Privacy Policy
Last updated: 31/10/2025
1) Who we are (Data Controller)
Straight Funnel Ltd ("Straight Funnel","we", "us", "our") is the data controller for thepersonal data described in this notice.
- Company number: 16816476
- Registered office / Trading address: 18 Walden Street, Castleford, England, WF10 4EG
- Email (privacy queries and rights requests): luke@straightfunnel.com
- Website: https://www.straightfunnel.com
You also have the right to lodge a complaint with the InformationCommissioner’s Office (ICO): ico.org.uk | 0303 123 1113.
2) What data we collect
We process the following categories when you use our websiteor services:
- Identity data – name, pronouns, date of birth (18+ confirmation).
- Contact data – email, phone, address, country, company (if applicable).
- Account/booking data – programme selected, dates, invoices, payments, VAT status.
- Intake / self‑assessment data – lifestyle, goals, schedule, preferences, non‑clinical information you choose to share.
- Communications – emails, messages, call notes, feedback forms, testimonials (with your consent when required).
- Technical data – IP address, device identifiers, browser type, pages visited, time on page, referral source, cookies and similar technologies.
- Marketing preferences – your choices for email/SMS/push.
We do not ask for special category (health) data formedical purposes. If you voluntarily share health‑related information duringcoaching, we treat it with additional care and limit use to thecoaching/education you requested (see lawful bases below). We do notprovide medical diagnosis or treatment.
3) How we get your data
- Directly from you – website forms, checkout/booking, email, calls, coaching sessions, check‑ins.
- Automatically – cookies/analytics when you visit our site.
- From processors – payment providers, scheduling tools, survey tools, email service providers and analytics platforms acting on our instructions.
4) Why we use your data and our lawful bases
We only use your data where a lawful basis applies. In plainEnglish:
- To set up your account, take bookings and deliver programmes – we rely on Contract.
- To provide client support and communicate with you – Contract and Legitimate interests (service quality and clarity).
- To run coaching check‑ins and performance tracking (non‑clinical) – Contract and Legitimate interests (programme effectiveness).
- If you voluntarily share health‑related context – we will only use it with your Explicit consent (you can withdraw at any time).
- To take payment and keep tax/VAT records – Legal obligation and Contract.
- To request and publish testimonials/case studies – Consent (separate and revocable).
- To send marketing emails/SMS – Consent (opt‑in).
- To send essential service updates – Legitimate interests / Contract (not marketing).
- To keep the website secure and working – Legitimate interests.
- To run analytics with non‑essential cookies – Consent via the cookie banner.
You can withdraw any consent you have given at any time (seeSection 10).
5) Cookies and similar technologies
We use necessary cookies to run the site and, withyour consent, analytics/marketing cookies to improve performance andcontent. See our Cookies Policy for details and how to managepreferences. You can change your choices at any time via Manage Cookiesin the footer.
6) Sharing your data
We share data with trusted processors who help usdeliver the service (hosting, scheduling, video‑call, survey, analytics, CRM,email/SMS marketing, payments, accounting). Processors must protect your dataand only act on our instructions.
We may also share data with professional advisers (legal,accounting) and with authorities where required by law. We do not sellyour personal data.
7) International transfers
Some processors store data outside the UK. Where thishappens, we use appropriate safeguards such as the UK IDTA/Addendum to SCCs,adequacy regulations, or equivalent protections. Details are available onrequest.
8) Retention
We keep personal data only as long as necessary:
- Client records and invoices: 6 years (legal/tax).
- Coaching records (non‑financial): up to 24 months after programme end, unless required longer for legal claims, or you request earlier deletion where applicable.
- Marketing data: until you unsubscribe or your consent is withdrawn or deemed inactive.
- Cookie data: according to the lifetimes listed in the Cookies Policy.
9) Your rights
Under UK GDPR you can access, rectify, erase,restrict or object to processing, request data portability,and withdraw consent where processing is based on consent. You also haverights regarding automated decision‑making. We do not use automateddecisions that produce legal or similarly significant effects.
To exercise your rights, email luke@straightfunnel.com.We will respond within one month (extendable by two months for complexrequests).
10) Marketing choices
Marketing by email/SMS is opt‑in. You can withdrawconsent at any time via unsubscribe links or by contacting us. Necessaryservice messages may still be sent.
11) Security
We apply technical and organisational measures appropriateto the risk, including access controls, device encryption and staffconfidentiality commitments. No internet transmission is 100% secure—use strongpasswords and tell us immediately if you suspect misuse.
12) Changes to this notice
We may update this notice. We will post changes here andupdate the Last updated date.