Privacy Policy | Owner Foundry

1. Who we are

Owner Foundry (“we”, “our”, “us”) operates the website at ownerfoundry.com. We are a business solutions provider for small to medium business owners.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. This policy applies to all users of ownerfoundry.com and our products and services.

2. What data we collect

We may collect and process the following personal data:

Contact information: name, email address, when you contact us or sign up to our mailing list.
Account information: email, name, and billing details when you create an account or purchase a product.
Payment information: billing address and card details processed securely by our payment processors (we do not store card numbers).
Usage data: pages visited, time spent on site, referring URLs, device and browser type — collected via analytics tools (only with your consent).
Advertising data: if you consent to advertising cookies, an identifier that lets advertising platforms recognise your browser, plus the pages and actions (such as a purchase) that followed an ad click. Used to measure our ads and to show you our ads again elsewhere.
Communications: messages you send us via contact forms or email.
Course and product activity: progress, completion and engagement with products you have purchased.

3. How we use your data

We use your personal data for the following purposes:

To provide and improve our products and services
To process payments and manage your account
To send you transactional emails (purchase confirmations, account notifications)
To send you marketing communications where you have opted in (you can unsubscribe at any time)
To respond to your enquiries
To analyse usage patterns and improve our website and products
To measure which ads and channels bring in customers, and to show our ads to people who have already visited us (remarketing) — only where you have consented to advertising cookies
To comply with legal obligations

4. Legal basis for processing (GDPR)

Where the GDPR applies, we process your personal data on the following legal bases:

Contractual necessity: to fulfil a purchase or deliver a service you have requested.
Legitimate interests: to improve our products, prevent fraud, and communicate with existing customers.
Consent: for marketing communications, and for analytics and advertising/remarketing cookies (which you can withdraw at any time — see section 5).
Legal obligation: to comply with applicable law.

5. Cookies, analytics and advertising

We use cookies and similar technologies (including local storage and tracking pixels) in three groups. Only the first is on by default:

Strictly necessary: keeping you logged in, remembering what's in your basket, security and load balancing. These are required to deliver the site, so they don't need your consent and can't be switched off.
Analytics: measuring how the site is used — which pages get read, where people arrive from, where they drop off. We use Google Analytics 4 and Rybbit, and session-behaviour tooling (TruConversion) that records anonymised page interactions.
Advertising and remarketing: measuring which ads actually produce customers, and showing our ads to people who have already visited us. We currently use Google Ads and Meta (Facebook and Instagram) for this, and we may add other advertising, retargeting or conversion-measurement platforms in future — any platform we add is used for the same purposes described in this section and only where you have given advertising consent.

Our lawful basis for analytics and advertising cookies is your consent. Nothing in those two groups is loaded before you make a choice. When you first visit, the banner gives you three one-click options — accept all, analytics only, or reject all — and rejecting is as easy as accepting. Until you choose, only strictly necessary storage is used.

Changing or withdrawing your consent: use the Cookie settingslink in the site footer at any time. That clears your stored choice, immediately tells the advertising and analytics platforms to stop using storage, and re-opens the banner so you can choose again. Withdrawing consent doesn't affect anything done while consent was in place. You can also clear your browser's cookies and local storage for this site, or use your browser's own tracking controls.

We implement Google Consent Mode, so where you refuse advertising cookies Google's tags are told not to store or use advertising identifiers. We do not use these tools to build profiles of you for anyone else, and we don't sell your data.

Our checkout runs on a separate subdomain (checkout.ownerfoundry.com). It is covered by this same policy and the same consent choice, and it uses the same analytics and advertising platforms so we can see a purchase back to the visit that produced it.

6. Who we share your data with

We do not sell your personal data. We may share it with:

Payment processors (e.g. Stripe) to process transactions securely
Email service providers to deliver transactional and marketing emails
Analytics providers (only with your consent)
Advertising platforms — currently Google (Google Ads) and Meta (Facebook and Instagram), and any similar platform we add later — which receive event data such as page views and purchases so we can measure our advertising and show you our ads again. This happens only with your advertising consent. Where we send purchase data to these platforms server-side, contact details are cryptographically hashed before they leave us.
Hosting and infrastructure providers who process data on our behalf under data processing agreements
Law enforcement or regulatory bodies where required by law

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

7. International transfers

Some of our service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) to protect your data.

8. How long we keep your data

We retain your data only as long as necessary for the purposes outlined above, or as required by law. Purchase records are typically retained for seven years for accounting purposes. Marketing data is deleted when you unsubscribe or request deletion.

9. Your rights

Depending on your location, you may have the following rights:

Access: request a copy of the personal data we hold about you
Rectification: ask us to correct inaccurate data
Erasure: ask us to delete your data (subject to legal obligations)
Portability: receive your data in a machine-readable format
Objection: object to processing based on legitimate interests
Restriction: ask us to restrict processing in certain circumstances
Withdraw consent: where we rely on consent, you can withdraw it at any time

To exercise any of these rights, contact us at the address below. We will respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

10. California residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect about you, the right to delete that information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise your CCPA rights, contact us using the details below.

11. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data is transmitted over encrypted connections (HTTPS). However, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or emailing registered users. The “last updated” date at the top of this page reflects the most recent version.

13. Contact us

For any privacy-related queries or to exercise your rights, contact us via our contact page or write to: Owner Foundry, ownerfoundry.com.