Privacy Policy

Effective 3 September 2026

Business Idea Launch is the data controller. Contact: contact form.

This policy explains how we collect, use and share personal information when you use the website, complete a launch profile, request a Launch Fit Call, pay for a Launch Plan, or use the Launch Workspace. We do not sell personal data.

This policy is about privacy. It is not legal, tax, financial or investment advice. Our Terms explain the services we do and do not provide.

Information we collect

  • Identity and contact details: name, email address, location and any phone number you give us.
  • Launch-profile answers: starting point, income ambition, timeframe, skills, constraints, preferred call times and similar commercial information you submit.
  • Optional CV or similar file, if you choose to upload one.
  • Engagement records: notes, decisions, comments, deliverables and activity in the Launch Workspace.
  • Account credentials for the Launch Workspace (passwords are stored in hashed form).
  • Payment records: amount, status, time and Stripe identifiers. Card numbers are collected by Stripe, not by us.
  • Technical data: IP address, device and browser type, and pages visited, including analytics if Google Analytics is enabled.
  • Correspondence you send through site forms or other channels we provide for contact.

Please do not send special-category data (for example health or political opinions) or another person’s confidential information unless we have asked for it and it is necessary. Client records are not anonymous.

How we use it and lawful bases

  • Contract: to assess your profile, schedule sessions, take payment, deliver the Launch Plan or build, operate the Launch Workspace and communicate about the engagement.
  • Legitimate interests: to respond to enquiries, keep the site secure, improve the service, and understand which pages people use, where this does not override your rights.
  • Legal obligation: to keep accounting and tax records, and to deal with complaints, claims or regulatory requests.
  • Consent: for non-essential analytics cookies, where consent is required.

We do not use your information to provide legal, tax, financial or investment advice. Profile answers about money, employment or personal circumstances are used only to shape a commercial business-launch service.

Processors and sharing

We share personal data only as needed to operate the service:

  • Stripe — payment processing. Stripe is an independent controller or processor of payment-card data according to its terms.
  • Hosting and application infrastructure (including Vercel) — to run the website and related systems.
  • Database hosting (including Supabase or equivalent Postgres hosting, where used) — to store applications, workspace and related records.
  • Email delivery (including Resend) — transactional messages such as confirmations, workspace access and payment notices.
  • Scheduling tools (for example Calendly or Cal.com), if used to arrange a call.
  • Artificial-intelligence providers (including OpenAI), only where needed to produce agreed deliverables during a paid engagement — for example draft website or workspace content. We do not operate a public chatbot that sends visitor queries to an AI provider.
  • Google Analytics, only if analytics are enabled on the site. See the Cookie notice.
  • Professional advisers, insurers or authorities where required by law or to establish, exercise or defend legal claims.

Some providers may process data outside the United Kingdom. Where that happens, we rely on an appropriate transfer mechanism, such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses, as applicable.

Retention

We keep enquiry and unsuccessful-application data only as long as needed to respond and for a short follow-up period. Paid-client records are kept for the engagement and then for a period required for accounting, tax and the establishment or defence of legal claims — typically up to six years after the engagement ends, unless a longer period is required by law. Optional CV files are kept only while useful for the engagement and then deleted or minimised. Analytics data follows the provider’s retention settings.

Security

We apply appropriate technical and organisational measures, including access controls, hashed workspace passwords and TLS in transit. No method of transmission or storage is completely secure. You must keep Launch Workspace login details confidential.

Your rights

Under UK GDPR you may request access, correction, deletion, restriction or portability, and you may object to processing based on legitimate interests. You may withdraw cookie consent where processing is based on consent. Some rights are limited where we must keep records by law or to defend a claim.

To exercise your rights, use the contact form. You may also complain to the Information Commissioner’s Office at ico.org.uk.

Children

The site and services are intended for adults. We do not knowingly collect personal data from children.

Marketing

We send operational emails about your enquiry or engagement. We do not add you to a promotional mailing list unless you have asked us to, or another lawful basis applies. You can ask us to stop non-essential messages at any time.

Changes

We may update this policy. The effective date above shows the current version. Material changes will be reflected on this page.

Contact

Privacy questions: contact form. See also Cookies and Terms.