Privacy policy.

Who we are

Scale at Speed is operated by Do Your Bit Ltd, a company registered in England & Wales. Do Your Bit Ltd is the data controller for any personal data you share with us through this website. It is also the data controller for the scorecards at scorecard.scaleatspeed.com and scorecard.felixvelarde.com, and this policy covers both. And it is the data controller when you buy the Scale at Speed course and use it at www.scaleatspeed.academy, which the section Course buyers covers. The section Cohort and Inner Circle members adds what applies to the two tiers with live calls and a private online community. The section Affiliates covers the people who recommend the course in return for a commission.

What we collect

Only what we need to do the job you’ve asked us to do:

• Newsletter signup: your first name and email address, plus the topics you’re interested in. Processed by our email service on our behalf.
• Scorecards: your name and work email, your job title and company if you give them, your answers and your scores. Collected by our scorecard service on our behalf and passed to our email service. We email you your results, a follow-up a few days later, and the occasional email from Felix on scaling agencies. The form says so before you submit, and every email has an unsubscribe link.
• Contact form: whatever you type into the form — typically name, email, organisation and your message. Our email delivery service delivers it to our inbox, through a small relay that our network and security provider runs for us.
• Booking a call: if you book a call on one of our booking pages, such as scaleatspeed.com/schedule/proposition, your name and email address, your company or website, your answers to the booking questions, the time you choose and the page or campaign that sent you there. Our booking service takes the booking for us, and the call takes place on our video-call service. We record a call only when we tell you at the start, and you can say no. We keep a record of the booking in our customer records system.
• Server logs: anonymised request metadata (IP prefix, user agent, timestamp) kept for 14 days for security and performance diagnostics.
• Analytics (consent-based): if you accept the cookie notice, our analytics service records aggregate pages viewed and the route you took to get here. We also run our network provider’s web analytics (cookieless, no consent needed) as a cross-check.
• Marketing attribution (consent-based): if you accept, a tag from the social network where we post tells us which of our posts there bring readers to this site — so we know what’s worth writing more of.
• Affiliate links: this website sets no affiliate cookie and does not credit referrals. If an affiliate referred you to the course, the section Course buyers explains what our course platform records when you buy.

Lawful basis

For newsletters and contact enquiries: your consent (you opted in) and legitimate interest (answering you). For scorecards: legitimate interest. You asked for an assessment of your business, and we follow it up with material on the same subject, which you can stop from any email. We do not rely on consent for this. For checking each new subscriber to our emails against our own record of course sales, so that we don’t offer the course to people who have already bought it: legitimate interest. For analytics and marketing attribution cookies: your consent through the cookie notice. For booking a call: the steps you ask us to take before a possible contract, and our legitimate interest in keeping a record of the call and following it up. For logs and strictly-necessary cookies: legitimate interest in keeping the site working and secure.

Who we share it with

Service providers that process data on our behalf, each bound by a data processing agreement. We describe them by what they do rather than by name, so that we can change a provider without changing this policy. If you want to know who one of them is, email us and we will tell you.

• Our email service (newsletter and scorecard emails) — servers in the US under the UK-US Data Bridge.
• Our automation service (checks each new subscriber to our emails against our own record of course sales) — in the US, under the UK-US Data Bridge.
• Our scorecard service (scorecards and the emails that deliver your results) — a UK company; data stored in the EU.
• Our analytics service and its tag manager — servers in the US under Standard Contractual Clauses. Only if you consent.
• The social network where we post (its attribution tag) — servers in the US under Standard Contractual Clauses. Only if you consent.
• Our booking service (booking pages) — in the US, under the UK-US Data Bridge.
• Our video-call service (calls) — in the US, under the UK-US Data Bridge.
• Our email delivery service (sends single emails for us, not newsletters: the messages from our contact form to our inbox, and some automatic emails about course purchases, as the section Course buyers explains) — in the US, under the UK-US Data Bridge.
• Our customer records system — in the US, under the UK-US Data Bridge.
• Our network and security provider (content delivery, DNS, web analytics and the contact-form relay) — a global network.
• Our hosting provider — servers in the Netherlands, which UK law recognises as giving adequate protection.
• Our source-control service (the site’s code and content) — servers in the US.

