Privacy Policy

Effective date: 19th January 2026
Last updated: 10th October 2026

1) Who we are

Adaptive Resilience Limited (company no. 08841366, registered in England and Wales) ("we", "us", "our") provides resilience training: live workshops in person and online, self-paced online programmes and 1:1 training (the "Services").
We are the primary data controller for personal data we collect and use to deliver the Services.

Contact: pgruenewald@adaptive-resilience.co.uk
Registered office address: DNS House, 382 Kenton Road, Harrow, Middlesex, United Kingdom, HA3 8DP

2) Where this Privacy Policy applies

This Privacy Policy applies to:

• Our websites and pages that link to it

• Our Kajabi-hosted learning platform (courses, checkout, and member areas)

• Our communications with you (email/support)

• Live workshops, follow-up sessions and 1:1 training sessions, in person or online

• Enquiry and contact forms on our website

3) What personal data we collect

We collect the following categories of personal data, depending on how you use the Services:

A. Information you provide

• Name

• Email address

• Billing address and country

• Organisation/company (if provided)

• Password/account credentials

• Messages you send us (support requests, feedback, forms)

B. Payment and transaction data

• Purchase history, invoices/receipts, and payment status

• Payments are processed by third-party payment providers (Stripe/PayPal/Kajabi).

• We do not receive or store full card details.

C. Course usage and engagement data

• Enrolments and access status

• Content viewed, progress/completion, timestamps

• Download/activity logs relevant to service delivery and security

D. Technical and device data

• IP address

• Device type, browser type, operating system

• Approximate location (derived from IP)

• Log data related to security and performance

E. Cookies and similar technologies

• Cookies, pixels, and similar tools used for site functionality, analytics, and remembering preferences (see section 10).

F. Lifestyle check (online programmes)

• Your answers to the optional lifestyle check in the online programme, about sleep, physical activity, food, alcohol, smoking, breaks and similar habits. Some of these answers may reveal information about your health.

G. Workshops and 1:1 training

• Information you choose to share during sessions or in messages, such as your goals, your work situation and the pressures you face. In 1:1 training this may include information about your health or wellbeing that you choose to share.

4) Health-related information

The Services are educational and training-focused. We do not require medical records, and we do not provide medical or psychological treatment.

Some information we collect may relate to your health: your lifestyle-check answers, and anything about your health or wellbeing you choose to share in 1:1 training. Under UK GDPR this is "special category" data. We process it only with your explicit consent, which you give when you complete the lifestyle check or before your first 1:1 session. You can withdraw your consent at any time by contacting us. This does not affect processing that took place before you withdrew it.

Who sees your answers: Your individual answers are seen only by Adaptive Resilience. We never share them with your employer, even if your employer paid for your place. Any feedback to organisations is anonymous and only for groups of 10 or more.

Anonymised evaluation and research: If you agree to this in the lifestyle check, we may use your answers in anonymised form, combined with other participants' answers, to evaluate and improve the training and for research, including research with university partners. We share only anonymised data with research partners. Anonymised data cannot be used to identify you.

Please do not send health information through general contact forms or support messages. If you do, we will handle it carefully and may ask you to share it in a safer way.

5) How we use your personal data

We use personal data to:

• Provide access to courses, resources, and member areas

• Create and administer your account and purchases

• Deliver customer support and respond to enquiries

• Send essential service communications (e.g., purchase confirmations, access changes, policy updates)

• Improve and secure the Services (debugging, performance, fraud prevention, account security)

• Run analytics to understand how the platform is used and improve delivery

• Send educational or marketing communications only where permitted and/or where you opt in, and you can unsubscribe anytime

6) Our legal bases for processing (UK GDPR)

We process personal data under one or more of these legal bases:

• Contract: to provide the Services you requested or purchased

• Legitimate interests: to secure, operate, and improve the Services (balanced against your rights)

• Consent: for certain optional communications/cookies where required

• Explicit consent: for health-related information (see section 4)

• Legal obligation: for accounting, tax, and compliance requirements

7) Kajabi and other third-party processors

We use trusted third parties to operate the Services. These parties may process personal data on our behalf as processors, and in some cases may act as independent controllers for their own purposes.

