BIZOACH Privacy Policy

The information we collect depends on how you use BIZOACH.

Account and profile information, such as name, email address, country, age or age range where needed, login information, profile details and preferences.

Business and project information you choose to provide, such as business name, industry, stage, goals, customers, plans, challenges, financial or operational information and progress.

BIZOACH IQ and assessment information, including answers, scores, capability indicators, recommendations and changes over time.

Learning and credential information, such as enrolments, progress, assessment results, competencies, certificates and verification records.

AI and Business Memory information, including prompts, conversations, documents, goals, decisions, plans, actions, results and information you choose to save or that is retained to provide continuity.

Execution information, such as objectives, initiatives, tasks, ownership, milestones, outcomes and progress.

Community and mentorship information, such as profile information, interests, interactions, bookings, messages or session-related records where those features are used.

Transaction information, including purchases, subscription status, billing history, currency, refunds and payment-related identifiers. Complete card details are generally handled by our payment provider rather than stored by BIZOACH.

Technical and usage information, such as IP address, device and browser information, login activity, pages and features used, timestamps, diagnostic logs, security events and cookie or similar technology data.

Communications, including support requests, feedback, survey responses and correspondence with us.

Institutional programme information where you participate through an organisation, which may include enrolment, workplace, programme, learning, skills, activity, evidence or reporting information relevant to that programme.

Create, authenticate and manage accounts.

Provide BIZOACH features and maintain continuity across your use of the platform.

Understand your stated business context and personalise recommendations, learning, tools and next actions.

Operate BIZOACH IQ, assessments, AI Advisor, Business Memory, Learning Pathways, Execution and other product features.

Process subscriptions, purchases, credentials and other transactions.

Provide support, service notices and account communications.

Protect users and the platform, prevent fraud and abuse, and investigate security incidents.

Measure performance, troubleshoot problems and improve BIZOACH.

Develop and test new features using appropriate safeguards.

Run communities, mentorship and institutional programmes where applicable.

Send marketing where permitted by law and according to your choices.

Meet legal, regulatory, tax, accounting and compliance obligations and establish or defend legal claims.

Under UK data protection law, we must have a lawful basis for each use of personal information. Depending on the activity, we may rely on:

Contract - where processing is necessary to provide a service you request or take steps at your request before entering a contract.

Legitimate interests - where processing is reasonably necessary to operate, secure, improve or understand BIZOACH, and those interests are not overridden by your rights and interests.

Consent - where you have a genuine choice and we ask you to agree to a specific use, such as certain marketing, optional cookies or other optional processing.

Legal obligation - where we must process information to comply with law.

Vital interests or public task - only where those bases genuinely apply to a particular situation.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not make earlier lawful processing unlawful.

BIZOACH uses AI and other computational systems to provide business guidance, analysis, recommendations, summaries, learning suggestions, assessments and execution support. These systems may use information you provide together with information generated through your use of BIZOACH to make the service more relevant to your context.

AI outputs and BIZOACH IQ are designed to support people, not replace human judgement. Unless we tell you otherwise for a specific feature, BIZOACH does not use solely automated processing to make decisions about you that produce legal or similarly significant effects.

If we introduce processing that has legal or similarly significant effects, we will provide the information and safeguards required by applicable law.

BIZOACH may use specialist technology providers to process information needed to deliver AI-powered features. We require service providers to handle information under appropriate contractual and security arrangements.

We do not treat your private business content as public information merely because you submit it to an AI-powered feature. Whether particular data may be used to improve BIZOACH or an underlying service depends on the feature, configuration, lawful basis and notices presented to you. Where consent or another specific choice is required, we will provide that choice.

We aim to minimise the information sent to service providers and to use business or API services with appropriate data protections where reasonably available.

BIZOACH is available to a broad audience and may be accessed by younger users. Children deserve additional privacy protection, so we design relevant experiences with age, risk and best interests in mind.