We don’t sell your data. We don’t buy advertising against it. We don’t profile you for advertising or marketing. If you buy the course, our AI assistant reports to us on how far you have got, as the section Course buyers explains.

How long we keep it

Newsletter subscriptions until you unsubscribe (every email has a link). Our automation service keeps a log of each check against our record of course sales for up to 69 days, and in its backups for up to four months. Scorecard results until you ask us to delete them, and scorecard emails until you unsubscribe. Contact emails for two years after the last correspondence; our email delivery service keeps each contact-form message for 45 days. Call bookings, and our record of them in our customer records system, for two years after our last contact, unless you become a client. Server logs 14 days. Analytics and marketing cookies have their own lifetimes (see the table below).

Your rights

You can ask us at any time to show you what we hold, correct anything wrong, delete it or limit how we use it, and you can object to how we use it. Email [email protected] and we’ll respond within one month. If you’re unhappy with how we’ve handled your data, you can complain to us at the same address: we’ll acknowledge your complaint within 30 days, look into it and tell you the outcome. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.

Cookies

You saw a cookie notice when you first arrived. You can change your answer any time — clear the sas-consent cookie in your browser and the notice will reappear on the next page load.

Strictly necessary — always on

These keep the site working and remember your consent choice. They don’t require a banner under UK/EU law.

Analytics — only if you accept

Marketing attribution — only if you accept

Booking pages

The booking form on our booking pages is our booking service’s. It loads when you open a booking page, because the page cannot take a booking without it. The booking service then sets its own cookies, some of them to measure how its form is used. They are the booking service’s cookies, not this website’s, and its privacy notice describes them.

If you decline, none of the analytics or marketing cookies are set. The consent notice itself also uses our analytics service’s consent mode — so even when its tag loads, it’s told to treat you as not-consented unless you’ve explicitly said yes.

Course buyers

This section explains what happens to your personal data when you buy, or start to buy, the Scale at Speed course and use it. We sell and run the course on our course platform, at www.scaleatspeed.academy. The rest of this policy still applies where it is relevant, for example if you also get our newsletter.

Who is responsible for your data

Do Your Bit Limited is the data controller. We are a private limited company registered in England and Wales under company number 08130003, and our registered office is Suite 2a, 7th Floor - Pf City Reach, 5 Greenwich View Place, London, England, E14 9NN. For anything about your data, email [email protected] or write to us at that address.

What we collect

• At checkout: your email address, your name, your billing address and, where the checkout asks for them, your business name, your VAT number and your acceptance of our terms. The order also records what you bought, the price, any VAT, the currency, the date, whether you ticked the box to get our emails and, if an affiliate referred you, which one.
• Your payment: your card details, or your digital wallet details, go to our payment processor, which processes payments made through our course platform. We never see your full card number. If you tick “Store this card for future purchases”, your card is kept for your next purchase on the course site.
• Your course account: your name and email address, how often you sign in and when you last used the course, your progress through the lessons, and anything you post in the course, such as a comment on a lesson.
• Your emails with us: what you write to us, for example a question about the course or a request for a refund, and our replies.
• Your feedback: your answers to our end-of-course feedback form, your email address if you give it, and the topics you tick if you would like a follow-up call. Until you send them, your answers stay only in the browser you are using. If you let us quote you, your words, how you want to be named, the version of the question you answered and when.
• Your device: your IP address and details of your browser and device, which our course platform records when you use the course site, and our payment processor when you pay, to run them and keep them secure. A font service also receives your IP address and details of your browser when a page of the course site loads its fonts, as the section Who we share it with explains.

Some workshop tools in the course save what you type only in the browser you are using, not in your course account. Those entries stay on your device and we never receive them. You can clear them in the tool or in your browser settings.

