This policy explains how Channon Coaching Limited ("we", "us", "our") collects and uses personal data when you visit coworkmasterclass.com or book the Claude Cowork Masterclass. We handle your data lawfully, fairly and transparently in line with the UK GDPR and the Data Protection Act 2018.
1. Who we are
We are the data controller for the personal data described in this policy.
2. What data we collect
- Booking details — your name, email address, phone number and billing country, collected when you book a ticket through our checkout.
- Payment information — payments are processed by Stripe. We receive the outcome of the transaction, your email and billing country, and a payment reference. We never see or store your full card details — these are handled entirely by Stripe.
- Messages you send us — if you contact us by email or WhatsApp, we keep that correspondence so we can help you.
- Email delivery information — for the confirmation email we send, our email provider records whether the message was delivered or bounced, so we can keep our systems working.
This is a deliberately lightweight site. We use privacy-friendly, cookieless analytics (Vercel Web Analytics) to count visits and see which pages perform — it sets no cookies, does not track you across the web, and does not build an advertising profile of you. Beyond that we run no advertising or third-party tracking.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Confirm and deliver your masterclass booking, and provide support | Performance of a contract |
| Send your confirmation, readiness checklist and event details | Performance of a contract |
| Keep accounting records and meet HMRC obligations | Legal obligation |
| Run the website securely and prevent fraudulent payments | Legitimate interests (running a safe site) |
4. Who we share it with
We only share personal data with the processors who help us run the booking and the event:
- Stripe Payments Europe, Ltd. — payment processing.
- Resend — sending your confirmation and event emails.
- Vercel Inc. — hosting and delivering the website and its booking functions.
- HMRC, our professional advisers, and law enforcement — only where required by law.
If you choose to message us on WhatsApp, that conversation is also handled by WhatsApp (Meta) under their own terms. We never sell your personal data.
5. International transfers
Some of our processors (Stripe, Resend and Vercel) are based outside the UK. When data is transferred outside the UK we rely on appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision by the UK government.
6. How long we keep it
- Booking and accounting records — at least 6 years after the end of the tax year they relate to (a UK statutory requirement).
- Correspondence — up to 3 years after our last interaction.
7. Cookies
This website does not use analytics or advertising cookies, and shows no cookie banner because none is needed. We only rely on the strictly necessary technical operation of the site. When you proceed to pay, you are taken to Stripe's secure checkout, and Stripe may set its own cookies on its own domain to process the payment securely and prevent fraud, governed by Stripe's privacy policy.
8. Your rights
Under the UK GDPR you have the right to: be informed about how your data is used (this policy); request a copy of the personal data we hold about you; have inaccurate data corrected; have your data erased where applicable; restrict or object to certain processing; data portability where applicable; and to withdraw consent where we rely on it.
To exercise any of these rights, email mark@achieve-with.me. We aim to respond within one month. If you're unhappy with how we've handled your data, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.
9. Security
We use industry-standard measures including TLS encryption in transit, access controls, and processor agreements with our suppliers. Card payments are handled entirely by Stripe, a PCI-DSS Level 1 certified provider. No system is ever completely secure, but we work hard to protect your data.
10. Children
This site and the masterclass are intended for adults. We don't knowingly collect personal data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page shows when it last changed. Material changes will be highlighted on the site.