Privacy Policy

Last Updated: February 23, 2026

1. Introduction

Welcome to The Class Business Academy. We respect your privacy and are committed to protecting your personal data. This privacy policy informs you how we look after your personal data when you visit theclassbusinessacademy.com and outlines your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Kristine Monaghan Ltd (trading as The Class Business Academy) is the data controller and is responsible for your personal data.

• Contact Name: Kristine Monaghan

• Address: 55 Crown Street, Brentwood, Essex, United Kingdom, CM14 4BD

• Email: kristine@kristinemonaghan.com

3. The Data We Collect & Lawful Basis

We collect and process personal data under the following legal bases:

• Identity & Contact Data: (Names, emails, billing addresses). Collected to perform a Contract (enrolling you in the Academy) or based on Legitimate Interests (responding to inquiries).

• Technical & Usage Data: (IP addresses, browser types). Collected via cookies based on your Consent or our Legitimate Interests (to secure and improve our website).

• Marketing Data: Collected based on your Consent when you sign up for our newsletter or free resources.

4. Hosting & Data Residency (Cloudways)

Our website is hosted using managed infrastructure provided by Cloudways Ltd. (a DigitalOcean company).

• Data Location: Our website data and databases are stored on secure servers located in London, United Kingdom.

• Security: We utilize SSL encryption (HTTPS) to secure all data transmitted between your browser and our server.

• International Transfers: While primary storage is in the UK, our provider (DigitalOcean, LLC) is US-based. We ensure protection via the UK International Data Transfer Addendum (Standard Contractual Clauses), ensuring your data receives an equivalent level of protection as it does under UK law.

5. Third-Party Sub-processors & Service Providers

We may share your information with selected third parties to operate the Academy:

• Cloudways / DigitalOcean: Managed Hosting & Infrastructure (London, UK / USA).

• WordPress: Website Content Management.

• Payment Processors: (e.g., Stripe or PayPal) to securely process Academy tuition and fees.

• Operational Providers: Necessary third parties such as email marketing platforms (e.g., Mailchimp/Kajabi) or CRM tools used to deliver course materials.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

6. Data Retention

We retain your data only as long as necessary:

• Inquiry Data: Kept for 12 months if no enrollment occurs.

• Member/Student Data: Kept for the duration of your membership plus 6 years to comply with UK tax and legal record-keeping obligations.

7. Your Legal Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your data.

• Rectification: Request we fix incorrect data.

• Erasure: Request we delete your data (the "right to be forgotten").

• Data Portability: Request your data be provided in a structured, machine-readable format.

• Withdraw Consent: If you have given consent (e.g., for marketing), you may withdraw it at any time.

To exercise these rights, contact Kristine Monaghan at kristine@kristinemonaghan.com.

8. Cookies

We use cookies to enhance your experience. You can manage your preferences through your browser settings or our on-site cookie banner.

9. Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

ICO Contact Details:

• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

• Helpline: 0303 123 1113

• Website: www.ico.org.uk

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us at kristine@kristinemonaghan.com in the first instance.