Privacy Notice
Handmade Bosses Ltd respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains what personal information we collect, how and why we use it, who we may share it with, how long we keep it, and the rights you have in relation to your information.
1. Who we are
Handmade Bosses Ltd is a company registered in England and Wales.
Company name: Handmade Bosses Ltd
Company number: 13609442
Registered office: 128 City Road, London, EC1V 2NX, United Kingdom
Website: handmadebosses.com
Contact email: [email protected]
Handmade Bosses provides online education, courses, memberships, resources, templates, coaching, feedback and other services designed primarily for handmade, product-based and creative business owners.
For the purposes of applicable UK data protection law, Handmade Bosses Ltd is generally the controller of the personal information described in this Privacy Notice.
2. Who this notice applies to
This Privacy Notice applies where you interact with Handmade Bosses, including when you:
- visit our website or landing pages;
- join our email list, sign up for a challenge or download a free resource;
- purchase a course, programme, membership, workshop, template or other product;
- create or use a customer account;
- participate in a programme, membership or community;
- attend or participate in a live session;
- contact us for support or make an enquiry;
- interact with us through social media or automated messaging;
- submit information for feedback, coaching or a critique;
- use an AI-powered tool that we provide; or
- otherwise interact with Handmade Bosses online.
It also applies to personal information processed through relevant third-party platforms that we use to operate the business.
3. Personal information we may collect
The information we collect depends on how you interact with us.
Identity and contact information
This may include:
- your name;
- email address;
- billing or business address;
- business or trading name;
- social-media username or profile details;
- telephone number, where you choose to provide one; and
- other contact information you provide to us.
Account and customer information
This may include:
- Kajabi account details;
- products, programmes or memberships you have purchased;
- your access status;
- membership or subscription information;
- course or programme participation;
- purchase dates;
- payment-plan or subscription status;
- support history; and
- information relating to your customer relationship with us.
Transaction and payment information
This may include:
- products purchased;
- amounts paid;
- currency;
- transaction dates;
- subscription or instalment status;
- refunds;
- failed payments;
- billing information; and
- payment-provider transaction references.
Payment card and other financial details are generally processed directly by our payment providers. We do not ordinarily receive or store your complete payment card number.
Marketing information
This may include:
- what emails, resources, challenges or updates you have asked to receive;
- your marketing preferences;
- when and how you joined our email list or signed up for a resource;
- information about unsubscribing, opting out or withdrawing consent;
- email delivery and engagement information where available and lawfully used; and
- information about the offers, resources or campaigns you have interacted with.
Business and submitted information
If you participate in coaching, feedback, critiques, communities, programmes or similar services, you may choose to provide information such as:
- your business name;
- Etsy shop, Shopify store or website links;
- social-media profiles;
- products or product descriptions;
- screenshots;
- sales or business information;
- questions;
- marketing materials;
- documents;
- photographs;
- business plans or ideas; and
- other information needed for us to provide the relevant service.
Please avoid providing personal information about your own customers or other people unless it is genuinely necessary. Where possible, remove or redact information that identifies third parties.
Please do not send us passwords, complete payment-card information or other security credentials.
Community and live-session information
Where you participate in a Facebook group, community, live training, group coaching or question-and-answer session, we may process:
- your profile name and image;
- comments;
- questions;
- posts;
- reactions;
- information you choose to share with the group; and
- your participation in a live or recorded session.
If a live session is recorded, comments, questions or other participation visible during the session may also appear in the recording or replay.
AI-tool information
Some Handmade Bosses services may include AI-powered tools.
For example, you may be able to provide information about:
- what your business sells;
- your products;
- your target audience;
- the subject you want to create content about;
- your marketing goals; or
- other business information,
so that an AI-powered tool can generate outputs such as content ideas, hooks, captions or similar business resources.
You are not normally required to provide sensitive personal information in order to use these tools.
Please avoid entering sensitive personal information, confidential third-party information or personal information about other people unless it is genuinely necessary.
Social-media and messaging information
If you interact with Handmade Bosses through platforms such as Facebook or Instagram, we may process information made available through that interaction, including:
- your profile information;
- comments;
- messages;
- trigger words or responses;
- reactions; and
- information you choose to send us.
We use tools such as ManyChat to respond automatically to certain interactions, for example where somebody comments a specified word on a social-media post in order to receive a requested link or resource.
We periodically remove ManyChat contact records that are no longer required.
Website, device and analytics information
When you visit our website or online services, we may collect information such as:
- IP address;
- browser and device information;
- operating system;
- approximate location derived from technical information;
- referring website;
- pages visited;
- dates and times of visits;
- links clicked;
- website interactions;
- cookie or similar identifiers;
- advertising or campaign information; and
- analytics and conversion information.