Why we use it, and the lawful basis

We sell the course to businesses. If you buy as a sole trader or as a partner in a partnership, the contract is with you, and the lawful basis for using your details to provide the course is that contract. If you buy for a company or another organisation, the contract is with that organisation, and the lawful basis is our legitimate interest in carrying out the contract with it.

• Providing the course. Taking payment, setting up your account, sending receipts, invoices and the emails the course needs, such as your login details and notices about the course, answering your questions and dealing with refunds. Lawful basis: the contract, or our legitimate interest in carrying out the contract with your organisation, as above.
• Keeping the records the law requires. Tax, VAT and accounting records of each sale. Lawful basis: legal obligation.
• Keeping our own record of each sale. Each purchase is copied into our own records, kept with our automation service: your name and email address, what you bought, the currency, the date and whether you ticked the box for our emails. We use it to check our sales, answer questions about a purchase and deal with refunds. Lawful basis: our legitimate interest in keeping an accurate record of our sales. We also use it for the note in our mailing list, below, if you start getting our emails later.
• Running the course with Viktor, our AI assistant. Viktor is an AI assistant, run for us by its provider, a US company. It reads your course account and your order: what you bought and when, what you paid, your access to the course and the tags on your record, how often you sign in and when you last used the course, your progress through the lessons, and anything you post in the course. It reports to the small team that runs the course on how the course is doing and how far each buyer has got, by name. We use these reports to run the course and to help buyers who get stuck, never to choose whom to offer something to. Viktor also helps us manage the course: it can update the course content, give or remove access, add or remove tags, and prepare and send emails from our course platform. A person approves each change and each email first, and only a person decides to remove anyone’s access. Viktor never looks up your payment details. If a record it reads includes your address or payment information, it does not use, quote or keep it. It does not read the addresses of orders that were not finished. Lawful basis: our legitimate interest in running the course well with a small team and in helping buyers finish it.
• Improving the course. Reading your feedback so that we can improve the course, and answering anything you raise in it. Lawful basis: our legitimate interest in improving the course and in answering you.
• Quoting you, if you agree. If you tell us we may quote you, we may show your words on our course pages at scaleatspeed.com and scaleatspeed.academy, with your name, role and company or without them, as you chose. We show you the quote before we use it. Lawful basis: your consent. You can withdraw it at any time by email to [email protected], and we will take your words off our pages within 14 days. Withdrawing does not affect what we showed before.
• Paying our affiliates. People who recommend the course can earn a commission as our affiliates. If one of them referred you, our course platform records which one when you buy, and we use that record to pay them. Lawful basis: our legitimate interest in paying the people who recommend the course.
• Making our emails fit what you bought. If you already get our emails, or you tick the box at checkout, we note in our mailing list, kept with our email service, that you bought the course, which tier, whether you paid the founding price, and your currency. If you start getting our emails later, for example by signing up for our newsletter, we may add the same note then, from our own record of the sale. We use this to stop offering you what you already have, to tell you about moving up a tier, and to quote prices in your currency. Lawful basis: our legitimate interest in sending relevant emails to people who have asked for them.
• Sending you our emails, if you ask for them. If you tick the box at checkout, you join our email list: the Scale at Speed newsletter and news of our courses and services, sent from our email service and from our course platform. If you unsubscribed from our list before, our email service does not let us add you back ourselves, so we send you one email with a link to join again, and you join only if you use it. Lawful basis: your consent. Every email from the list has a link to unsubscribe.
• Reminding you about an unfinished order. If you enter your email address at our checkout and leave without paying, our course platform keeps the address and we may send you one email about that order, with a link back to the checkout. To refuse it, email us, as the checkout explains, or reply to the reminder, and we will note your refusal. Our course platform sends this email itself and gives us no way to stop it for one address without also stopping that address’s receipts and login emails, so if you start and leave another order later, you may get one more. If you ask us to delete the address, we pass your request to our course platform. We use the address for nothing else. We cannot see these addresses ourselves: our course platform holds them, and it does not publish how long it keeps them. Lawful basis: our legitimate interest in helping you finish a purchase you started.
• Improving the course site. Our analytics service tells us which pages of the course site are visited, how people move through them and whether a visit ends in a purchase. Lawful basis: our legitimate interest in improving the course site. It is on unless you turn it off, as the section on cookies below explains.
• Loading the course site’s fonts. The course platform’s design that runs the course site asks a font service for fonts on each page, and the platform has no setting that turns this off. Your browser then sends the font service your IP address, the address of the page and details of your browser. Lawful basis: our legitimate interest in running the course site on the platform’s standard design.
• Preventing fraud and misuse. Our course platform and our payment processor use your payment and device details to stop fraud and to keep the checkout and the course secure. Lawful basis: our legitimate interest in preventing fraud.
• Dealing with disputes. We keep the records of your purchase in case a question or a claim arises about it. Lawful basis: our legitimate interest in establishing, exercising or defending legal claims.

