1. WHO IS RESPONSIBLE FOR YOUR DATA

─────────────────────────────────────

The data controller is Sales Marketing & Retail Trading Ltd,

trading as BestBeyond50. Contact: [email protected]

2. WHAT DATA WE COLLECT

────────────────────────

Data you give us directly:

• Name and email address

• Payment information (processed by our payment provider —

we do not store card details)

• Application form responses

• Communications with us

• Survey or quiz responses

Data collected automatically:

• Website usage data via cookies

• Email engagement data (opens, clicks)

3. HOW WE USE YOUR DATA

────────────────────────

• To deliver products and services you have purchased

• To send information you have asked to receive

• To process payments and maintain your account

• To review applications for By Design and The Academy

• To send service communications

• To improve our products and website

• To comply with our legal obligations

We will only contact you for marketing purposes if you have

given permission or where we have a legitimate interest.

You can unsubscribe at any time.

4. LEGAL BASIS FOR PROCESSING

───────────────────────────────

• Contract: to fulfil our obligations when you purchase

• Consent: when you opt in to marketing communications

• Legitimate interests: to improve services and communicate

with existing customers

• Legal obligation: where required by law

5. HOW LONG WE KEEP YOUR DATA

───────────────────────────────

• Active member data: duration of membership plus 2 years

• Purchase records: 7 years (required for tax purposes)

• Marketing opt-in records: until unsubscribe, plus 1 year

• Application form data: 1 year from application date

6. WHO WE SHARE YOUR DATA WITH

────────────────────────────────

We do not sell your data. We share it only with:

• Our payment processor

• Our email marketing platform

• Our community platform

• Our website hosting provider

• Professional advisers where necessary

All third parties handle data in accordance with UK GDPR.

7. YOUR RIGHTS

───────────────

Under UK GDPR you have the right to:

• Access the personal data we hold about you

• Correct any inaccurate data

• Request deletion of your data

• Object to or restrict how we process your data

• Receive your data in a portable format

• Withdraw consent at any time

To exercise these rights: [email protected]

We will respond within 30 days.

To complain: Information Commissioner's Office at ico.org.uk

8. CONTACT

────────────

[email protected] · www.bestbeyond50.co.uk