This policy explains what personal data The Unboxed Academy collects through theunboxedacademy.com, why, who we share it with and the rights you have. We are the data controller. You can contact us about anything in this policy at privacy@theunboxedacademy.com.
What we collect
- Account details: your name, email address and a securely hashed password.
- Purchases: what you bought, when, the price, your billing country and payment status. Card details go straight to Stripe and never reach our servers.
- Learning progress: lessons completed, quiz answers and certificates.
- Producer Track applications: the video link you send, your note, and our review notes and decision.
- Emails you agree to receive: your newsletter consent and which list you joined, and free downloads you asked for.
- Referrals: if you join the referral programme, your link’s clicks, the sales it brings and the payout details you give us. If you arrive through someone’s link, we note who referred you.
- Technical data: IP address, browser type and security logs (for example sign-in attempts), used to keep the site and your account safe.
- Cookie choices: what you accepted or rejected, with the date.
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account and giving you access to what you bought | Contract |
| Taking payment, sending receipts and handling refunds | Contract |
| Keeping tax and accounting records | Legal obligation |
| Reviewing Producer Track applications and making introductions | Contract |
| Sending service emails (password resets, access, receipts) | Contract |
| Sending the newsletter and offers | Consent (you can withdraw it at any time) |
| Sending a free download you asked for and a few follow-up emails | Consent (unsubscribe link in every email) |
| One reminder if you start a checkout but don’t finish, and reminders to students who haven’t started or have paused a course | Legitimate interests (unsubscribe link in every email) |
| Paying referral commissions | Contract |
| Showing reviews and wins you agreed to share (first name and last initial) | Consent |
| Keeping the site secure and preventing fraud | Legitimate interests |
| Analytics and marketing cookies | Consent |
Who we share it with
We use these providers to run the site. Each one processes data for us under a data processing agreement:
- Stripe — payments, fraud prevention and receipts. For buyers in the EU, Stripe acts as the seller of record through Stripe Managed Payments and handles VAT. Stripe may also offer you Link to save your payment details.
- Bunny.net — streams the course videos.
- MailerSend — sends account and service emails.
- MailerLite — sends the newsletter, only if you subscribe.
- Namecheap — hosts the website and its database.
- Telegram — sends us a notification when a new Producer Track application arrives. These messages contain no personal details.
If you apply to the Producer Track, we also share your application with our partner companies: businesses that may hire you to film product videos. Their reviewers see your name, video link, note and our decision, but not your email address. They use these details only to decide whether to work with you; if you then agree to work with them directly, they handle your details under their own privacy policy.
We never sell your data. We share it with authorities only when the law requires it.
International transfers
Some providers process data outside the UK and EU, mainly in the United States. Where they do, transfers are covered by the UK International Data Transfer Addendum, the EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
| Data | Kept for |
|---|---|
| Orders and invoices | 6 years (HMRC requirement) |
| Your account and progress | Until you delete your account |
| Producer Track applications | 12 months after the decision |
| Security and admin activity logs | 12 months |
| Backups | 30 days, rolling |
Your rights
You can ask to see, correct, delete or move your data, and object to or restrict how we use it. From your account you can download your data and delete your account yourself. Deleting your account also removes you from our newsletter. We keep order records for as long as the law requires.
If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.
Age
The site and courses are for people aged 18 or over.
Changes
We'll update this page when anything changes and show the date at the top. If a change affects you significantly, we'll email you.