Some of these technologies are subject to consent requirements. We use cookie and consent-management tools designed to apply your choices to non-essential cookies and similar technologies.
4. How we collect personal information
We may collect information:
Directly from you
For example when you:
- enter your details into a form;
- sign up for a resource, training or challenge;
- create an account;
- make a purchase;
- send us an email;
- contact customer support;
- join a community;
- participate in a live session;
- answer a survey;
- interact with us on social media;
- submit information for feedback; or
- use one of our tools.
Automatically
Information may be collected automatically through our website and online services using cookies, pixels, analytics tools and similar technologies.
From third parties
We may receive information from third-party platforms and service providers, including:
- payment providers;
- Kajabi;
- social-media platforms;
- marketing and messaging platforms;
- analytics and advertising providers; and
- other providers that you use to interact with Handmade Bosses.
Where you purchase or interact with us through another platform, that platform may also process your information under its own privacy terms.
From publicly available sources
Where relevant to a service you have requested, such as a shop critique or business feedback service, we may review information that you have made publicly available through your business website, Etsy shop, Shopify store, social-media account or similar public business channel.
5. How and why we use personal information
We only use personal information where we have a lawful basis to do so.
Depending on the circumstances, our lawful bases may include performance of a contract, taking steps at your request before entering into a contract, compliance with a legal obligation, your consent, or our legitimate interests.
Our main uses include:
Providing products and services
We use personal information to:
- process purchases;
- create and manage accounts;
- provide access to courses, memberships and resources;
- deliver programmes and services;
- manage subscriptions and payment plans;
- provide customer support;
- deliver coaching, feedback and critiques; and
- communicate important information about something you have purchased or requested.
Our lawful basis is generally performance of a contract or taking steps at your request before entering into a contract.
Operating and improving Handmade Bosses
We may use information to:
- operate our website and systems;
- improve products, services and customer experience;
- understand how customers use our services;
- troubleshoot technical issues;
- plan new resources and services;
- analyse business performance; and
- maintain appropriate business records.
We generally rely on our legitimate interests in operating, managing and improving our business, provided those interests are not overridden by your rights and freedoms.
Customer service and communications
We use information to:
- respond to enquiries;
- answer support requests;
- resolve account or payment problems;
- manage complaints;
- communicate about memberships, programmes or purchases; and
- maintain records of important customer communications.
Depending on the circumstances, we rely on contract and/or our legitimate interests in providing customer support and managing our customer relationships.
Accounting, tax and legal obligations
We may process transaction and customer information to:
- maintain accounting records;
- prepare tax and company records;
- work with accountants and bookkeepers;
- meet regulatory requirements;
- respond to lawful requests; and
- establish, exercise or defend legal claims.
We rely on legal obligations and, where relevant, our legitimate interests in protecting and managing the business.
Security, fraud prevention and enforcing our rights
We may use information where necessary to:
- protect accounts and systems;
- investigate suspicious activity;
- prevent fraud or abuse;
- enforce our contractual rights;
- investigate intellectual-property misuse;
- prevent unauthorised account sharing or content extraction; and
- protect Handmade Bosses, our customers and other users.
We generally rely on our legitimate interests in protecting our business, systems, customers and intellectual property and, where relevant, compliance with legal obligations.
6. Marketing communications
We may send emails and other marketing communications about Handmade Bosses products, services, resources, programmes, memberships, events, challenges, training and offers.
Where electronic marketing rules apply, we only send marketing where we are permitted to do so under applicable law.
Depending on the circumstances, this may include where:
- you have specifically asked us to send you a particular message or type of information;
- you have signed up to receive specified Handmade Bosses emails or updates;
- you have given valid consent;
- an applicable soft opt-in or similar permission is available; or
- another applicable rule permits the communication.
When you sign up for a resource, challenge, training, event or our email updates, the information shown at the point of signup will explain the type of emails you are asking to receive.
Depending on the signup, this may include the resource or training you requested together with related updates, relevant offers, free training, future challenges, business tips or information about Handmade Bosses products and services.
We currently use ActiveCampaign to manage much of our email marketing and email signup activity.
Some emails are not marketing. For example, we may need to send you:
- purchase confirmations;
- account information;
- requested resource or challenge information;
- password or security messages;
- subscription or payment information; or
- important service communications.
You can unsubscribe from marketing at any time by using the unsubscribe link in a marketing email or by contacting us at [email protected].
Unsubscribing from marketing will not necessarily stop service messages that we need to send in connection with a product, account or service you use.
