LEGAL INFORMATION
How Planning Unlocked Ltd collects, uses and protects personal data across our website, newsletter and course pathways.
Privacy Policy for Planning Unlocked Ltd
Last Updated: 17 June 2026
Planning Unlocked Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, subscribe to our newsletter, or purchase our courses.
For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Planning Unlocked Ltd.
1. The Personal Data We Collect
We collect and process different types of personal data depending on how you interact with our platform:
Identity and Contact Data: Your name and email address. This is collected when you sign up for our newsletter, contact us directly, or register for a course.
Financial and Transaction Data: Billing address, credit/debit card numbers, and transaction history.
Technical and Usage Data: IP address, browser type, operating system, and data regarding how you use our website.
Communications Data: Any records or notes generated if you email us directly at our support addresses.
2. How We Collect Your Data
We collect personal information through two primary pathways:
A. Direct Interactions (Information You Provide)
Direct Correspondence: When you email us directly at help@planningunlocked.com, we collect your email address and the contents of your message to answer your inquiry.
Newsletter Signup: When you subscribe to our marketing updates, you provide your name and email address directly into our sign-up forms.
B. Automated Technologies (Information Collected Automatically)
Infrastructure Logs: When you browse our site, our hosting infrastructure automatically registers basic technical traffic data to keep our systems secure.
3. Our Lawful Basis for Processing Data
Under the UK GDPR, we must have a valid legal reason to process your information. We rely on the following bases:
Consent: You have given us clear consent to process your personal data for a specific purpose, such as subscribing to our Mailchimp newsletter. You can withdraw this consent at any time.
Contractual Necessity: Processing is necessary to fulfil a contract we have with you, or to take steps at your request before entering into a contract, such as providing access to a course you purchased.
Legitimate Interests: Processing is necessary for our legitimate business interests, provided those interests do not override your fundamental privacy rights, such as optimising site performance or answering direct customer support emails.
4. Third-Party Data Processors and Service Providers
We do not sell your personal data. We share information only with trusted third-party service providers who help us run our business operations:
Hosting & Performance (Vercel Inc.): Our primary website is hosted on Vercel. Vercel provides infrastructure monitoring. Their integrated Web Analytics and Speed Insights collect anonymous telemetry data without using cookies or storing identifiable personal records.
Email Marketing (Mailchimp / Intuit Inc.): We use Mailchimp to manage our newsletter subscription list and distribute marketing emails. When you opt in, your contact details are securely transferred to Mailchimp in accordance with their privacy standards.
Course Delivery & Payments (Teachable Inc.): When you buy a course, you are redirected to our school platform powered by Teachable. For these transactions, Teachable acts as the Merchant of Record (MoR). Teachable directly collects your identity, account credentials, and billing data to process your payments and manage your student portal. Please review the Teachable Privacy Policy for details on their secure processing systems.
Consent Management (Cookiebot CMP): We use Cookiebot to manage cookie consent. Cookiebot securely anonymizes and logs your cookie choices to prove our legal compliance.
5. International Data Transfers
Some of our external third-party processors, such as Mailchimp, Vercel, and Teachable, are based outside the United Kingdom and the European Economic Area (EEA), primarily in the United States.
Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring that Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA) are implemented with the vendor to safeguard your personal privacy rights.
6. Data Retention: How Long We Keep Your Data
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including satisfying any legal, regulatory, tax, or accounting requirements.
Direct Email Enquiries: Retained for as long as necessary to fully resolve your query and maintain business continuity.
Newsletter Subscriptions: Retained until you click the "unsubscribe" link found at the bottom of any Mailchimp email we send you.
7. Your Legal Rights
Under UK data protection laws, you possess comprehensive rights regarding your personal data:
The right to access the personal records we hold about you.
The right to rectification if any data we hold is inaccurate or incomplete.
The right to erasure ("the right to be forgotten") under specific legal criteria.
The right to restrict or object to the processing of your data.
The right to data portability to move your data to another provider.
To exercise any of these rights, please contact us at help@planningunlocked.com.
If you believe we have not processed your data legally, you have the right to lodge a formal complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO) via their website: ico.org.uk.
The S&OP / IBP Maturity Assessment
1. What we collect
When you take our free S&OP / IBP maturity assessment, we collect:
- Your name, company name and email address
- The date you took the assessment
- Your answers to each of the 35 assessment questions
- The scores calculated from those answers, including your seven capability scores, your overall weighted score and your maturity level
- Whether you completed the assessment or stopped part way through
- Technical information about how you arrived: the web address you landed on, the campaign tracking parameters in that address, the site that referred you, and your browser type
- The date, time and IP address recorded when you gave your consent
Your answers are saved as you go, so that if you close your browser part way through you can pick up where you left off. This means we may hold a partial set of answers even if you do not finish.
2. Why we collect it, and on what basis
We use your name, company and email address to generate your personalised report and send it to you. We do this on the basis of your consent, which you give by ticking:
"I agree that Planning Unlocked Ltd may use the information I provide to generate and email my assessment report."If you also tick the separate optional box:
"I'd also like to receive occasional Planning Unlocked insights, practical planning tips and course updates. I can unsubscribe at any time."we will send you marketing emails on the basis of that separate consent. You do not have to agree to this to receive your report, and we record the two choices independently. You can withdraw marketing consent at any time using the unsubscribe link in any of our emails, or by emailing us — this does not affect your ability to download the report you already requested.
We use the campaign tracking and completion information on the basis of our legitimate interests, to understand which of our posts and channels reach people who find the diagnostic useful, and to improve the assessment itself.
3. Anonymised benchmarking
We produce aggregate statistics from completed assessments — for example, the average maturity score across all participants, or the proportion of organisations that rate themselves weakest in financial integration. We may publish these statistics and use them in articles, social media posts and course materials.
These statistics are anonymised and aggregated. They never identify you, your company, or any individual response, and we only publish figures drawn from a large enough group that no participant can be identified from them.
4. Who we share it with
We do not sell your information or share it for anyone else's marketing.
We use the following processors to run the assessment:
ProcessorPurposeWhere data is handledVercel Inc.Hosting the website and running the assessmentEU / USSupabase Inc.Storing your assessment record securelyEU / USResend (Plus Five Five, Inc.)Sending your report by emailEU / US
Each acts on our instructions under a data processing agreement. Where data is transferred outside the UK or EEA, that transfer is covered by Standard Contractual Clauses.
5. How long we keep it
- Your identifiable assessment record (name, company, email, answers and scores): 24 months from the date you took the assessment, or until you ask us to delete it, whichever comes first.
- Your PDF report: stored alongside your record for the same period, so that we can re-send it if you ask.
- Anonymised, aggregated statistics: kept indefinitely. Once your record is deleted or anonymised, the contribution it made to these totals cannot be traced back to you and cannot be removed from them.
6. Your rights
You can ask us at any time to:
- Send you a copy of the information we hold about you
- Correct anything that is wrong
- Delete your assessment record
- Stop sending you marketing emails
- Withdraw a consent you previously gave
Email hello@planningunlocked.com and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we have handled your information.
Cookies / local storage. The assessment stores two items in your browser's local storage — an assessment reference and a copy of your answers — so that you can resume if you close the page. These are not cookies and are not used for tracking or advertising. They can be cleared at any time through your browser settings.
8. Contact Details
For any questions regarding this Privacy Policy or our data management practices, please contact us:
Company Name: Planning Unlocked Ltd
Contact Email: help@planningunlocked.com
Registered UK Office Address:
Darland House,
44 Winnington St,
Northwich,
CW8 1AU