Privacy Policy

We respect your privacy and we know how important it is to understand what happens to your personal data when you use our services.

This policy explains, in plain English, what information we collect, how we use it, and the choices you have. Our aim is simple: to be open, fair, and responsible with your data.

We’ve kept the legal detail below (because it matters), but if anything feels unclear or you’d like to talk it through, just get in touch we’ll be happy to help.

1. About us

1. Company details: Alterkind Ltd., trading as Yesology, operates digital courses, events, coaching and related services (collectively, “Services”).

2. Contact: For any questions about this policy or your personal data, please contact us via the details provided on our website.

2. Introduction

This policy explains how we collect, use, and protect your personal data when you use our Services. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. What personal data we collect

Depending on the Services you use, we may collect and process the following types of data:

1. Identification data: name, title, company/organisation, username or similar identifier.

2. Contact information: email address, postal address, telephone number.

3. Payment details: billing address and payment card details (via secure payment processors; we do not store full card numbers).

4. Demographic data: location, preferences, and interests.

5. Usage data: how you use our website and Services, including page views, login times, clicks, and interactions.

6. Marketing and communications data: your preferences for receiving marketing from us and your communication preferences.

7. Sensitive data: we do not intentionally collect or process sensitive personal data (such as health or political beliefs) unless required for a specific Service and with your explicit consent.

4. How we collect personal data

We collect personal data in the following ways:

1. Direct interactions: You provide data when you fill out forms, subscribe to our Services, attend events, join the Yes Club, participate in surveys, or contact us.

2. Automated technologies: We collect technical data about your device and browsing actions via cookies and similar technologies.

3. Third parties: We may receive data from third parties such as analytics providers, payment processors and advertising networks.

5. Purpose and lawful basis for processing

We process your personal data for the following purposes and lawful bases:

1. To fulfil contracts: we use your data to provide the Services you have requested, process payments, and manage your account (lawful basis: performance of a contract).

2. To communicate with you: we may send transactional emails (confirmations, notifications) and respond to your enquiries (lawful basis: legitimate interests).

3. To improve our Services: we analyse usage data to understand how customers use our website and Services (lawful basis: legitimate interests).

4. To market our products: if you have consented or where permitted under marketing laws, we may send newsletters and promotional materials (lawful basis: consent or legitimate interests).

5. To comply with legal obligations: we may process your data to comply with regulatory obligations, resolve disputes, and enforce our terms (lawful basis: legal obligation).

6. Data sharing and third‑party processors

1. Service providers: We may share your data with third parties who provide services on our behalf (e.g., payment processors, hosting providers, email and marketing platforms). We only share data necessary for these services.

2. Legal requirements: We may disclose your data if required by law, court order or governmental authority, or if necessary to protect our rights and property.

3. No sale of data: We do not sell your personal data to third parties.

7. International transfers

We may transfer your personal data to countries outside the UK and the European Economic Area (EEA) for processing by our third‑party service providers. When we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data to standards equivalent to UK law.

8. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Criteria used to determine retention periods include the type of data, contractual requirements, legal obligations and our legitimate interests. Once no longer needed, data will be securely deleted or anonymised.

9. Cookies and similar technologies

Our website uses cookies and similar technologies to analyse traffic, personalise content and remember your preferences. You can manage your cookie preferences via your browser settings. For more information, please refer to our Cookies Notice (if available).

10. Data security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure or destruction. However, no security measure can guarantee absolute safety; therefore, you acknowledge that any transmission of personal data is at your own risk.

11. Your rights

Under the UK GDPR, you have the following rights:

1. Right of access – request a copy of the personal data we hold about you.

2. Right to rectification – request that any inaccurate or incomplete data be corrected.

3. Right to erasure – ask us to delete your personal data in certain circumstances (also known as the “right to be forgotten”).

4. Right to restrict processing – request a pause on processing while we confirm data accuracy or our lawful basis.

5. Right to object – object to our processing of your data for direct marketing or our legitimate interests.

6. Right to data portability – request to receive your personal data in a structured, commonly used format to transfer to another controller.

7. Rights related to automated decision making – we do not use automated decision making that significantly affects you without human oversight.

To exercise your rights, please contact us using the details on our website. We may require proof of identity and further information to fulfil your request. We aim to respond within one month, although we may extend this period for complex requests.

If you are dissatisfied with our response, you can lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.

12. Children’s privacy

Our Services are not targeted at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data as soon as possible.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on our website and, where appropriate, notify you by email. Please check back regularly to stay informed about our privacy practices.