We need your email address, your billing address, your payment details and, on some checkouts, your name to sell you the course: the checkout cannot be completed without them. Getting our emails is optional. We do not make decisions about you by automated means alone.

Your right to object. Where we rely on our legitimate interests, you can object at any time, on grounds relating to your situation, and we will stop unless we have compelling grounds to continue or need the data for a legal claim. If you object to the note in our mailing list, or to any use of your data for marketing, we stop straight away. If you object to Viktor’s reports about your progress, we leave you out of the reports that name buyers from that day. You can turn off analytics on the course site yourself at any time.

Who we share it with

• Our course platform (in the USA) runs the course site and the checkout for us, holds your account and your order, and sends the course emails. It also uses data about how the course site is used for its own analytics, benchmarking and reporting, as a controller in its own right.
• Our payment processor processes your payment, through our course platform. It also uses payment and device details as a controller in its own right, for example to prevent fraud and to meet its legal duties, under its own privacy policy.
• Your digital wallet’s provider, if you pay with a digital wallet, under its own terms and privacy policy.
• Our analytics service measures the course site for us, as our processor. Separately, a font service sends the fonts that the pages of the course site ask for. For this, it receives your IP address, the address of the page and details of your browser, and uses them to send the fonts and for security, under its own privacy policy. It says that it does not use them to build profiles or for advertising, and it sets no cookies.
• Our automation service (in the USA) copies each purchase from our course platform into our own records and, where the rules above allow, into our mailing list.
• Our email service (in the USA) holds our mailing list. Its owner says it also uses some information about the people on its customers’ lists for its own purposes, under its own privacy statement.
• Our email delivery service (in the USA) sends two automatic emails for us: the one with a link to join our list again, above, and, if you buy the Cohort or the Inner Circle, the one that tells Viktor, the AI assistant that runs our online community, about your purchase. It receives each email, with the name and email address in it.
• Viktor (run by its provider, in the USA) reads your course account and your order and helps us manage the course, as above. It uses AI models from other companies to do so. Neither its provider nor those companies may train AI models on your data.
• Our AI assistant service, which we use to help us run the course and the course site. When we use it, it may read your course account and your order. Its provider handles what we give it under its own terms and privacy policy, as a controller in its own right. We have switched off the setting that lets it use our data to train its AI models.
• Our form service (in the USA and other countries) receives your answers to the feedback form and keeps them for us. If you let us quote you, anyone who reads those pages sees your words and, if you chose it, your name, role and company.
• Our accounting software holds our accounts, as our processor. When we send you a VAT invoice from it, for example because you are in the UK and paid in US dollars, it holds your name, your business name and address, your VAT number and what you bought.
• The affiliate who referred you, if one did. Our course platform shows them your name, or part of it, what you bought and the date, so that they can check their commission. It does not show them your email address or your payment details.
• The people who help us run the course, who see your details only when they need to, for example to answer a support question.
• Our accountants, HMRC and other authorities, to keep our accounts and when the law requires it.
• A buyer of the course or of our business, if we sell it, who would take over your purchase.

We describe these providers by what they do rather than by name. If you want to know who one of them is, email us and we will tell you. We don’t sell your data or use it for advertising.

