Privacy Policy & GDPR Notice
Effective Date: 1st October 2026
Website: www.millbrookfolio.com
Business Name: Millbrook Folio
1. Overview
Millbrook Folio ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, purchase our digital products, or enrol in our online training courses.
We act as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We may collect and process the following data about you:
Identity & Contact Data: Name, email address, billing address, and phone number.
Financial & Payment Data: Payment details (processed securely via our third-party payment providers such as Stripe or PayPal; we do not store full credit/debit card numbers on our servers).
Account & Profile Data: Account login details, course enrolment history, module progress, and course completion certificates.
Technical & Usage Data: IP address, browser type, device information, pages visited, and time spent on our platform (collected via cookies and analytics tools).
Marketing Preferences: Your preferences for receiving newsletter updates and promotional communications.
3. How We Use Your Information & Legal Basis
Under UK GDPR, we process your personal data under the following legal bases:
Contractual Necessity: To fulfill your orders, deliver digital training courses, process payments, and provide customer support.
Legitimate Interests: To improve our courses, conduct analytics, maintain platform security, and send updates related to products you have purchased.
Consent: To send marketing newsletters or promotional emails (you can withdraw consent at any time via the unsubscribe link in our emails).
Legal Obligation: To maintain accurate tax and accounting records for HM Revenue & Customs (HMRC).
4. How We Share Your Data
We do not sell your personal data. We may share your data with trusted third-party service providers who assist us in operating our business:
Payment gateways (e.g., Stripe, PayPal)
Learning Management System (LMS) and web hosting providers
Email marketing and CRM services
Analytics providers (e.g., Google Analytics)
All third-party service providers are required to process your personal data securely and in accordance with UK data protection laws.
5. International Data Transfers
While our primary operations are in the United Kingdom, some of our software suppliers may process data outside the UK/EEA. Where data is transferred internationally, we ensure appropriate safeguards (such as UK International Data Transfer Agreements or Standard Contractual Clauses) are in place.
6. Cookies Policy & Tracking Technologies
We use essential cookies to operate our website and learning portal. With your consent, we also use non-essential cookies (such as analytics and performance cookies) to help us understand how you use our platform and to improve your experience.
Under the Privacy and Electronic Communications Regulations (PECR), non-essential cookies are disabled by default and will only be set if you give explicit consent via our website cookie consent banner. You can manage or withdraw your consent at any time through the cookie settings on our website.
7. Data Security & Retention
We implement appropriate technical and organisational security measures to keep your data safe. We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, tax, and accounting requirements (typically 6 years for accounting records in the UK).
8. Your Rights Under UK GDPR
Under UK data protection law, you have the right to:
Access the personal data we hold about you (Subject Access Request).
Request correction of inaccurate or incomplete data.
Request erasure of your personal data ("right to be forgotten").
Object to or restrict processing of your data.
Request the transfer of your personal data to another party.
Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact our Data Protection Officer / Privacy Lead at [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
Email: [email protected]
Home: www.millbrookfolio.com