We collect personal information such as name, email address, phone number, and billing details. For consulting engagements, we may receive business information you choose to share, including sales data, supplier details, and operational processes. We also collect usage data such as IP address, device identifiers, browsing activity, cookies, and analytics. We maintain records of communications including email and SMS where applicable.
2) How We Use Information
We use information to deliver consulting services, courses, and related software; to fulfill purchases and provide customer support; to send transactional notices; and, where permitted, to send marketing communications by email or SMS. Message and data rates may apply. Reply STOP to opt out and HELP for help where supported. We use information to improve our services and to comply with legal obligations and enforce our Terms of Service.
Legal bases for UK/EU users (GDPR/UK GDPR)
We process personal data based on consent, performance of a contract, compliance with legal obligations, and legitimate interests such as service improvement, fraud prevention, and direct marketing where permitted.
Purpose of use for Japan users (APPI)
Under the Act on the Protection of Personal Information we handle personal information only to the extent necessary to achieve the purposes stated in this Policy and do not use it beyond those purposes without obtaining further consent.
3) Consulting Services Data
When providing consulting, we process the client business and operational data you supply strictly to perform the engagement. Consulting data is treated as confidential and is not used for unrelated marketing without your consent. We may use secure third-party tools such as CRM, project management, communications, and cloud storage providers to support delivery, and we require appropriate safeguards. If consulting involves personal data of your employees or customers, we process it only as instructed and in compliance with applicable laws including GDPR/UK GDPR and APPI.
4) Marketing Communications and Consent
We obtain the consents required by applicable law before sending marketing emails or texts, and we honor opt-out requests promptly. Each marketing email includes an unsubscribe option. SMS messages include local opt-out instructions; for the United States this includes clear STOP and HELP keywords. Where national do-not-call or do-not-contact regimes exist, we check the required registries or obtain the required documented consent before sending marketing texts or calls. If you withdraw consent, we stop processing for marketing purposes and retain only what is necessary for legal or contractual reasons.
5) Country-Specific Notices for Email/SMS and Privacy
These notices supplement the global terms above so that a single policy covers the countries where we advertise or collect contact details.
United States
We comply with CAN-SPAM for email, provide a valid physical mailing address in email footers, and honor opt-out requests. For SMS we comply with TCPA and industry rules; we obtain express consent for marketing texts and include STOP and HELP instructions.
European Union and United Kingdom
We comply with GDPR/UK GDPR including lawful bases, transparency, data minimization, purpose limitation, and user rights. We provide opt-out of direct marketing and honor objections. Cross-border transfers rely on appropriate safeguards such as Standard Contractual Clauses.
Japan
Under APPI, we state purposes of use, obtain consent where required, and support rights to disclosure, correction, deletion, suspension of use, and suspension of provision to third parties. Cross-border transfers are conducted with APPI-compliant measures.
India
For privacy, we comply with the Digital Personal Data Protection Act, including notice and consent where required. For SMS and promotional messaging to Indian numbers, we follow Telecom Regulatory Authority of India rules under the TCCCPR 2018 framework. Where applicable, we register required sender headers and content and acquire documented consent through approved mechanisms before sending commercial SMS.
Brazil
We comply with the LGPD including lawful bases, transparency, user rights, and transfer safeguards. Where required, we will designate a point of contact for data subjects and follow national authority guidance for international transfers and direct marketing consent standards.
Colombia
We comply with Law 1581 of 2012 and related decrees, including duties of controllers and processors, consent for marketing, and rights to access, update, rectify, and delete personal data. Where required, we comply with any database registration obligations.
Mexico
We comply with Mexico’s private-sector data protection law and its 2025 update, including a compliant privacy notice, ARCO rights (access, rectification, cancellation, opposition), and consent or opt-out mechanisms for marketing messages.
United Arab Emirates
We comply with the UAE Personal Data Protection Law. Consent is required for direct marketing unless another legal basis applies; individuals have rights including access, correction, erasure, portability, and objection to processing for direct marketing.
Saudi Arabia
We comply with Saudi Arabia’s Personal Data Protection Law and its regulations on cross-border transfers and consent. Where required, we implement authority-approved transfer mechanisms and honor rights of access, correction, and deletion. We obtain consent for direct marketing.
South Africa
We comply with POPIA. Electronic direct marketing requires prior consent unless an exception for existing customers applies; all recipients have a right to object. We provide clear opt-out mechanisms.
Philippines
We comply with the Data Privacy Act and its Implementing Rules. Consent for marketing must be freely given, specific, informed, and evidenced by written, electronic, or recorded means. Individuals have rights including access, correction, and complaint to the National Privacy Commission.
Singapore
We comply with the PDPA and Do Not Call provisions. Before sending marketing to Singapore numbers, we either check the DNC Registry or obtain clear and unambiguous consent in evidential form and honor withdrawals of consent.
Malaysia
We comply with the Personal Data Protection Act, including notice and choice, disclosure, security, retention, data integrity, and access principles. Individuals may opt out of direct marketing and exercise access/correction rights.
6) Data Sharing
We do not sell personal information. We share data with service providers that process information on our behalf, such as payment processors, CRM and email/SMS providers, analytics, hosting, communications, and cloud storage vendors. We require appropriate contractual safeguards and limit use to our instructions. We may disclose information to authorities where required by law or to protect rights, safety, and property.
For Japan users, when providing personal data to third parties we follow APPI requirements, obtain consent where necessary, and ensure appropriate protection when data is transferred overseas.
7) Cookies and Tracking
We use cookies, pixels, and similar technologies to operate the site, personalize content, measure performance, and analyze traffic. You can manage cookies through browser controls. Where required by law, we will present consent tools for non-essential cookies.
8) International Transfers
If you are in the EU, UK, or Japan, your personal data may be transferred to the United States or other countries that may not provide the same level of protection. We use appropriate safeguards for such transfers, including Standard Contractual Clauses, contractual protections, and other mechanisms recognized by applicable authorities. For countries with specific transfer rules such as Brazil, UAE, Saudi Arabia, and South Africa, we follow applicable statutory requirements.
9) Data Retention
10) Your Rights
11) Security
We implement reasonable technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12) Children’s Privacy
Our services are not directed to individuals under 18 and we do not knowingly collect personal data from minors.
13) Changes to this Policy
We may update this Policy from time to time. The “Effective Date” above reflects the latest version. Material changes will be posted on this page and, where required, we will obtain new consent.
14) Contact Us