Privacy Policy

1. Introduction

Welcome to Functionallex Labs. We're committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at functionallexlabs.com or engage with our goal planning and self-development services.

When you use our services, you trust us with your personal information. We take this responsibility seriously and work hard to protect your information and put you in control.

This policy applies to all information collected through our website, services, and any related communications. If you have questions about this policy, please contact us using the information provided at the bottom of this document.

2. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources when necessary for our services.

How We Collect Information

• Directly from you: When you register for programs, contact us, or use our services
• Automatically: Through cookies, web beacons, and similar technologies when you browse our website
• From third parties: When you connect through social media platforms or when necessary for payment processing

3. How We Use Your Information

We process your personal information for various purposes, depending on how you interact with our services and the legal basis for processing.

Primary Uses

• Provide, operate, and maintain our goal planning and self-development services
• Process registrations, manage your account, and deliver requested programs
• Communicate with you about your progress, program updates, and support matters
• Personalise your experience and recommend relevant content or programs
• Process payments and manage billing for our services
• Respond to your comments, questions, and provide customer service

Secondary Uses

• Analyse usage patterns to improve our website and services
• Send you marketing communications (with your consent where required)
• Conduct research and analysis to develop new programs and features
• Comply with legal obligations and protect our legitimate business interests
• Prevent fraud, abuse, and ensure the security of our services

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:

• Contract: Processing necessary for performing our services contract with you
• Legitimate interests: For business operations, security, and service improvements, balanced against your rights
• Consent: For marketing communications and non-essential cookies (where required)
• Legal obligation: To comply with applicable laws, such as tax and accounting requirements
• Vital interests: In rare cases, to protect someone's life or prevent serious harm

5. Information Sharing and Disclosure

We don't sell, trade, or rent your personal information to third parties. However, we may share your information in specific circumstances:

Service Providers

We work with trusted third-party companies that help us operate our business, such as payment processors, email service providers, and hosting companies. These partners are contractually bound to protect your information and only use it for the services they provide to us.

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of others.

Business Transfers

If we're involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We'll notify you of any such change in ownership or use of your personal information.

With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Your Rights Under UK Law

As a UK resident, you have specific rights regarding your personal data under UK GDPR and the Data Protection Act 2018:

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We'll respond to your request within one month, though this may be extended to three months for complex requests. We may need to verify your identity before processing your request.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

Security Measures Include:

• Encryption of sensitive data in transit and at rest using industry-standard protocols
• Regular security assessments and vulnerability testing of our systems
• Access controls ensuring only authorised personnel can access personal data
• Regular backups and disaster recovery procedures to protect data integrity
• Employee training on data protection and security best practices
• Secure hosting infrastructure with reputable cloud service providers

While we strive to protect your personal information, no security system is impenetrable. We cannot guarantee the absolute security of our systems or your data.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Account Data: Retained while your account is active and for 3 years after closure
• Program Progress: Retained for 5 years to support ongoing learning objectives
• Communication Records: Retained for 2 years for customer service purposes
• Financial Records: Retained for 7 years as required by UK tax and accounting laws
• Marketing Data: Retained until you withdraw consent or for 2 years of inactivity

When we no longer need your personal information, we'll securely delete or anonymise it so that it cannot be linked back to you.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website, analyse usage patterns, and provide personalised content.

Types of Cookies We Use:

• Essential Cookies: Necessary for website functionality and security
• Performance Cookies: Help us understand how you use our website
• Functional Cookies: Remember your preferences and personalise your experience
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect your ability to use some features of our website.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside the UK, including countries that may not have the same level of data protection laws as the UK.

When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by UK authorities
• Adequacy decisions recognising equivalent protection in the destination country
• Binding corporate rules for transfers within multinational organisations
• Certification schemes and codes of conduct where applicable

11. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16 without appropriate parental consent.

If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through our website or by email for significant changes
• Provide a summary of key changes where appropriate
• Give you time to review changes before they take effect

We encourage you to review this policy periodically to stay informed about how we protect your information.