Legal

Privacy Notice

Last updated: 21 May 2026

1. Who we are

TanyaJ Samuel Ltd (company number 17109499, registered in England and Wales) is the data controller for the personal data described in this notice. Contact: info@bconfident.community.

2. Data we collect

• Account data: name, email, password (hashed), login provider (Google).
• Course data: enrolments, progress, quiz results, certificates.
• Communications: support messages and emails you send us.
• Usage / technical: device info, IP address, browser, pages viewed, basic analytics.
• Marketing: email preferences (if you subscribe).

Payment card data is collected and processed directly by Stripe; we do not see or store it.

3. Why we use it & legal basis (UK GDPR)

• Create and manage your account, deliver the course, grant entitlements — contract.
• Customer support, transactional emails — contract / legitimate interests.
• Security, fraud prevention, abuse detection — legitimate interests.
• Analytics and improving the product — legitimate interests.
• Marketing emails — consent; you can unsubscribe at any time.
• Tax, accounting and legal obligations — legal obligation.

4. Who we share it with

• Stripe Payments Europe Ltd — payment processing and card data handling.
• Supabase (via Lovable Cloud) — hosting, database, authentication.
• Cloudflare — content delivery and security.
• Google — if you choose to sign in with Google.
• Professional advisers (legal, accounting) and authorities where required by law.

5. International transfers

Some processors are located outside the UK/EEA. Where data leaves the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses to protect it.

6. Retention

We keep your account and course data for as long as your account is active, plus up to 7 years for tax/accounting records once your account is closed. Marketing data is kept until you unsubscribe.

7. Your rights

Under UK GDPR you can request access, correction, erasure, restriction, portability, or object to processing, and withdraw consent at any time. To exercise rights email info@bconfident.community; we respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

8. Security

We use appropriate technical and organisational measures including encryption in transit, hashed passwords, access controls and Row-Level Security on the database.

9. Cookies

We use essential cookies for authentication and session management, and limited analytics cookies to understand site usage. You can clear or block cookies in your browser settings.

10. Changes

We may update this notice; material changes will be posted here with a new "last updated" date.