Transfers outside the UK

Our course platform, payment processor, analytics service, font service, automation service and email service store or process data in the USA, and some of them in other countries as well. UK law approves transfers to US organisations certified under the UK Extension to the EU-US Data Privacy Framework, often called the UK-US data bridge: the Data Protection (Adequacy) (United States of America) Regulations 2023, which now have effect as regulations under Article 45A of the UK GDPR. When we checked on 23 September 2026, each of them was certified. Our email delivery service stores and processes data in the USA too, and when we checked on 30 September 2026, it was certified. Our form service stores and processes data in the USA too, and when we checked on 3 October 2026, it was certified. Our AI assistant service’s provider, for people in the UK, is a company in Ireland, which UK law recognises as giving adequate protection, and it moves data to the USA and other countries under the EU standard contractual clauses. Viktor’s provider stores and processes data in the USA too, and it is not certified. Its data processing agreement with us uses the EU standard contractual clauses, with the International Data Transfer Addendum issued by the Information Commissioner, and we will send you a copy of these safeguards if you ask. You can check any company’s certification at dataprivacyframework.gov. Where they move data on to other countries, they do so under their data processing terms with us, and we will send you a copy of the safeguards in those terms if you ask.

Our accounting software stores and processes data in other countries too, such as the USA, Australia and New Zealand. UK law recognises New Zealand as giving adequate protection. For the other countries, its data processing terms with us use the International Data Transfer Addendum to the EU standard contractual clauses, issued by the Information Commissioner. We will send you a copy of these safeguards if you ask.

How long we keep it

• The records of your purchase (the order, receipts, invoices, refunds and our own record with our automation service): six years after the end of our financial year in which you bought. Tax law requires this, and a claim about a contract can be brought for six years. Our automation service also keeps a log of each purchase it copies for up to 69 days, and in its backups for up to four months.
• Your course account and progress: for as long as you have access to the course. After that, your account stays with the records of your purchase for the same six years, unless you ask us to delete it sooner.
• Viktor’s reports: two years after each one is posted. Viktor keeps no copy of your records beyond what a report needs. Its provider keeps what Viktor holds while our account with it runs, deletes what we ask it to delete, and deletes the rest within a month after our account ends.
• The note in our mailing list: for as long as you stay subscribed. If you unsubscribe, we keep your address marked as unsubscribed so that we don’t email you again.
• Your emails with us: two years after the last one, unless they belong with the records of a purchase.
• Your feedback: two years after you send it. A quote you let us use, with your permission: for as long as we show it, and for one year after we take it down.
• A stored card: until you remove it from your account or ask us to remove it.
• Our analytics service: the details of each visit for no more than 14 months. After that, only totals remain in our reports.
• Our email delivery service: each email it sends for us, and the record of its delivery, for 45 days; then it deletes them. If an email to you bounces, or you mark it as spam, it keeps your email address on its list of addresses not to email, with no end date, so that you are not emailed again by mistake.

Our payment processor, your digital wallet’s provider and the font service keep what they use for their own purposes for as long as their own privacy policies say.

Your rights, and how to complain

You can ask us for a copy of your data, and ask us to correct it, to delete it or to limit how we use it. Where we rely on the contract or on your consent, you can ask for the data you gave us in a form you can take to another organisation. You can withdraw your consent to our emails at any time; that does not affect what we did before. Email [email protected]. We answer within one month. If a request is complex, or you send several, the law lets us take up to two more months, and we will tell you why within the first month.

If you are unhappy with how we have used your data, you can complain to us, by email to [email protected] or by letter to our registered office. We will acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome without undue delay. You can also complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk/make-a-complaint.

Cookies on the course site

The course site sets its own cookies, separate from this website’s. The ones marked strictly necessary keep the site and the checkout working and secure, and when you sign in to the course, our course platform also uses a cookie to keep you signed in.

