Privacy Policy
Last updated: 18 September 2026
1. Who is responsible for your information
Attraction Research Collective ("we", "us", "our") is the data controller for the personal information we decide how and why to process through attractionresearchcollective.com, enquiries, applications, purchases and coaching. Employees handling this information act on the company's behalf.
Privacy requests and complaints: privacy@attractionresearchcollective.com
Orders and support: support@attractionresearchcollective.com
Legal enquiries: legal@attractionresearchcollective.com
Paid services are exclusively for adults aged 18 or over. We do not knowingly enrol children. Contact us if a child has supplied personal information so we can assess and address it.
2. What we collect and where it comes from
Depending on your interaction, we process:
Contact and enquiry details: name, email, telephone number, country, application answers and relevant goals.
Purchase records: agreements, signatures, billing details, invoices, payment references, amounts, refunds and consent records.
Coaching information: messages, relevant circumstances, consultation notes, plans and, only where separately agreed, recordings or transcripts.
Service and technical records: account identifiers, course access and lesson activity, support correspondence, IP address, device/browser details and security logs.
Preferences: marketing and cookie choices, and permissions for sensitive information or testimonials.
Information comes from you, your use of our services and providers supporting bookings, hosting, communications and payments. If another person refers you, we explain the source and provide relevant privacy information when contacting you, unless you already have it or a legal exception applies.
Do not send complete card details, banking passwords or other banking security credentials through applications or coaching messages.
3. Why we use it and our lawful bases
Requested purchase discussions and delivery: steps at your request before a contract, or performance of our contract with you.
General enquiries and administration: legitimate interests in responding and operating the business, balanced against your rights.
Required accounting and tax records: compliance with legal obligations.
Security, preventing misuse, proving delivery and handling disputes: legitimate interests in protecting customers and the business and establishing or defending legal rights; legal obligations where applicable.
Optional marketing, identifiable testimonials, and separately agreed recording or transcription: consent.
Optional analytics and advertising tracking: consent, as explained in section 7.
We minimise information. Necessary contact and order details enable delivery; marketing, testimonial and recording permissions are optional. We do not make solely automated decisions with legal or similarly significant effects.
4. Sensitive information and private coaching
Health, sex-life, sexual-orientation and other special-category information need an additional legal condition. For personalised coaching we seek separate explicit consent, explaining the information and purpose.
You may discuss matters generally without sensitive details. Withdraw consent at privacy@attractionresearchcollective.com. This does not affect earlier lawful processing, but may limit coaching that depends on the information; we discuss less intrusive alternatives where possible.
If sensitive information arrives unexpectedly, we minimise access, avoid unnecessary use and delete what is not needed. We obtain an applicable condition before retaining or using it further. Information necessary for legal claims may be retained under the relevant legal-claims condition, limited to what is needed.
Use anonymous descriptions of others. Do not send unnecessary names, identifiable screenshots, intimate images or private communications. Your consent does not authorise another person's sensitive information to be processed.
Before recording or transcribing a consultation, we explain its purpose, access and retention period and ask for permission. You may choose an unrecorded consultation (we do not usually record consultations or calls). Publication of identifiable testimonials, messages or case studies requires separate permission covering that use.
5. Who receives information
Necessary recipients include authorised employees; hosting, booking, customer-management, communications, storage and security providers; agreed recording/transcription providers; banks and payment providers; accountants, legal advisers and insurers; and public authorities where required or otherwise lawful.
Providers acting for us require appropriate data protection terms. Banks and some other recipients act independently. Payment enquiries use relevant transaction and delivery evidence, with unrelated coaching disclosures redacted. Sensitive information requires an additional legal condition.
We do not sell personal information or provide private coaching disclosures to advertisers for targeting. Contact the privacy address for information about providers relevant to your data.
6. Processing outside the UK
Providers may process information outside the UK. Restricted transfers require an applicable UK adequacy arrangement or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum, with any required assessment and additional protections.
Contact privacy@attractionresearchcollective.com for the relevant destinations, arrangements and a copy of applicable safeguards, with confidential details removed where necessary. We must meet any additional transfer requirements applying to your information.
7. Cookies and marketing
Necessary cookies or similar technologies support functions such as sign-in, security and remembering privacy choices. Where we use optional analytics or advertising tracking, we obtain consent before activation. Cookie information and controls identify the technologies, purposes, providers and durations and allow rejection or a later change of choice. Third-party embeds requiring consent are not activated before consent.
We send promotional emails or messages only with consent. Requesting information or booking a call does not by itself authorise unrelated marketing. Unsubscribe through the message or contact privacy@attractionresearchcollective.com. You can object to direct marketing at any time. Necessary order and service messages continue where appropriate.
8. How long we keep information
We retain information only while needed for the stated purpose or a legal requirement:
Enquiries and unsuccessful applications: until the enquiry and any follow-up you requested are complete. We then delete or anonymise the record unless separate marketing consent or an identified legal issue justifies keeping relevant details.
Accounting and tax records: normally six years from the end of the relevant financial year, longer where legally required.
Agreements and limited delivery evidence: normally for six years after the contract ends for legal claims; longer only where a specific obligation or unresolved claim requires it.
Coaching notes and messages: while needed for coaching, then reviewed on completion. Unnecessary sensitive details are deleted; only material needed for outstanding support or a specific legal claim is retained for that purpose.
Recordings and transcripts: for the period disclosed before consent, then deleted unless a specific legal obligation or claim requires relevant material to be preserved.
Marketing records: while valid consent and the stated purpose continue. After an opt-out, we keep only a minimal suppression record where needed to prevent further marketing.
Technical and security logs: according to their security purpose and provider retention settings, with relevant records preserved only as needed for an incident or legal obligation.
We consider sensitivity, purpose and legal requirements and use less information where possible. Backup copies awaiting scheduled deletion are protected from ordinary use. Contact us for the retention period or criteria applicable to a particular record.
9. Security, rights and complaints
We use proportionate security measures, including restricted access and appropriate protection of accounts and records. No online service guarantees absolute security. Protect your login details and report suspected unauthorised access to support@attractionresearchcollective.com; report personal-data concerns to privacy@attractionresearchcollective.com.
Depending on the circumstances, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests and withdraw consent. Withdrawal does not affect earlier lawful processing. Email privacy@attractionresearchcollective.com. We may seek proportionate identity verification and normally respond within one month, explaining any lawful extension or exception.
Send privacy complaints to the same address. We aim to acknowledge within two working days and will do so within 30 days. We investigate without undue delay, keep you informed and explain the outcome. You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint/, or another competent regulator where applicable.
10. Changes
We update this notice when our practices or legal requirements change and revise the date above. We bring material changes to your attention and seek fresh consent where required. A policy update does not retrospectively authorise a new use of your information.