Beyond The VA Community

Privacy Policy

Effective from July 2026

1. Who We Are

Beyond The VA is a trading name of TU Marketing, registered in England and Wales. In this policy, “we”, “us” and “our” refer to TU Marketing.

We are the data controller for the personal data collected through the Beyond The VA Community, website and associated communications.

ICO Registration Number: ZC175330

Contact: [email protected]

2. What Data We Collect

We collect and process the following personal data:

• Full name

• Email address

• Payment information (processed securely via Stripe : we do not store your card details)

We do not collect sensitive personal data. We do not collect data from anyone we know to be under the age of 18.

3. How We Use Your Data

We use your personal data for the following purposes:

• To process your membership sign-up and payments

• To provide access to the Beyond The VA Community and its benefits

• To send you membership-related communications (session reminders, updates, announcements)

• To send you our free newsletter, where you have subscribed to this separately

• To respond to any queries or support requests you raise

Our lawful basis for processing is:

• Contract performance : processing your membership and delivering the service you have paid for

• Legitimate interests : communicating with members about their membership

• Consent : for newsletter subscription, where applicable

4. Third Party Services

We use the following third party platforms to deliver our service. Each acts as a data processor on our behalf and is bound by appropriate data processing agreements:

GoHighLevel (GHL)

Our CRM, membership platform and email delivery tool. Your name and email are stored within GHL to manage your membership and communications. GHL is a US-based service. Data transfers are covered by standard contractual clauses in compliance with UK GDPR requirements.

Stripe

Our payment processor. Stripe handles all payment transactions securely. We do not have access to your full card details. Stripe is a US-based service operating under its own privacy policy and standard contractual clauses. You can view Stripe’s privacy policy at stripe.com/gb/privacy.

Zoom

Used to host live coaching sessions and group calls. If you attend a live session, your name and any information you share during the call may be visible to other participants. Sessions are recorded; recordings are stored within the community platform and accessible to members only. Zoom is a US-based service. Data transfers are covered by standard contractual clauses.

5. International Data Transfers

GoHighLevel, Stripe and Zoom are based in the United States. Where your data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, including reliance on standard contractual clauses approved by the ICO.

6. How Long We Keep Your Data

We retain your personal data for as long as your membership is active and for a period thereafter as follows:

• Payment records: up to 6 years after your membership ends, in line with the Limitation Act 1980

• Name and email address: 2 years after your membership ends, unless you have an active newsletter subscription, in which case your data is retained for the duration of that subscription

After the relevant retention period, your data will be securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• The right to access the data we hold about you

• The right to correct inaccurate data

• The right to request deletion of your data (subject to our legal retention obligations)

• The right to restrict or object to processing

• The right to data portability

• The right to withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss or disclosure. Payment data is handled entirely by Stripe and is never stored on our systems.

9. Changes to This Policy

We may update this privacy policy from time to time. Where changes are material, we will notify you by email with 30 days’ notice. The current version will always be available at beyondtheva.co.uk.

10. Contact

For any questions about this privacy policy or how we handle your data:

Beyond The VA Team

Email: [email protected]

Website: beyondtheva.co.uk