Privacy Policy

Last updated: 27 August 2026

CBI Consulting Ltd is the data controller for personal data collected through cbiconsulting.co.uk and membership.

Company number 14728619
Registered office: Piccadilly Business Centre, Unit C Aldow Enterprise Park, Manchester M12 6AE
Email: info@cbiconsulting.co.uk

We follow UK GDPR and the Data Protection Act 2018. We are not required to appoint a Data Protection Officer.

1. What we collect

From the join or payment form, or an email you send us:

• name and email (required)
• the membership tier you selected (Gold, Silver or Bronze)
• the payment method you selected (card, bank transfer, or USDT on ERC-20)
• WhatsApp or Telegram handle, only if you choose to give one
• experience, markets, goal and free-text notes you submit

If we offer membership and you pay:

• the fact and date of payment, method (card via Stripe, bank transfer, or USDT ERC-20), and any payer name, reference or sending-wallet identifier that appears on the transfer
• emails we send you (including payment instructions) and your replies

Cards may be taken via Stripe on the join and payment pages. Stripe is a payment processor and may collect card details on its checkout once connected. We do not collect full card numbers on our own forms. We do not publish our bank details or USDT address on the site; those instructions are emailed after you choose bank transfer or Tether on ERC-20.

From hosting and security (StackCP / CDN / WordPress):

• IP address, browser type, date and time of visit, pages requested, and standard server logs
• cookies that are strictly necessary to run and protect the site (for example a session cookie if you log in to WordPress, and caching or firewall tokens)

We do not currently run marketing pixels or analytics packages. If that changes, this policy and any cookie notice will be updated first.

We do not collect MT5 or broker logins. We do not collect children’s data in the ordinary course of this service.

2. What we use it for, and the legal basis

• Reviewing applications and replying — legitimate interests (running an enquiry mailbox) and, once you ask us to consider you, steps toward a contract.
• Providing membership (access, weekly notes, billing follow-up) — contract.
• Taking a card payment via Stripe, where that checkout is connected — contract.
• Sending bank or USDT instructions after an offer — contract.
• Keeping invoices and payment records — legal obligation (tax and accounting).
• Security of the website (logs, abuse, fraud) — legitimate interests.
• Optional WhatsApp or Telegram — we only use that channel if you gave us the handle. You can ask us to stop and use email only.

We do not sell your data. We do not use it for automated decisions with legal effect.

3. Who we share it with

Only people and processors who need it:

• our directors and staff handling applications and membership
• email hosting used for info@cbiconsulting.co.uk
• Stripe, when you pay by card — Stripe is a payment processor and applies its own terms and privacy notice
• our website host (currently StackCP / Krystal / 20i-family) and CDN, which will see IP and request logs
• WhatsApp or Telegram, only if you chose to write to us there (those apps apply their own terms)
• professional advisers (accountant, solicitor) if a dispute or filing requires it
• law enforcement or a regulator if the law requires it

If you pay by bank transfer or USDT (Tether on ERC-20), we send you instructions by email. Your bank or the USDT network will process that payment. We are not a payment service.

4. How long we keep it

• Unsuccessful or unanswered enquiries: up to 24 months after the last message, then deleted or anonymised.
• Members: for the life of the membership, then up to 6 years after it ends for tax and accounting records. Teaching correspondence that is not needed for those records is deleted sooner where we can.
• Server and security logs: as kept by the host, typically weeks to a few months.
• You can ask for earlier deletion of enquiry data. We may keep what the law says we must (for example paid invoices).

5. Your rights

You can ask to access, correct, delete, or restrict your data, to object to legitimate-interests processing, and to receive a copy of data you provided (portability) where that right applies.

Email info@cbiconsulting.co.uk. We may need to verify it is you.

You can also complain to the Information Commissioner’s Office: https://ico.org.uk/

6. Security and transfers

Email, hosting and Stripe may store data in the UK or another country with a UK adequacy decision or standard contractual clauses used by the provider. We do not run an open member database on this website. No method of transmission is perfectly secure.

7. Cookies

The public site aims to use only cookies (or similar) that are necessary to deliver and secure the pages. We do not set advertising cookies. If you log into WordPress, WordPress will set its own login cookies. If Stripe checkout is connected, Stripe may set cookies required to complete a card payment.

You can block cookies in your browser. The site may not load correctly if you block essential ones.

8. Changes

The date at the top will change when we update this policy. Material changes will be emailed to current members where we have an address.

9. Contact

CBI Consulting Ltd, as above. Email info@cbiconsulting.co.uk.