Privacy Policy

We may collect and process the following categories of personal data:

• Identity & Contact: name (first name, surname, preferred name), email address, phone number, username, date of birth, country of residence.
• Account & Profile: password (stored hashed), profile image, bio, cover photo, gallery images, social links, occupation, skill set, referral code, membership level, empowerment interests and progress, empowerment score.
• Empowerment & Activity: selected empowerment areas, completed actions and tasks, quiz answers, exam results, certificates earned, daily stats, login streaks, session attendance, community posts and discussions, discussion votes and bookmarks.
• Transaction & Billing: purchase history, payment status, last 4 digits of card (via our payment processor Stripe — we do not store full card details), subscription tier, invoices.
• Communications: messages sent via the platform, support ticket content, survey responses, call notes, notification preferences.
• Referral & Affiliate: referral codes used, referral links clicked, affiliate click and conversion tracking data, earnings and reward records.
• Usage & Technical: IP address, device details, browser type, operating system, timezone, page interactions, session duration, page URLs visited, crash logs, referral URLs, analytics data.
• Health & Fitness (optional): self-reported fitness goals, activity level, dietary preferences, or allergies you voluntarily share within your empowerment profile.
• Finance & Trading (optional): self-reported experience level, learning goals, and empowerment progress within finance and trading modules.
• Property & Business (optional): self-reported interest areas, role, and engagement with property and business content.
• Media: photos or videos you upload to your profile, gallery, or community spaces.
• Marketing: opt-in and opt-out preferences, tracking identifiers for campaigns (where lawful consent has been obtained).
• Business Provider Data: If you register as a service provider, we collect additional business information including trading name, business type, registration details, qualifications, compliance documents, service listings, availability, and banking/payout details.

We may also receive data about you from third parties such as Google (if you use Google Sign-In), payment processors, analytics platforms, and referral partners — where permitted by law.

We rely on the following lawful bases under UK GDPR:

We use your personal data to:

• Create and maintain your account and profile.
• Personalise your empowerment journey and deliver relevant content, recommendations, and action plans.
• Calculate and display your Empowerment Score.
• Process payments, subscriptions, and referral rewards.
• Run community features including discussions, messaging, follow/friend systems, and notifications.
• Deliver UNITY 2B3 TV content and live sessions.
• Track affiliate clicks and conversions for reward calculation.
• Manage the business provider marketplace including verification, approvals, and listings.
• Send service communications (account updates, payment receipts, security alerts).
• Send marketing communications where you have opted in.
• Detect fraud, enforce our Terms, and comply with legal obligations.
• Analyse platform usage to improve the Services.
• Respond to support queries and complaints.

We use cookies and similar technologies to operate and improve the platform. Types of cookies we use:

• Essential cookies: Required for authentication, security (including Cloudflare Turnstile CAPTCHA), and core platform functionality. Cannot be disabled.
• Performance/Analytics cookies: Help us understand how the platform is used so we can improve it. Only set with your consent.
• Referral tracking: We use localStorage to track referral codes for reward attribution.
• Preference cookies: Store your display preferences and settings.

You can manage non-essential cookie preferences via the banner displayed on your first visit. Withdrawing consent for non-essential cookies will not affect the functionality of the core platform.

We do not sell your personal data. We may share data with the following categories of recipients:

• Supabase: Our database and authentication infrastructure provider (data stored within EU/EEA regions).
• Stripe: Payment processing. Subject to Stripe's own privacy policy and PCI-DSS compliance.
• Google: If you use Google Sign-In, authentication data is exchanged with Google subject to Google's privacy policy.
• Cloudflare: Security, CAPTCHA (Turnstile), and CDN services. Limited technical data is shared for bot protection.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics tools to improve platform performance.
• Business Providers: If you engage with a Provider through the marketplace, relevant contact details may be shared with that Provider to facilitate the service. Providers agree to our data sharing terms.
• Legal authorities: Where required by law, court order, or to protect the safety of individuals.

All third-party processors are subject to data processing agreements and appropriate safeguards.

Your data is primarily stored within the UK and EU/EEA. Where data is transferred outside the UK or EU/EEA (for example, to processors in the US such as Stripe or Google), we ensure appropriate safeguards are in place, including:

• UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses (SCCs).
• Reliance on adequacy decisions where applicable.
• Binding corporate rules or certification schemes (e.g., US Data Privacy Framework) where applicable.

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. General retention periods:

• Active account data: Retained for the lifetime of your account plus a reasonable period after closure to handle disputes or legal queries.
• Financial / transaction records: Up to 7 years in accordance with UK tax and accounting obligations.
• Activity and analytics logs: Typically 12–24 months, then aggregated or deleted.
• Marketing preferences: Until you withdraw consent or request deletion.
• Legal holds: Where data is relevant to ongoing legal proceedings, we may retain it longer than usual.

When your account is deleted, we will remove or anonymise your personal data within a reasonable timeframe, subject to the above retention obligations.

You have the following rights in relation to your personal data:

To exercise any of these rights, please contact us at info@unity2b3.com. We will respond within one calendar month. We may need to verify your identity before processing your request.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted storage via Supabase with row-level security (RLS) policies enforced at the database level.
• Hashed password storage — we never store passwords in plain text.
• CAPTCHA verification (Cloudflare Turnstile) to prevent automated abuse.
• Brute-force login protection and login streak tracking for anomaly detection.
• HTTPS encryption for all data in transit.
• Access controls limiting staff access to personal data on a need-to-know basis.

No system is 100% secure. In the event of a data breach affecting your rights and freedoms, we will notify you and the ICO in accordance with UK GDPR obligations.

Our Services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18 years of age. If you believe we have inadvertently collected data about a minor, please contact us immediately at info@unity2b3.com and we will take prompt steps to delete such data.

We will only send you marketing communications where you have opted in to receive them. You can:

• Update your marketing preferences at any time in your account settings.
• Unsubscribe from marketing emails using the unsubscribe link in any email we send.
• Contact us at info@unity2b3.com to opt out of all marketing communications.

Opting out of marketing will not affect essential service communications (e.g., account confirmations, payment receipts, security alerts).

UNITY 2B3 includes social features such as public member profiles, community discussions, follows, friendships, and messaging. Please be aware:

• Information you include on your public profile (name, bio, profile image, empowerment score, activity) may be visible to other members and potentially to the public depending on your privacy settings.
• Discussion posts and community contributions may be visible to all members.
• You can control your profile visibility settings within your account.
• We are not responsible for how other members use information they can see on your public profile.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of material changes via the platform or by email. The effective date at the top of this page will always reflect when the policy was last updated.

Continued use of the Services after the effective date of any update constitutes acceptance of the revised Privacy Policy.

For any privacy-related questions, to exercise your rights, or to make a data protection enquiry, please contact us:

• Email: info@unity2b3.com
• Subject line: "Privacy / Data Request"
• Registered Address: 309 Hoe Street, Walthamstow, London, E17 9BG
• Company Number: 16277503

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
ico.org.uk  |  0303 123 1113