Privacy policy

1. Who we are

The AI Visibility Masterclass is operated by Hotel Growth Limited, a company registered in England and Wales, trading as Formula ("we", "us"). Hotel Growth Limited is the data controller for the personal data described in this policy and decides how and why it is used. You can contact us about privacy at adam@thisisformula.com.

2. What we collect

• Account details: name, email address, job title, country and organisation.
• Purchase details: products bought, amounts and payment references.
• Course activity: lessons started and completed, exercises confirmed, last activity.
• Technical data: device, browser, approximate location, IP address and anonymised usage analytics, including sign-in records used to protect against account sharing.

3. How we use it

• To give you access to the course and track your progress.
• To send transactional emails such as activation and receipts.
• To send course and marketing updates where you have consented.
• To improve the course and support you if something goes wrong.
• To keep the platform secure and prevent fraud and licence misuse.

4. Legal bases

We rely on contract (delivering the course you purchased), consent (marketing email and analytics cookies), legitimate interests (platform security, fraud prevention and improvement) and legal obligation (tax and accounting records).

5. Who we share it with

• Stripe, our payment processor and Merchant of Record. Stripe processes your order, takes payment, calculates and remits sales tax and VAT, issues invoices and handles refunds. Stripe acts as a controller for that payment data under its own privacy policy. We receive only the order details we need to grant access, not your full card details.
• Resend, to deliver transactional email.
• ActiveCampaign, to manage course and marketing communications.
• Our hosting and database provider, to run the platform.
• Professional advisers such as our accountants and lawyers, and authorities where we are required to disclose data by law.

Some of these providers process data outside the UK and EEA. Where that happens, transfers are protected by an adequacy decision or standard contractual clauses. We never sell personal data.

6. How we protect your data

We use appropriate technical and organisational measures to keep personal data safe. All traffic to the platform is encrypted in transit with HTTPS, and data is encrypted at rest by our hosting provider. Access to learner records is restricted by database-level access rules so you can only see your own data, and administrative access is limited to named staff who need it. Passwords are stored only as salted hashes, never in readable form, and are checked against known breach databases. Card details are never seen or stored by us — they are handled entirely by Stripe. We keep our platform and dependencies patched and monitor sign-in activity for suspicious use. No system can be guaranteed completely secure, and if a breach affects your rights we will notify you and the ICO as required.

7. Retention

Account and progress data is kept while your access is active and for up to six years afterwards for tax and record-keeping. Marketing data is kept until you unsubscribe. Data is deleted or anonymised once it is no longer needed.

8. Your rights

You can request access, correction, deletion, restriction, portability of your data or object to processing, and withdraw marketing consent at any time, by emailing adam@thisisformula.com. We respond within one month. You may also complain to the Information Commissioner's Office (ICO).