Privacy Policy

1. Who we are

Charter Mastery (“we,” “us,” “our”) provides online study methodology and career guidance products. This policy explains what personal information we collect, why, and what your rights are. We are based in the United Kingdom and process personal data in accordance with UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, contact us at haaris@chartermastery.com.

2. Information we collect

Information you give us directly:

  • Name and email address, when you purchase a product, sign up to our mailing list, or download a free resource

  • Payment information — handled entirely by Stripe, our payment processor. We never see or store your full card details ourselves.

Information collected automatically:

  • Usage data, browser type, and general location (e.g. country), via standard website analytics

  • We do not run advertising or retargeting pixels (e.g. Meta Pixel, Google Ads) on our site

Cookies: We use essential cookies needed for the website and checkout to function, and basic analytics cookies to understand how visitors use the site. We do not use cookies for advertising or cross-site tracking. You can disable non-essential cookies via the cookie banner on your first visit, or through your browser settings at any time.

3. How we use your information, and our lawful basis

Delivering a product you’ve purchased (course access, discount codes). Lawful basis: contract — necessary to provide what you bought.

Provisioning your access to our course content via Notion. Lawful basis: contract.

Sending you order confirmations and essential service updates. Lawful basis: contract.

Sending you marketing emails and newsletters. Lawful basis: consent (if you’ve opted in) or legitimate interest (if you’re an existing customer, under the “soft opt-in” rule). You can opt out at any time.

Site analytics, fraud prevention, and keeping our systems secure. Lawful basis: legitimate interest.

Complying with legal or tax obligations. Lawful basis: legal obligation.

You can withdraw consent or opt out of marketing at any time using the unsubscribe link in any email, or by contacting us directly.

4. How we share your information

We don’t sell your personal information. We share it only with the service providers who help us run Charter Mastery, each of whom is contractually required to protect your data and only use it for the purpose we specify:

  • Stripe — payment processing

  • Notion — hosting and delivering your purchased course content

  • GoHighLevel (GHL) — email communications and customer relationship management

  • Zapier/Make — automation that connects the above tools (e.g. provisioning your Notion access after purchase)

We may also disclose your information if required by law, or in connection with a sale or transfer of the business — in which case we’ll notify you.

5. International data transfers

Some of our service providers (including Stripe and Notion) may process or store data outside the UK, including in the United States. Where this happens, we rely on legally recognised transfer mechanisms (such as the UK’s data protection adequacy arrangements or standard contractual clauses) to keep your data protected to UK standards.

6. How long we keep your information

We keep your personal information for as long as needed to provide our services and meet legal obligations — generally:

  • Customer and purchase records: 6 years (to meet UK tax and accounting requirements)

  • Marketing list data: until you unsubscribe or request deletion

  • Website analytics: typically held in aggregate/anonymised form after 26 months

7. Data security

We take reasonable technical and organisational measures to protect your information, including relying on the security infrastructure of our service providers (Stripe, Notion, GHL), restricting access to personal data to what’s necessary, and reviewing our practices periodically. No method of transmission or storage is 100% secure, but we take this seriously.

8. Your rights

Under UK GDPR, you have the right to:

  • Access the personal information we hold about you

  • Correct inaccurate information

  • Request deletion of your information (subject to legal retention requirements, e.g. tax records)

  • Object to or restrict certain processing

  • Request a copy of your data in a portable format

  • Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us at haaris@chartermastery.com. If you’re unhappy with how we’ve handled your data, you also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).

9. Children’s privacy

Our products and website are not directed at, or intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We’ll post the updated version here with a new “last updated” date, and if a change is significant, we’ll make that clearer (e.g. via email or a notice on the site).