Privacy Policy
Last updated: 14 July 2026
1. Who we are
I'm Carly Docking, a sole trader based in the United Kingdom, trading as The Curious Collective (thecuriouscollective.net). I provide business coaching, membership services, and free educational content. I am the data controller for the personal data described in this policy, which explains how I handle your data in line with the UK GDPR and the Data Protection Act 2018. You can contact me about anything in this policy at hello@thecuriouscollective.net.
2. What information I collect
Account information: your name and email address when you create an account. Your password is never visible to me or stored in readable form; it is protected using industry-standard encryption handled by an authentication provider.
Membership and payment information: your subscription tier and plan choice. Payments are processed by Stripe; your card details go directly to Stripe and never touch my systems. I can see your subscription status, but not your card number.
Content you create: workbook answers, quiz responses, assessment results, community posts and messages, and anything you submit through forms on this site (such as feature requests, questions, and applications for coaching).
Email marketing data: your email address and engagement with my emails (such as opens and clicks) if you join my mailing list, managed through MailerLite.
Usage data: cookies and analytics data (via Google Analytics) about how you use the site, collected only if you accept cookies via the cookie banner.
3. How I use your information
To provide your account, membership, and the content and community features you've signed up for; to process payments and manage subscriptions; to respond to your questions and applications; to send you emails you've signed up for; to understand how the site is used and improve it; and to meet legal obligations such as tax record-keeping.
4. Lawful bases
I rely on: contract (providing your membership and account), consent (email marketing and analytics cookies, both of which you can withdraw at any time), legitimate interests (responding to enquiries, improving the site, preventing misuse), and legal obligation (financial records).
5. Who I share data with
I use trusted service providers to run this business: Supabase (database and accounts), Stripe (payments), MailerLite (email), Vimeo (video hosting), and Google Analytics (site usage). Each processes data on my behalf under their own security and privacy commitments. Some of these providers process data outside the UK; where they do, transfers are protected by appropriate safeguards such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses. I do not sell your data, ever.
6. How long I keep your data
Account and content data: for as long as your account exists. If you delete your account or ask me to, I delete your data unless I'm legally required to keep it.
Payment records: 6 years, as required by UK tax law.
Email marketing data: until you unsubscribe.
Analytics data: up to 14 months.
7. Your rights
You have the right to access your data, correct it, delete it, restrict or object to how I use it, take it elsewhere (portability), and withdraw consent at any time. To exercise any of these, email hello@thecuriouscollective.net and I'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how I've handled your data.
8. Cookies
This site uses essential cookies (needed for login and core features) and, with your consent, analytics cookies (Google Analytics). You can accept or decline analytics cookies via the banner, and change your mind by clearing your browser cookies.
9. Community spaces
Anything you post in community areas is visible to other members. Please don't share personal information in community posts that you wouldn't want other members to see.
10. Changes to this policy
If I make significant changes, I'll update the date at the top and, where appropriate, let members know by email.