Where we need age information to apply legal or safety protections, we may ask for an age, date of birth, age range or another proportionate form of age assurance. We do not use age-assurance information for unrelated purposes.

If we rely on consent to provide an online service directly to a child in the United Kingdom, a child aged 13 or over may generally provide their own consent under UK data protection law. For a child under 13, we will seek authorisation from a person with parental responsibility where the law requires it and take reasonable steps to verify that authorisation.

We may use another lawful basis instead of consent where it is appropriate and lawful. We apply additional care to profiling, marketing, sharing, geolocation and other processing that may create higher risks for children.

Where appropriate, we provide shorter, age-appropriate explanations at the point information is collected or a feature is activated. Parents, guardians and institutions may contact us about a child's privacy rights, but children also have data protection rights in their own name.

Features that expose information to other users or third parties should use privacy-protective defaults for children unless there is a compelling and lawful reason otherwise.

We may share personal information only where reasonably necessary with:

Cloud hosting, infrastructure, security, authentication and technical service providers.

AI and machine-learning service providers used to deliver relevant features.

Payment providers used to process subscriptions and purchases.

Email, communications, analytics, customer-support and operational service providers.

Professional advisers such as lawyers, accountants, auditors and insurers where necessary.

Mentors, programme partners or institutions where sharing is necessary for a service or programme and has been appropriately explained.

Authorities, regulators, courts or other parties where disclosure is required or permitted by law.

A buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

BIZOACH does not sell personal information for money.

When you use BIZOACH through a university, employer, government body, development organisation or other institution, that organisation may be a controller of some programme information and BIZOACH may act as its processor. For other activities, BIZOACH may be an independent controller. The position depends on who decides why and how the information is used.

Programme-specific notices may explain what information the institution can access, the purpose of reporting, retention periods and any additional rights or restrictions.

BIZOACH is headquartered in the United Kingdom and serves users internationally. Some service providers may process information in other countries. Where UK data protection law requires safeguards for an international transfer, we use an available lawful mechanism, such as UK adequacy regulations, approved contractual safeguards or another permitted transfer mechanism.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing the service, maintaining security, resolving disputes and meeting legal, accounting or regulatory obligations.

Different records have different retention periods. Account and Business Memory information may be retained while an account is active and for a limited period afterwards; transaction and compliance records may need to be kept longer where law requires it. We delete or anonymise information when it is no longer needed, subject to backup cycles and lawful retention requirements.

We use technical and organisational measures designed to protect personal information, including access controls, authentication, secure infrastructure, monitoring and other safeguards appropriate to the nature and risk of the information. No online system can be guaranteed to be completely secure.

Depending on where you live, you may have rights over your personal information. Under UK data protection law these can include rights to access information, correct inaccurate information, request deletion, restrict processing, receive certain information in a portable format, object to certain processing, withdraw consent and receive safeguards in relation to certain automated decisions.

To exercise a privacy right, contact hello@bizoach.com. We may need to verify your identity before completing a request. We will not discriminate against you for exercising a legal privacy right.

If you are in the UK, you also have the right to complain to the Information Commissioner's Office (ICO). We would appreciate the opportunity to address your concern first, but you do not have to contact us before approaching the ICO.

We may send service communications that are necessary for your account. Marketing communications are handled separately. Where consent is required, we will ask for it. You can unsubscribe from marketing using the link in the message or by contacting us. Unsubscribing from marketing does not stop essential service messages.

We use cookies and similar technologies as described in our Cookie Policy. Technologies that are strictly necessary may operate without consent where the law allows. For non-essential technologies, such as certain analytics or advertising technologies, we will request consent where required and provide controls to change your choices.

We may update this Policy when BIZOACH, our technology or applicable law changes. We will update the date at the top and, where a change materially affects your privacy, take reasonable steps to bring it to your attention.

Privacy questions and requests can be sent to hello@bizoach.com. You can also write to BIZOACH LIMITED, 1 Mayfair Place, London, England, W1J 8AJ, United Kingdom.