Legal

Privacy Policy

Last updated: September 2026

1. Who We Are

UNIVERSUS ("we", "us") operates the UNIVERSUS website, courses, memberships, and coaching services, and is the data controller for the personal data described in this notice, meaning we decide how and why your data is processed. You can reach us through our contact page for any request, including requests requiring a legal name or postal address.

2. Data We Collect

• Account data — your name, email address, and login credentials when you create an account.
• Membership and coaching data — the plan you purchase, coaching tier, applications, scheduling requests, and progress check-ins.
• Communications — messages you send us by email, phone, text, or through coaching channels.
• Usage and device data — pages viewed, course progress, approximate location derived from IP address, browser and device identifiers.

Payment card details are collected and processed directly by Stripe, not by us.

3. Why We Use It and Legal Bases

• To provide the Service — create your account, unlock the courses you purchase, deliver coaching, and manage scheduling (performance of a contract).
• Security and fraud prevention — protect accounts and payments (legitimate interests; legal obligation).
• Customer support — respond to your questions and refund requests (performance of a contract; legitimate interests).
• Product improvement — understand how the Service is used and improve it (legitimate interests).
• Marketing — send you relevant updates where you have consented; you can withdraw consent at any time.

4. Who We Share It With

• Service providers and subprocessors — hosting, database, and infrastructure providers that process data on our behalf.
• Stripe — for checkout, subscription management, payments, tax compliance, fraud prevention, disputes, receipts, and invoicing.
• Professional advisers — lawyers and accountants where necessary.
• Authorities — where required by law or to protect our rights.

5. International Transfers

Some of our providers process data outside the UK/EEA. Where this happens we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

6. Retention

We keep personal data only for as long as needed for the purposes above — generally for the life of your account plus the period required by tax and accounting law — after which it is deleted or anonymised.

7. Your Rights

Depending on your location, you may have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; to withdraw consent at any time; and to lodge a complaint with your supervisory authority. We respond to requests within one month. Contact us through our contact page to exercise any right.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege access — to protect your personal data.

9. Cookies

We use essential cookies and browser storage needed to keep you signed in and run the Service. We do not use marketing cookies. You can manage or delete cookies through your browser settings; blocking essential cookies may prevent sign-in from working.

10. Changes

We may update this notice from time to time. Material changes will be posted on this page with a new "last updated" date.