We use our analytics service on the course site to see how it is used, so that we can improve it. It processes this data for us, and does not use it for advertising or for its own purposes. It is on unless you turn it off, and turning it off makes no difference to buying or using the course. To turn it off, use the “Turn it off” link at the foot of any page of the course site, or this link: turn off analytics on the course site. To turn it back on, use this link. Apart from the affiliate cookie, we don’t use advertising cookies on the course site.

Our course platform also measures how it is used, with its own analytics cookies, for its own purposes.

If you follow an affiliate’s link to the course, our course platform sets a cookie, kjba, on the course site. It tells the platform which affiliate to credit if you buy, or fill in a form there, within 30 days, and a later click on another affiliate’s link replaces it. To remove it, delete the course site’s cookies in your browser.

You can block or delete these cookies in your browser settings. If you block the strictly necessary ones, the checkout and the course will not work.

Cohort and Inner Circle members

This section adds to the section Course buyers. It applies when you buy the Cohort or the Inner Circle, the tiers of the course with live calls and a private online community. Do Your Bit Limited is the data controller.

What we collect

• Your place: your name, your email address, your country (so that we can give you the call times in your own time zone), your tier and your intake, the call time you choose at checkout, the type of business you tell us, your group and its lead, and whether you joined each call. We keep this in our customer records system.
• The calls: your name, your image and your voice, what you write in the call’s chat, and the call’s transcript and summary. We record every call with our call recorder: see Recording the calls, below.
• The online community: your profile on the community platform, and the messages, files and reactions you post in its channels, and any messages you send to the team or to Viktor, the assistant that manages the community.
• Your one-to-one calls, if you join the Inner Circle: you book your kick-off call and your second one-to-one call on our booking service. The kick-off booking asks three questions about your business: its name, its revenue and headcount, and where it is based. The second call’s booking asks none. What else we record when you book is set out under Booking a call, in the section What we collect at the top of this policy.
• Your questions for the monthly group calls, if you join the Inner Circle: the questions you email to us for your cohort’s monthly group calls with Felix, with your name and email address, and whether you asked us not to say whose question it is.
• Introductions: a record of any introduction we make for you to the 2Y3X programme or to Felix (who made it, when, what you asked about, and whether work followed), and a note if you tell us that you do not want to hear about further help.

Please do not name or identify your staff, clients or prospects in the calls or in the community: use their roles or initials, and take names out of any work you share. Do not post health or other sensitive details about anyone. If such details are posted, we delete them when we see them or when you ask us to.

Why we use it, and the lawful basis

• Running your group. Putting you in a group, running the calls, inviting you to the online community, and sending you the joining details. Lawful basis: the contract, or our legitimate interest in carrying out the contract with your organisation, as in the section Course buyers.
• Recording the calls. We record every call, the Inner Circle’s monthly group calls and one-to-one calls included, so that the advice stays consistent from one call, and one consultant, to the next, and so that members who miss a call can watch it. Our call recorder records each call and makes a transcript and a summary of it. We tell you before each call and again at its start. We keep the transcripts and summaries longer than the recordings, so that our advice stays consistent from one intake to the next, so that we can improve the course, and as a record of the advice we gave in case of a dispute; other AI services may summarise and analyse them for us. Lawful basis: our legitimate interest in giving you consistent advice across calls, consultants and intakes, in improving the course and in keeping a record of our advice.
• Running the online community with Viktor. Viktor is an AI assistant, run for us by its provider, a US company. It keeps the list of members, posts welcome and housekeeping messages, answers practical questions and tells us what needs a person. To do this, it reads the messages in every channel it is in, and it can read about 90 days of earlier messages when it joins a channel. It checks each purchase in our course platform (the name, the email address and what was bought), and it helps us run the course there, as the section Course buyers explains. It never removes or mutes a member: a person decides that. Lawful basis: our legitimate interest in running the community well with a small team.
• Preparing your calls with Felix and your cohort. Reading the answers you give when you book your kick-off call, and the questions you send for the monthly group calls, so that Felix can prepare the calls and we can set up the Inner Circle cohorts. Lawful basis: the contract, or our legitimate interest in carrying out the contract with your organisation, as in the section Course buyers.
• Telling you about further help. Your group lead or Felix may tell you, in the calls and in your group’s channel, about the 2Y3X programme, which an associated company runs, and about Felix’s board advisory and proposition development workshops, when they would help your business. We email or message you about them only if you ask us to. If you ask, or agree, to be introduced, we pass your name, your contact details and what you want help with to that company, or to Felix, and keep a record of the introduction for our accounts. We never use the recordings, the transcripts, Viktor or your messages in the community to pick out members for these offers. Lawful basis: our legitimate interest in offering our members further help from us and from our associated company.