Where we retain limited information showing that you have opted out, we do so so that we can respect your preference and avoid marketing to you again accidentally.
7. Cookies, analytics and advertising
Our website uses cookies and similar technologies.
These may include cookies, pixels, tags, scripts, local storage and similar technologies used to operate the website, remember preferences, understand website use and measure or improve advertising.
We use CookieScript to help manage cookie choices.
Our cookie categories may include:
Strictly necessary
These are required for core website, security, payment or consent-management functions and do not normally require consent.
Performance and analytics
These help us understand how the website is used, monitor performance and improve our website and services.
We use services such as Google Analytics and analytics technology used by our website and service providers.
Functionality
These help provide additional website functions or remember user preferences.
Targeting and advertising
These may be used to measure advertising, understand advertising performance and help deliver or optimise advertising.
Our advertising technology may include services provided by Meta and Stape.
Where consent is required for non-essential cookies or similar tracking technologies, our policy is to use them in accordance with the choices made through our cookie controls.
When you first visit the website, our cookie banner allows you to:
- accept all cookies;
- decline non-essential cookies; or
- choose particular categories.
You can use the available cookie controls to manage your preferences.
Advertising and analytics technologies can involve profiling or matching information in order to measure campaigns or help advertising platforms determine relevant audiences.
We do not use this information to make solely automated decisions about you that produce legal or similarly significant effects.
Analytics, advertising and consent-management providers
For example:
- Google Analytics;
- Meta; and
- CookieScript.
8. AI-powered tools and artificial intelligence
Handmade Bosses uses AI-enabled services in parts of the business.
Customer-facing AI tools
Some products or memberships may include AI-powered tools created or delivered using services such as Pickaxe and relevant AI model providers.
These tools process information you choose to submit in order to generate the requested output.
For example, a social-media tool may process information about your business, products or content topic to generate hooks, ideas or captions.
The information you submit may be processed by the third-party technology providers involved in providing that tool.
Please do not enter sensitive personal information, confidential third-party information or personal information about somebody else unless it is necessary and appropriate to do so.
Internal use of AI
We may also use services such as ChatGPT/OpenAI to assist with legitimate internal business tasks, which may include drafting, research, administration, analysis, content support and service improvement.
Where personal information is involved, we seek to limit its use to what is reasonably necessary for the relevant purpose.
We do not use AI to make solely automated decisions about customers that have legal or similarly significant effects.
9. Communities, social media and live sessions
Handmade Bosses may operate private communities or deliver live sessions through third-party platforms such as Facebook, Instagram, Google Meet or similar services.
Those platforms process information under their own privacy policies and terms.
Information you post in a community may be visible to other members of that community.
Please consider this before sharing confidential business information or personal information.
We may moderate communities, retain appropriate records, remove content or restrict access where reasonably necessary to operate and protect the community.
Where live sessions are recorded, recordings may be made available to eligible members or customers as part of the relevant product or programme.
10. Who we share personal information with
We do not sell personal information to advertisers.
We may share personal information with trusted service providers where reasonably necessary to operate Handmade Bosses.
Depending on how you interact with us, these may include:
Website, course and customer-account providers
For example:
- Kajabi.
Email, messaging and communications providers
For example:
- ActiveCampaign;
- ManyChat;
- Microsoft/Outlook; and
- Google Workspace.
Payment and ecommerce providers
For example:
- Kajabi Payments;
- Stripe;
- PayPal; and
- Shopify.
Analytics, advertising and consent-management providers
For example:
- Google Analytics;
- Meta;
- Stape; and
- CookieScript.
AI and technology providers
For example:
- OpenAI/ChatGPT;
- Pickaxe; and
- AI model or infrastructure providers used by a particular AI-powered service.
Business and workflow providers
For example:
- Google Drive;
- Google Meet;
- Asana; and
- other software used to administer our services and customer relationships.
Creative, video and media providers
Where relevant, we may use platforms such as:
- Canva;
- VEED;
- Restream;
- Buzzsprout; and
- YouTube.
These providers only receive personal information where the relevant service or content requires it.
Professional advisers
We may share information where necessary with:
- accountants;
- bookkeepers;
- Xero or other accounting systems used on our behalf;
- lawyers;
- insurers;
- IT or security advisers; and
- other professional advisers.
Legal and regulatory disclosures
We may disclose information where reasonably necessary:
- to comply with the law;
- to respond to a court, regulator or public authority;
- to protect our legal rights;
- to investigate fraud or wrongdoing; or
- to establish, exercise or defend legal claims.
