Privacy notice
This explains what we collect when you use fstconsultinguk.com, why we hold it, who else sees it, and how to get it back or get it deleted.
Last updated 19 September 2026
Who is responsible for your data
FST Consulting Ltd, registered in England & Wales (company number [company number]), registered office [registered office address], is the data controller. We are registered with the Information Commissioner's Office under [ICO registration number].
For anything in this notice, email hello@fstconsulting.co.uk.
What we collect and why
| Data | What it includes | Why we hold it |
|---|---|---|
| Your account | Name, email address, phone number, country, and a one-way hash of your password. Students who sign in by email link have no password at all. | To give you access to your account and the course you bought — performing our contract with you. |
| Enrolment and learning | The course and cohort you joined, your start date, your stated career goal, and how you found us. | To deliver the course and support you through it — performing our contract. |
| Payments | Amount, currency, status, payment method, our own reference, and the identifiers Stripe gives us. For bank transfers, the reference you quote. We never see or store your full card number. | To take payment and keep the accounting records the law requires — contract and legal obligation. |
| Enquiries | Name, email, phone and anything you write in a contact form, consultation request or webinar registration. | To answer you and arrange the call or session — our legitimate interest in responding to people who contact us. |
| Newsletter | Your email address, your name if you gave it, and whether you have unsubscribed. | Consent. Every email carries an unsubscribe link, and unsubscribing takes effect immediately. |
| Staff activity log | A record of actions our staff take on records — who changed what, and when. | Our legitimate interest in an audit trail and in keeping the service secure. |
Who else sees it
We do not sell your data and we do not share it for anyone else's marketing. We use these companies to run the service, and each may only use your data on our instructions:
| Company | What they do for us | Where they process it |
|---|---|---|
| Stripe | Card payments and payment plans | Ireland / United States |
| Resend | Sending account, order and newsletter email | United States |
| Neon | Database hosting | United States |
| Vercel | Website hosting and request logs | United States |
Because some of these providers process data outside the UK, those transfers rely on [transfer mechanism — e.g. the UK International Data Transfer Addendum to the EU Standard Contractual Clauses]. We will also share data where the law requires it, or to establish or defend a legal claim.
How long we keep it
- Account and enrolment records: while your account is open, then [retention period] after your last course ends.
- Payment and invoice records: six years after the end of the tax year they fall in, because UK tax law requires it.
- Enquiries and consultation requests: [retention period] from your last contact with us.
- Newsletter: until you unsubscribe, plus a suppression record so we don't email you again by mistake.
- Staff activity log: [retention period].
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong;
- delete data we no longer have a reason to keep;
- restrict or object to how we use it, including direct marketing;
- send your data to another provider in a portable format;
- withdraw consent at any time, where consent is what we relied on.
Email us and we will answer within one month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather hear from you first.
Cookies
We use a small number of cookies, and nothing non-essential runs unless you accept it. Each one is listed on our cookie page, where you can also change your choice.
Children
Our courses are sold to adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, email us and we will delete it.
Changes to this notice
When this notice changes we update the date at the top. If a change materially affects how we use your data, we will tell you by email before it takes effect.