Your right to object. Where we rely on our legitimate interests, you can object at any time, as the section Course buyers explains. If you object to the recording of a group call, weekly or monthly, you do not join that call live, and we give you its recording. If you object to the recording of one of your one-to-one calls, we do not record it. If you object to our keeping the transcripts of calls you were on, we take your name out of them. If you object to Viktor reading your messages, you can reach your lead and us by email, not in the community, for anything you do not want in the channels, and we ask Viktor’s provider to delete what Viktor holds of your messages. You can also tell your lead or us at any time that you do not want to hear about further help, and we will stop, whatever your reason. We keep a note of it, so that nobody asks you again.

Who we share it with

• The other members of your group see your name and what you say on the calls and in your group’s channel, and can watch your group’s recordings. Every member of the community sees what you post in its shared channels.
• The course team: Felix Velarde, the group leads and the people who run the course for us can watch every recording and read every transcript and summary. The recordings of one-to-one calls, with their transcripts and summaries, are for you and the course team only.
• The group leads, senior consultants from the 2Y3X programme who work for us as contractors, see the details and the posts of the members of their group, and run its calls. They act on our instructions, under a written contract with us.
• An associated company, owned by the same person as us, provides the email accounts that the group leads use to write to you, under a written contract with us. Its email provider stores those emails in the USA and other countries, under the UK-US data bridge and its data processing terms.
• The same associated company runs the 2Y3X programme. If you ask, or agree, to be introduced to it, it receives your name, your contact details and what you want help with, and deals with you from then on under its own privacy notice.
• Our community platform (in the USA) hosts the community for us.
• Our video-call service (in the USA) runs the calls for us.
• Our call recorder (in the USA) records the calls, makes their transcripts and summaries, and keeps all three for us. It uses other AI services to do so, and does not let them train AI models on our calls. We have switched off its use of our calls to improve its own AI models.
• Other AI services and our cloud storage. Other AI services may summarise and analyse the transcripts and summaries for us, and we may keep copies of the recordings and transcripts in our own secure cloud storage. These services change from time to time, so we keep a list of them rather than naming them here, and we will send you the list if you ask. Each works for us under a written agreement, and none may use your data to train AI models.
• Viktor (run by its provider, in the USA) runs the community for us, as above, and helps us run the course, as the section Course buyers explains. It uses AI models from other companies to do so. Neither its provider nor those companies may train AI models on what you post.
• Our automation service adds each booking to our customer records system, which holds the details of your place and your answers to the kick-off questions. Our booking service and our customer records system keep the bookings of the Inner Circle’s one-to-one calls, with your answers to the kick-off questions, as the section Course buyers and Booking a call say.

Transfers outside the UK

Our community platform, video-call service and call recorder, and Viktor’s provider, store and process data in the USA. The first three are certified under the UK Extension to the EU-US Data Privacy Framework (we checked on 25 September 2026), so UK law approves these transfers, as the section Course buyers explains. Viktor’s provider is not certified. Its data processing agreement with us uses the EU standard contractual clauses, with the International Data Transfer Addendum issued by the Information Commissioner. We will send you a copy of these safeguards if you ask.

Some of our group leads work from outside the UK. Where a lead works from a country that UK law does not recognise as giving adequate protection, we sign the International Data Transfer Agreement issued by the Information Commissioner with them, after a transfer risk assessment, before they get any of your data. If you want to know which countries, or want a copy of this safeguard, email us.

