1. Who We Are
GoalForge ("we", "us", "our") operates this website and the budget planning course described herein.
We comply with UK GDPR.
For all data protection enquiries, contact us at [email protected].
2. What Data We Collect
2.1 Data you provide directly
- Full name (first and last)
- Email address and telephone number (if provided)
- Your current budgeting situation (selected from options on the form)
- Any messages submitted via our enquiry form
2.2 Technical data
- IP address, browser type, operating system
- Pages visited and time on site (via cookies, where consent given)
3. How We Use Your Data
- To respond to your enquiry and arrange your course place — Lawful basis: Legitimate interests / Performance of a contract
- To send course-related communications — Lawful basis: Performance of a contract
- To comply with legal obligations — Lawful basis: Legal obligation
- To send marketing communications (only where opted in) — Lawful basis: Consent
- To improve our website — Lawful basis: Legitimate interests (anonymised/aggregated data only)
4. Who We Share Your Data With
We do not sell your personal data. We may share data with:
- Email service providers — to send transactional communications
- Cloud infrastructure providers — for secure hosting within the UK/EEA
- Regulatory authorities — if required by law
All third-party processors are contractually bound to handle your data securely and in accordance with UK GDPR.
5. Data Retention
- Enquiry data (no enrolment): up to 12 months from last contact
- Course participant data: duration of course plus 3 years
- Accounting records: 6 years in accordance with UK legal requirements
You may request earlier deletion by contacting us at [email protected].
6. Your Rights Under UK GDPR
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion in certain circumstances
- Right to restrict processing — limit how we use your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — at any time, where consent is the lawful basis
To exercise any right, contact [email protected]. We will respond within one calendar month. If unsatisfied, you may lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.
7. Cookies
- Strictly necessary: Required for core site functionality. No consent required.
- Analytics: Help us understand how visitors use the site. Consent required.
- Marketing: Used for relevant advertising on third-party platforms. Consent required.
Manage preferences at any time via the "Manage Cookies" button on our website.
8. International Transfers
We aim to keep all data within the UK or EEA. Where data is transferred outside these regions, we apply appropriate safeguards in accordance with UK GDPR.
9. Security
We use encryption for data in transit and at rest, access controls, and regular security reviews. We will notify you promptly of any confirmed data breach affecting your rights.
10. Changes to This Policy
We may update this policy. The "Last updated" date above reflects changes. We will notify active users of material changes via email.
11. Contact Us