Privacy Policy | Owner Foundry

1. Who we are

Owner Foundry (“we”, “our”, “us”) operates the website at ownerfoundry.com. We are a business solutions provider for small to medium business owners.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. This policy applies to all users of ownerfoundry.com and our products and services.

2. What data we collect

We may collect and process the following personal data:

Contact information: name, email address, when you contact us or sign up to our mailing list.
Account information: email, name, and billing details when you create an account or purchase a product.
Payment information: billing address and card details processed securely by our payment processors (we do not store card numbers).
Usage data: pages visited, time spent on site, referring URLs, device and browser type — collected via analytics tools (only with your consent).
Communications: messages you send us via contact forms or email.
Course and product activity: progress, completion and engagement with products you have purchased.

3. How we use your data

We use your personal data for the following purposes:

To provide and improve our products and services
To process payments and manage your account
To send you transactional emails (purchase confirmations, account notifications)
To send you marketing communications where you have opted in (you can unsubscribe at any time)
To respond to your enquiries
To analyse usage patterns and improve our website and products
To comply with legal obligations

4. Legal basis for processing (GDPR)

Where the GDPR applies, we process your personal data on the following legal bases:

Contractual necessity: to fulfil a purchase or deliver a service you have requested.
Legitimate interests: to improve our products, prevent fraud, and communicate with existing customers.
Consent: for marketing communications and analytics cookies (which you can withdraw at any time).
Legal obligation: to comply with applicable law.

5. Cookies and analytics

We use cookies and similar technologies to improve your experience on our site. Analytics cookies are only set with your consent, which you can manage via the cookie banner on your first visit.

We may use Google Analytics 4 and/or privacy-first analytics tools to understand how visitors use our website. These tools may use cookies. Where your consent is required, we will not load analytics until you have provided it.

You can withdraw cookie consent at any time by clearing your browser's local storage or adjusting your browser settings.

6. Who we share your data with

We do not sell your personal data. We may share it with:

Payment processors (e.g. Stripe) to process transactions securely
Email service providers to deliver transactional and marketing emails
Analytics providers (only with your consent)
Hosting and infrastructure providers who process data on our behalf under data processing agreements
Law enforcement or regulatory bodies where required by law

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

7. International transfers

Some of our service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) to protect your data.

8. How long we keep your data

We retain your data only as long as necessary for the purposes outlined above, or as required by law. Purchase records are typically retained for seven years for accounting purposes. Marketing data is deleted when you unsubscribe or request deletion.

9. Your rights

Depending on your location, you may have the following rights:

Access: request a copy of the personal data we hold about you
Rectification: ask us to correct inaccurate data
Erasure: ask us to delete your data (subject to legal obligations)
Portability: receive your data in a machine-readable format
Objection: object to processing based on legitimate interests
Restriction: ask us to restrict processing in certain circumstances
Withdraw consent: where we rely on consent, you can withdraw it at any time

To exercise any of these rights, contact us at the address below. We will respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

10. California residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect about you, the right to delete that information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise your CCPA rights, contact us using the details below.

11. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data is transmitted over encrypted connections (HTTPS). However, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or emailing registered users. The “last updated” date at the top of this page reflects the most recent version.

13. Contact us

For any privacy-related queries or to exercise your rights, contact us via our contact page or write to: Owner Foundry, ownerfoundry.com.