The other AI services and our cloud storage may store and process data outside the UK. When one does, we use a transfer that UK law approves: a country the UK recognises as giving adequate protection, a US organisation certified under the UK Extension to the Data Privacy Framework, or the International Data Transfer Agreement or Addendum issued by the Information Commissioner. We will send you a copy of the safeguard if you ask.

How long we keep it

• Your place: what you bought, with the records of your purchase, for six years after the end of our financial year in which you bought. The rest of the record of your place (your country, your group, its lead, your call time, the type of business you told us, your answers to the kick-off questions and whether you joined each call): until one year after your group’s last call.
• The recordings: a group’s calls until 90 days after the group’s last call, and an Inner Circle cohort’s monthly group calls and its members’ one-to-one calls until 90 days after its last monthly group call. Then we delete them from our call recorder and from our own storage. You can watch your group’s recordings until then.
• The transcripts and summaries: for two years after your group’s last call (for an Inner Circle cohort, its members’ one-to-one calls included, after its last monthly group call). Then we delete them from our call recorder and from our own storage. If you ask, we take your name out of them before then.
• Your questions for the monthly group calls: for two years after your cohort’s last monthly group call, as for the transcripts. Then we delete them. If you ask, we take your name out of them before then.
• The community: we have set the community platform to delete messages and files two years after they are posted. When your group’s channel closes, 30 days after the end of week 6, we ask Viktor’s provider to delete what Viktor holds from that channel.
• Viktor: its provider keeps what Viktor holds while our account with it runs, deletes what we ask it to delete, and deletes the rest within a month after our account ends.
• Introductions: the record of an introduction for six years after the end of our financial year in which we make the last payment that relates to it, or for one year after the introduction if no work follows. A note that you do not want to hear about further help: for as long as we run the course, so that nobody asks you again.

Your rights, and how to complain, are as the section Course buyers sets out.

Affiliates

This section is for the people who join our affiliate programme and recommend the Scale at Speed course in return for a commission, under our affiliate terms. Do Your Bit Limited is the data controller, as it is for course buyers.

What we collect

• Your affiliate account: your name and email address, and an online payment address if you add one, which we do not use because we pay by bank transfer. Our course platform holds the account, with the links or code we give you, the number of clicks on your links, and the sales and commissions credited to you.
• For paying you: your legal name, the country where you or your business are based, your bank details and any invoice you send us. We cannot pay your commission without them.
• Your emails with us: what you write to us and our replies.

When you sign in to your affiliate account on the course site, the cookies described under Cookies on the course site apply.

Why we use it, and the lawful basis

• Running the programme and paying you. Crediting sales to you, working out and paying your commission, telling you about the programme and answering your questions. Our course platform can also email you each time a sale is credited to you; you choose whether it does in your affiliate settings. Lawful basis: the contract with you if you are an affiliate in your own name, or our legitimate interest in carrying out the contract with your organisation if you act for one.
• Keeping the records the law requires. Our accounting and tax records of each commission and payment. Lawful basis: legal obligation.

Who we share it with

• Our course platform holds your affiliate account for us.
• Our bank receives your name and bank details with each payment.
• Our accounting software holds our accounts, including our record of each payment to you.
• Our accountants and HMRC, to keep our accounts and meet our tax duties.

Our course platform and our accounting software store and process data outside the UK. The section Transfers outside the UK, under Course buyers, explains the safeguards.

How long we keep it

• The records of your commissions and payments, with your name and payment details: six years after the end of our financial year in which we paid you. Tax law requires this.
• Your affiliate account: while you are an affiliate. When you leave, we keep a copy of the record of your commissions and payments with our accounts, and then delete the account.
• Your emails with us: two years after the last one, unless they belong with those records.

Your right to object. Where we rely on our legitimate interests, you can object at any time, on grounds relating to your situation, and we will stop unless we have compelling grounds to continue or need the data for a legal claim. Your other rights, and how to complain, are the same as for course buyers (see above).

Changes

We’ll update this page if anything material changes and note the revision date at the top.