it.

In certain circumstances, this period may be extended by up to a further two months where a request is complex or where you have made a number of requests. If an extension is required, we will explain the reason for the delay.

Legitimate Interest means the interest of our business in conducting and managing our business and providing and improving our products and services. Before relying on legitimate interests, we will consider whether the processing is necessary and whether your interests, rights and freedoms override our interests.

​

Performance of Contract means processing your personal data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

​

Consent means a freely given, specific, informed and unambiguous indication of your wishes by which you agree to the processing of your personal data for a particular purpose.

Special Category Data means particularly sensitive personal data which receives additional protection under UK data protection law, including information concerning health.