top of page

Privacy Policy

Last updated: July 2026

​

This Privacy Policy describes how Foundations and Futures ("we", "us", or "our") collects, uses, stores, and protects your personal information when you visit our website, make a booking, or participate in our online training classes and consultations.

​

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

For the purposes of UK data protection laws, Foundations and Futures is the Data Controller responsible for your personal data.

  • Business Name: Foundations and Futures

  • Legal Status: UK Sole Trader

  • Geographical Business Address: 15 Rosemead, Chertsey, KT16 8JJ, United Kingdom

  • Contact Email: hello@foundations-and-futures.com

​

2. Personal Data We Collect

We only collect personal information that is necessary to provide our training services, process payments, and manage bookings. This includes:

  • Identity & Contact Data: Your full name, email address, phone number, and country of residence.

  • Booking & Attendance Data: Class or consultation selections, date/time preferences, appointment history, and notes provided during booking.

  • Payment Data: Payment status, transaction IDs, and currency used. (Note: We do not store financial card details on our servers. All payments are processed securely via third-party providers).

  • Technical Data: IP address, browser type, device information, and essential website cookie data collected automatically when visiting our site.

​

3. How We Collect Your Data

We collect data directly from you when you:

  • Complete a booking or fill out a form on our website via Wix Bookings.

  • Communicate with us via email, telephone, or contact forms.

  • Make a payment using our integrated payment gateway (PayPal).

  • Interact with our website via essential browser cookies.

​

4. Legal Basis for Processing Your Data

Under UK GDPR, we process your personal data under the following legal bases:

  1. Performance of a Contract: To fulfill your booking, deliver training sessions, process payments, and send booking confirmations or appointment reminders.

  2. Legitimate Interests: To maintain website security, prevent fraud, improve our services, and handle administrative inquiries.

  3. Legal Compliance: To maintain business accounts, financial records, and tax documentation required by UK law (HMRC).

  4. Consent: Where you have explicitly opted in to receive marketing communications or accepted non-essential website cookies.

​

5. How We Share Your Data (Third-Party Service Providers)

We do not sell, rent, or trade your personal data. To run our online business smoothly, we share data only with trusted third-party service providers who act as Data Processors bound by strict data security agreements:

  • Website & Booking Platform: Wix (hosts our website, forms, and booking database).

  • Payment Processors: PayPal (securely handles credit/debit card processing).

  • Scheduling & Calendars: Google Calendar / Google Workspace (syncs booking schedules and appointment times).

  • Video Conferencing Platforms: Zoom or Google Meet (to deliver live online classes and consultations).

​

6. International Data Transfers

Because our website is hosted on Wix and utilizes cloud services (such as Google and PayPal), your personal data may be transferred to and stored on servers located outside the United Kingdom (including the European Economic Area and the United States).

We ensure that all international transfers comply with UK GDPR by using processors that adhere to Standard Contractual Clauses (SCCs) or equivalent UK International Data Transfer Agreements (IDTAs) to maintain high data protection standards.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or HMRC reporting requirements (generally up to 6 years for transactional and financial records).

​

8. Your Legal Rights Under UK GDPR

If you are located in the UK or receiving services from a UK business, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request correction of inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no legal reason for us to retain it.

  • Right to Restrict or Object: Object to or restrict the processing of your data under certain circumstances.

  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at hello@foundations-and-futures.com 

​

9. Security of Your Data

We implement appropriate technical and organizational measures (including SSL encryption on Wix and secure authentication protocols) to protect your personal data from unauthorized access, loss, alteration, or disclosure.

​

10. Cookies

Our website uses essential cookies necessary for page navigation, site performance, and secure payment processing. For details on how we use cookies and how you can manage your preferences, please see our Cookie Banner settings on this website.

​

11. Complaints & Supervisory Authority

If you have concerns about how we handle your personal data, we ask that you contact us first so we can resolve the issue. You also have the right to lodge a complaint with the UK data protection authority:

  • Information Commissioner’s Office (ICO)

  • Website: ico.org.uk

  • Helpline: 0303 123 1113

​

​

 

Top of page
bottom of page