Privacy Policy

I'm Carly Docking, a sole trader based in the United Kingdom, trading as The Curious Collective. This website (carlydocking.com) is where I take applications for the Freedom by Design Group Coaching Programme. I am the data controller for the personal data described in this policy, which explains how I handle your data in line with the UK GDPR and the Data Protection Act 2018. You can contact me about anything in this policy at hello@thecuriouscollective.net.

Email address: if you enter your email in the pop-up before the application form, I store it so I can follow up if you don't finish applying.

Application information: your name, email address, city, country, and your answers to the application questions, including details about your business idea, your goals, and your availability for in-person meet-ups.

Call bookings: if you book a call with me, Calendly collects your name, email address and the time you choose.

Usage data: cookies and analytics data (via Google Analytics) about how you use the site, collected only if you accept cookies via the cookie banner.

I do not take payment through this website. If you are accepted onto the programme, payment is arranged separately and processed by Stripe; your card details never touch my systems.

To review your application and decide whether the programme is a fit; to contact you about your application, including if you started but didn't finish it; to arrange and hold a call with you; to send you emails about the programme and, if you've agreed, my wider mailing list; to understand how the site is used and improve it; and to meet legal obligations such as tax record-keeping.

I rely on: contract and steps taken at your request before a contract (reviewing your application and arranging a call), consent (marketing emails and analytics cookies, both of which you can withdraw at any time), legitimate interests (following up on unfinished applications, improving the site, preventing misuse), and legal obligation (financial records).

I use trusted service providers to run this site: Supabase (secure storage of applications and email addresses), Resend (sending me a notification when an application arrives), MailerLite (email), Calendly (call bookings), and Google Analytics (site usage). Each processes data on my behalf under their own security and privacy commitments. Some of these providers process data outside the UK; where they do, transfers are protected by appropriate safeguards such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses. I do not sell your data, ever.

Applications: if you join the programme, for the duration of the programme and up to 2 years afterwards so I can support you and keep a record of our work. If you don't join, up to 12 months so I can offer you a place in a future group, unless you ask me to delete it sooner.

Pop-up email addresses: up to 12 months, or until you ask me to delete it.

Email marketing data: until you unsubscribe.

Payment records: 6 years, as required by UK tax law.

Analytics data: up to 14 months.

You have the right to access your data, correct it, delete it, restrict or object to how I use it, take it elsewhere (portability), and withdraw consent at any time. To exercise any of these, email hello@thecuriouscollective.net and I'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how I've handled your data.

This site uses essential cookies (needed for the site to work) and, with your consent, analytics cookies (Google Analytics). You can accept or decline analytics cookies via the banner, and change your mind by clearing your browser cookies.

If I make significant changes, I'll update the date at the top and, where appropriate, let applicants and members know by email.