Sale or restructuring of the business
If Handmade Bosses or part of its business is sold, transferred or restructured, relevant information may be shared with prospective purchasers, advisers or new owners where reasonably necessary, subject to appropriate confidentiality and data-protection safeguards.
Not every provider listed above receives information about every customer.
11. International transfers
Some of the technology providers we use operate internationally or store or access information outside the United Kingdom.
This can mean personal information is transferred to or made accessible from another country.
Where UK data-protection rules relating to international transfers apply, we take appropriate steps to ensure a valid transfer mechanism is used.
Depending on the circumstances, this may include:
- UK adequacy regulations;
- contractual safeguards such as the UK International Data Transfer Agreement;
- the UK Addendum to approved EU Standard Contractual Clauses; or
- another permitted transfer mechanism.
Where a provider manages its own international sub-processors, we may rely on the contractual and transfer safeguards provided as part of that service, subject to our data-protection responsibilities.
12. How long we keep personal information
We do not keep personal information indefinitely simply because we can.
How long information is retained depends on:
- why it was collected;
- whether you continue to have an account or access to a service;
- contractual requirements;
- tax and accounting requirements;
- legal limitation periods;
- security and fraud-prevention needs;
- whether a dispute or complaint exists; and
- the retention settings of relevant service providers.
Examples include:
Customer and transaction records
We may retain purchase, payment and customer records for up to six years or longer where required by applicable tax, accounting or legal obligations.
Course and account information
Where you have continuing access to a product, programme or customer account, information required to provide that access may be retained while the access remains available.
Marketing information
We may retain your marketing information while you remain subscribed.
If you unsubscribe or opt out, we may retain limited information on a suppression list so that we can record your preference and avoid adding you back to marketing unintentionally.
Enquiries and customer support
We retain enquiries and support communications for as long as reasonably necessary to deal with the matter, maintain appropriate business records and protect legal rights.
Communities and recordings
Community information and recordings may be retained for as long as the relevant community, programme, membership, replay or business purpose continues, subject to appropriate review and deletion where no longer required.
ManyChat and similar automation tools
We periodically delete contact records that are no longer required for the relevant automation or business purpose.
Cookies and analytics
Cookies and similar technologies have different expiry periods. More information can be viewed through our cookie controls and cookie details.
Information may remain for a limited period in secure backups after deletion from active systems.
13. Keeping your information secure
We use appropriate technical and organisational measures designed to protect personal information against:
- unauthorised access;
- accidental loss;
- misuse;
- alteration;
- disclosure; and
- destruction.
Access to personal information is limited to people and service providers who reasonably need it for their work.
No online service can guarantee absolute security, but we regularly consider appropriate security measures in light of the type of information we process and the services we use.
14. Your data-protection rights
Depending on the circumstances and the lawful basis we rely on, you may have rights including:
- Access — to request a copy of personal information we hold about you.
- Rectification — to ask us to correct inaccurate or incomplete information.
- Erasure — to ask us to delete personal information in certain circumstances.
- Restriction — to ask us to limit how information is used in certain circumstances.
- Data portability — to receive certain information in a structured and machine-readable format or have it transferred where applicable.
- Objection — to object to certain processing based on legitimate interests.
- Marketing objection — you have the right to object to direct marketing at any time.
- Withdrawal of consent — where we rely on consent, you can withdraw it at any time. This does not affect processing that was lawful before you withdrew consent.
- Rights relating to automated decision-making — where applicable under data-protection law.
These rights are not absolute and may not apply in every situation.
To exercise a right, contact:
We may need to ask for reasonable information to confirm your identity before responding to a request.
15. Complaints
If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to investigate and respond.
You also have the right to complain to the UK data-protection regulator:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
16. Children
Handmade Bosses provides business education and services intended for adults.
Our products and services are not directed at children, and we do not knowingly seek to collect personal information from children.
If you believe that a child has provided personal information to us inappropriately, please contact us.
17. Third-party websites and services
Our website, emails, communities and products may link to third-party websites, platforms or services.
Those organisations control their own privacy practices.
This Privacy Notice does not replace the privacy policies of third-party providers, and we recommend reviewing their privacy information where relevant.
18. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect:
- changes to our services;
- changes to the technology we use;
- changes to how we process personal information; or
- changes to applicable law or regulatory guidance.
The latest version will be published on our website.
Where a change is particularly significant and it is appropriate to do so, we may also bring it to your attention by another reasonable method.
19. Contact us
If you have any questions about this Privacy Notice, how we use personal information or your data-protection rights, please contact:
Handmade Bosses Ltd
128 City Road
London
EC1V 2NX
United Kingdom
Email: [email protected]