Key service providers may include:

• Kajabi (course hosting, account management, checkout, email delivery tools, analytics within the platform)

• Payment processors connected to Kajabi (Stripe/PayPal, depending on your checkout method)

• Video hosting/streaming: Vimeo

• Video conferencing for live online workshops and 1:1 sessions: Zoom and Microsoft Teams

• Spam protection on our forms: Google reCAPTCHA (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA checks whether a form is submitted by a person or by an automated program. To do this it processes, among other things, your IP address, information about your browser and device, and how you use the page. Data may be transferred to Google LLC in the USA. Legal basis: our legitimate interest in protecting our forms from abuse and spam (UK GDPR Art. 6(1)(f)). More information: https://policies.google.com/privacy

• Email and communications tooling (including Kajabi email and/or other providers if connected)

We share personal data only as needed to deliver and secure the Services. Kajabi is hosted on Amazon Web Services (AWS), with primary data storage in the United States.

8) International data transfers and hosting

Our Services are delivered using third-party platforms, including Kajabi, which is hosted on Amazon Web Services (AWS).
As a result, personal data processed through the Kajabi platform is primarily stored and processed in the United States.
Where personal data is transferred outside the UK, we rely on appropriate safeguards under UK GDPR, including Standard Contractual Clauses (SCCs) and equivalent legal mechanisms, to ensure an adequate level of data protection.
We do not offer UK-only or EU-only data residency on the Kajabi platform.

9) How long we keep your data (retention)

We keep personal data only for as long as necessary, in particular:

• Account and course data: for your access period plus 12 months, then deleted or anonymised

• Lifestyle-check answers: for your access period plus 12 months, or sooner if you ask us to delete them; anonymised data may be kept longer

• Enquiries that do not lead to a booking: up to 24 months

• Notes from 1:1 sessions: up to 24 months after your last session

• Invoices and financial records: 6 years, as required by UK law

If you request deletion, we will delete or anonymise your data where legally permissible. Some records (e.g. invoices) must be kept to meet legal obligations.

10) Cookies and tracking

We and our service providers (including Kajabi) use cookies and similar technologies to:

• Enable site and platform functionality

• Remember preferences

• Understand usage and improve performance

• Support security features

You can control cookies through your browser settings and, where shown, cookie preference tools on the site. Disabling cookies may affect functionality.

Our enquiry forms use Google reCAPTCHA for spam protection, which may set cookies (see section 7).

11) Marketing communications

If you receive marketing/educational emails from us, you can opt out at any time by using the unsubscribe link in the email or contacting us at: pgruenewald@adaptive-resilience.co.uk.
We still may send essential service communications (e.g., purchase confirmations, access notices).

12) Your rights (UK GDPR)

You may have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion (where legally permitted)

• Restrict or object to certain processing

• Withdraw consent (where processing is based on consent)

• Data portability (in certain circumstances)

To exercise your rights, contact: pgruenewald@adaptive-resilience.co.uk
We may need to verify your identity before completing requests.

13) Security

We use reasonable technical and organisational measures to protect personal data, including access controls and security monitoring.
No online system can be guaranteed 100% secure; you use the Services at your own risk, and we continually improve safeguards.

14) Children

The Services are intended for adults. We do not knowingly collect personal data from children.

15) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change. If changes are material, we will take reasonable steps to notify you (e.g., via the site or email).

16) Contact and complaints

Privacy contact: pgruenewald@adaptive-resilience.co.uk
Business: Adaptive Resilience Limited, company no. 08841366
Registered office address: DNS House, 382 Kenton Road, Harrow, Middlesex, United Kingdom, HA3 8DP

If you are unhappy with how we handle your personal data, you also have the right to complain to the UK Information Commissioner’s Office (ICO).