Effective date: 24 October 2025
Last updated: 24 October 2025
Online Success Model (“we,” “us,” “our”) operates the website at https://www.onlinesuccessmodel.com and related services (collectively, the “Service”).
Data Controller (UK/EU): Online Success Model
Contact (privacy): [email protected]
Postal: Online Success Model, 18 Harkers House, Knottingley, West Yorkshire, WF11 8DN, UK
UK/EU Representative (if applicable): Richard Fairbairn, Online Success Model, 18 Harkers House, Knottingley, West Yorkshire, WF11 8DN, UK — [email protected]
Data Protection Officer (if appointed): Richard Fairbairn — [email protected]
This policy explains what data we collect, how we use it, and the choices you have. We comply with the UK GDPR, EU GDPR (where applicable), and the Data Protection Act 2018. For California residents, we include CPRA disclosures in Section 15.
This policy covers personal data we process when you:
Visit our sites or landing pages
Create an account, purchase, or redeem offers
Subscribe to emails or downloads
Participate in webinars, promotions, or affiliate programs
Interact with our customer support or social channels
Use our SaaS tools, training portals, and membership areas
Identity & contact: name, email, phone, billing/shipping address, company, job role
Account: username, password, profile info
Payments: transaction details via our processors (we do not store full card numbers)
Content: messages to support, form entries, survey responses, uploaded files
Marketing choices: newsletter opt-ins, preferences, consent records
Device/usage: IP address, browser, device type, OS, referring URLs
Site activity: pages viewed, links clicked, time on page, error logs
Cookies & similar tech: pixels, web beacons, local storage (see Section 8)
Payment processors: payment status, limited billing data
Email/CRM platforms: subscription status, engagement metrics
Analytics/ads: aggregate or pseudonymous audience data
Affiliates & partners: referral info, conversion data
Social platforms: your public profile (if you connect or interact)
Provide the Service & fulfill contracts (Art. 6(1)(b)): account creation, access to content/software, order processing, customer support.
Improve and secure the Service (legitimate interests, Art. 6(1)(f)): debugging, analytics, preventing fraud/abuse, QA.
Marketing with consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f)): newsletters, product updates, promotions, webinars. Opt out anytime.
Legal compliance (Art. 6(1)(c)): tax/audit, regulatory obligations, record retention.
Vital/public interest (rare): safety, security incidents.
Manage accounts and deliver purchased or free resources
Send transactional messages (receipts, access details, service notices)
Provide support and handle inquiries
Personalize content, recommendations, and onboarding
Measure performance (campaigns, funnels, user engagement)
Run promotions, giveaways, referral or affiliate programs
Detect, prevent, and respond to fraud, abuse, or security threats
If our tools use AI to generate content or insights, we may process inputs (prompts, uploaded content) and outputs to operate the feature, ensure safety, and improve quality. We do not sell your personal data, and we do not use AI outputs to make decisions with legal or similarly significant effects without human involvement.
Payments are handled by third-party processors (e.g., Stripe, PayPal, or platform marketplaces). We receive payment confirmation and limited billing info. Card data is processed under PCI-DSS by those providers.
We use:
Strictly necessary cookies: core site functionality, security
Performance cookies: analytics and diagnostics
Functionality cookies: preferences (language, region)
Marketing/advertising cookies: retargeting, conversion tracking
You can manage cookies via your browser settings and our on-site cookie controls (where available). Disabling some cookies may impact functionality.
Optional cookie table
Cookie Name | Type | Purpose | Duration | Provider
We may use analytics (e.g., Google Analytics) and advertising platforms (e.g., Meta, Google Ads) for measurement and interest-based ads. These services may set cookies or read device IDs. Adjust ad preferences in your platform accounts and browser. Google provides an opt-out add-on for Analytics.
We share data with:
Service providers/processors: hosting, email/CRM, analytics, support, payments, webinar platforms, fulfillment, anti-fraud
Affiliates/partners: attribution, commission tracking, joint promotions (limited data)
Professional advisors & authorities: legal, tax, compliance when required
Business transfers: in a merger, acquisition, or asset sale, data may transfer with the business
Processors are required to protect data and act only on our instructions.
Your data may be processed outside the UK/EU. Where we transfer data internationally, we use lawful safeguards such as the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or adequacy decisions.
We keep personal data only as long as necessary for the purposes set out in this policy:
Accounts & purchases: while your account is active and for up to 6 years after closure for legal/audit purposes
Marketing records: until you opt out or after 24 months of inactivity
Support tickets: typically 24 months
We anonymize or securely delete data once retention periods expire.
You have the right to access, rectify, erase, restrict or object to processing (including direct marketing), and data portability. Where processing is based on consent, you can withdraw it at any time. You can lodge a complaint with a supervisory authority (e.g., the UK ICO: ico.org.uk).
To exercise rights, contact [email protected]. We may need to verify your identity.
Our Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate action.
Categories collected (past 12 months): Identifiers (e.g., name, email, IP), commercial information (purchases), internet activity (usage data), geolocation (approximate), inferences (preferences).
Sources: You, your devices, service providers, partners.
Business purposes: As described in Sections 4–5.
Sharing/selling: We do not sell personal information for money. Some advertising/analytics may be considered “sharing.” Opt out via cookie controls or email [email protected] with subject “CPRA Opt-Out.”
Rights: Know/access, correct, delete, opt-out of sharing, limit use of sensitive information (we do not use sensitive personal information to infer characteristics), and non-discrimination. Submit requests at [email protected]. We will verify requests.
We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and monitoring. No method of transmission or storage is 100% secure; we work to minimize risk and respond to incidents promptly.
Our Service may link to third-party sites with their own privacy practices. We are not responsible for those sites.
We may update this policy from time to time. Material changes will be posted on this page with a new “Effective date.” Continued use of the Service after changes constitutes acceptance.
Questions, requests, or complaints:
Email: [email protected]
Postal: Online Success Model, 18 Harkers House, Knottingley, West Yorkshire, WF11 8DN, UK