Privacy Policy

Estuary Limited ("Estuary", "we", "us") operates the website estuary.academy and associated services. Our contact address is hello@estuary.academy. We are committed to protecting your personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect the following personal data when you use our website or services: • Contact information (name, email address, organisation, location) when you complete an enquiry or contact form • Purchase and order information when you buy a product or service • Newsletter subscription data (email address, subscription preferences) • Facilitator Hub registration data (name, email, certification number) • Website usage data collected via analytics tools (anonymised) We do not collect sensitive personal data and we do not sell your data to third parties.

We use your personal data to: • Respond to your enquiries and fulfil your orders • Process workshop bookings and facilitator training registrations • Send our newsletter (only with your explicit consent) • Manage your Facilitator Hub account and certification status • Improve our website and services through anonymised analytics • Meet our legal and regulatory obligations Our lawful basis for processing is: contract performance (for orders and bookings), legitimate interests (for service improvement), and consent (for newsletter).

Our website uses essential cookies necessary for its operation, and optional analytics cookies (Google Analytics 4) to help us understand how visitors use the site. Analytics data is anonymised and aggregated. You can opt out of analytics cookies at any time via our cookie settings. Essential cookies cannot be disabled as they are required for the site to function.

We do not sell, trade, or rent your personal data to third parties. We may share data with trusted service providers who assist us in operating our website and delivering services, including: • Payment processors (Stripe) — for secure payment handling • Email service providers (Mailchimp) — for newsletter delivery • Cloud hosting providers — for website and data storage All third-party providers are bound by data processing agreements and are required to handle your data securely and in compliance with applicable law.

We retain your personal data only as long as necessary: • Enquiry and contact form data: up to 2 years • Order and transaction records: 7 years (UK legal requirement) • Newsletter subscriber data: until you unsubscribe • Facilitator Hub account data: for the duration of your membership plus 2 years You may request deletion of your data at any time (see Your Rights below).

Under UK GDPR, you have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete data • Request deletion of your data ("right to be forgotten") • Object to or restrict our processing of your data • Data portability (receive your data in a structured format) • Withdraw consent at any time (where processing is based on consent) To exercise any of these rights, please email hello@estuary.academy. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Estuary is based in the United Kingdom. If you are accessing our services from Hong Kong or other jurisdictions, your data may be transferred to and processed in the UK. We ensure that appropriate safeguards are in place for any international data transfers in accordance with UK GDPR requirements.

We may update this Privacy Policy from time to time. Any significant changes will be communicated via our website or by email where appropriate. The date of the most recent revision is shown below. Last updated: March 2026

For any privacy-related questions or to exercise your rights, please contact us at: hello@estuary.academy Estuary Limited London, United Kingdom