Privacy Policy
FunnelLabs ("we", "us", "our") is operated by the Northern School of Marketing. We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, store, and share your personal data when you use the FunnelLabs platform at funnellabs.tech (the "Service").
1. Who We Are
The data controller responsible for your personal data is:
Northern School of Marketing / FunnelLabs
United Kingdom
If you have any questions about this policy or wish to exercise your rights, please contact us at: [email protected]
2. What Data We Collect
We collect and process the following categories of personal data:
Account Data
When you register for a FunnelLabs account, we collect your name, email address, and the password you create (stored in hashed form). If you register via a third-party OAuth provider, we receive the data that provider shares with us (typically name and email address).
Profile and Usage Data
We collect data you voluntarily provide when using the Service, including the content of funnels, journey maps, and personas you create, your chosen subscription plan, and your account preferences.
Technical Data
We automatically collect certain technical information when you access the Service, including your IP address, browser type and version, operating system, referring URLs, pages visited, and the date and time of your visit. This data is collected via server logs and, where applicable, cookies.
Communications Data
If you contact us by email or through the platform, we retain a record of that correspondence.
3. How We Use Your Data
We use your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining the Service | Performance of a contract (Article 6(1)(b) UK GDPR) |
| Processing subscription payments | Performance of a contract |
| Sending transactional emails (account confirmation, password reset) | Performance of a contract |
| Improving the Service through aggregated analytics | Legitimate interests (Article 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Article 6(1)(c)) |
| Sending marketing communications (where you have opted in) | Consent (Article 6(1)(a)) |
We will never sell your personal data to third parties.
4. Cookies
We use strictly necessary cookies to maintain your login session. We do not use advertising or tracking cookies without your explicit consent. You can control cookie settings through your browser preferences.
5. Data Sharing
We share your data only in the following limited circumstances:
Service Providers. We use trusted third-party processors to operate the Service, including cloud hosting providers and payment processors. These parties process data only on our instructions and are bound by data processing agreements.
Legal Requirements. We may disclose your data where required to do so by law, court order, or to protect the rights, property, or safety of FunnelLabs, our users, or others.
Business Transfers. In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the acquiring entity, subject to the same protections described in this policy.
6. International Transfers
Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR, including the use of the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.
7. Data Retention
We retain your personal data for as long as your account is active or as necessary to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (for example, financial records, which we retain for 7 years in accordance with UK tax law).
8. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access — to request a copy of the data we hold about you.
- Right to rectification — to request correction of inaccurate or incomplete data.
- Right to erasure — to request deletion of your data in certain circumstances.
- Right to restriction — to request that we restrict processing of your data.
- Right to data portability — to receive your data in a structured, machine-readable format.
- Right to object — to object to processing based on legitimate interests.
- Rights related to automated decision-making — we do not make solely automated decisions that produce legal or similarly significant effects.
To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), hashed password storage, and access controls. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the platform or by email. Your continued use of the Service after any changes constitutes your acceptance of the updated policy. We recommend you review this policy periodically.
12. Contact Us
For any privacy-related queries, please contact:
FunnelLabs Privacy Team
Email: [email protected]