Privacy Policy
Effective date: [EFFECTIVE DATE]
1. Who we are
FutureInReach is run by [BUSINESS NAME] (“FutureInReach”, “we”, “us”), [ADDRESS]. We’re responsible for the personal information described in this policy and are the “controller” for the purposes of the EU and UK GDPR. Contact us about privacy at [CONTACT EMAIL].
FutureInReach provides practical guides (“Reach Packs”), printable prompt cards, email lessons and links to AI coaches that adults can use to do everyday tasks with AI tools. FutureInReach is for adults aged 18 and over.
2. The short version
- We collect only what we need to send you packs, run your account or purchase, and improve FutureInReach.
- We don’t sell your personal information, and we don’t share it for cross-context behavioural advertising.
- We can’t see what you type into Google Gemini or any other AI tool. Those conversations are handled by the AI provider under its own privacy terms.
- Never paste sensitive or other people’s personal information into an AI tool. Every pack tells you what to leave out.
- You can ask to access, correct or delete your information at any time: email [CONTACT EMAIL].
3. Information we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Contact details | First name, email address | You, through our sign-up form |
| Profile and survey answers | Type of work, country, phone type, AI experience, confidence rating, a task you’d like help with, whether you have children at home who use AI (yes/no only), interest in group sessions, and whether you’re happy to be contacted for a chat | You, through our sign-up and feedback forms (all optional except name, email and consent) |
| Purchase information | Name, email, country, what you bought, amount, date, refund status. Card details are collected and held by our payment provider; we don’t see or store your full card number | You and our payment provider |
| Communications | Emails and messages you send us; interview notes if you agree to a chat | You |
| Email engagement | Whether you opened an email or clicked a link | Our email provider |
| Website usage | Pages visited, referring site or ad campaign (e.g. UTM tags), approximate location from IP, device and browser type | [ANALYTICS TOOL] and our hosting provider |
We don’t ask for, and you shouldn’t send us, sensitive information (such as health information, racial or ethnic origin, religious beliefs or government identifiers). We don’t collect information about children. The Family Safe Setup content is written for parents and carers, and we don’t ask for children’s names, ages or details.
4. How and why we use it (and our legal bases)
| Purpose | Legal basis (EU/UK GDPR) |
|---|---|
| Sending the free packs and emails you asked for | Consent, and our legitimate interest in delivering what you requested |
| Selling and delivering paid products, processing refunds, keeping tax and accounting records | Performance of a contract; legal obligation |
| Answering your messages and support requests | Legitimate interests; contract (for customers) |
| Understanding which jobs and packs to build next, from survey answers and usage | Legitimate interests (improving our service); consent for optional survey questions |
| Measuring whether our ads and pages work (aggregate statistics) | Legitimate interests; consent where cookies or similar tech require it |
| Contacting you for a research chat, only if you said yes | Consent |
| Preventing fraud and abuse; enforcing our Terms; complying with law | Legitimate interests; legal obligation |
You can withdraw consent at any time (for example, by clicking “unsubscribe” in any email). This doesn’t affect processing that happened before you withdrew.
5. AI tools and FutureInReach coaches
Some packs link to AI coaches we’ve set up in Google Gemini (“Gems”) or suggest using other AI apps. When you open a helper or use an AI app, you use your own account with that provider (for example, Google), and your conversation is governed by that provider’s terms and privacy policy, not ours. We don’t receive, see or store what you type into those tools.
Because AI providers may store and review conversations, never paste into any AI tool:
- other people’s names, contact details, addresses or photos (customers, clients, residents, patients, colleagues, children)
- health, medical, disability, financial, bank, card, tax or government identification details
- passwords, access codes or security details
- confidential information belonging to your employer or clients, unless your employer has approved that tool for that use
6. Who we share it with
We use trusted service providers (“processors”) to run FutureInReach. They may handle your information only to provide their service to us:
| Provider | What they do for us |
|---|---|
| Carrd | Hosts our website and landing pages |
| Tally | Runs our sign-up, onboarding and feedback forms |
| Kit (ConvertKit) | Sends our emails and stores subscriber details |
| Notion | Hosts the published Reach Pack pages (we don’t put your personal information in Notion pages; any working notes are kept minimal) |
| Stripe and/or Gumroad | Process payments and refunds, and help prevent fraud |
| Google (Gemini) | Provides the AI coaches. You use these under your own Google account and Google’s terms; we don’t share your FutureInReach data with Google through them |
| Advertising platforms (e.g. Meta) | Show our ads. We measure results using campaign links and the platforms’ aggregate reports. [If you enable a pixel or similar tracking, describe it here and in section 8.] |
| Professional advisers and authorities | Accountants, lawyers, or authorities where required by law |
We don’t sell personal information and don’t “share” it (as California law defines that term) for cross-context behavioural advertising. If FutureInReach is sold or restructured, information may transfer to the new owner under this policy, and we’ll tell you.
7. International transfers
We’re based in Australia, and our providers may store or process information in other countries, including the United States, the European Union and elsewhere. Where EU or UK law requires it, we rely on appropriate safeguards such as adequacy decisions or the European Commission’s Standard Contractual Clauses (and the UK Addendum) included in our providers’ data processing terms. Where Australian Privacy Principle 8 applies, we take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles. Contact us for more information about these safeguards.
8. Cookies and analytics
Our website uses only the cookies and similar technologies needed to run the site and forms, plus [ANALYTICS TOOL] to understand visits in aggregate (e.g. page views and which campaign link brought you). [We don’t use advertising cookies or tracking pixels. / If you add the Meta Pixel or similar: “With your consent, we use the Meta Pixel to measure ad results. You can change your choice at any time via [cookie settings link].”] Embedded forms and payment pages (Tally, Stripe, Gumroad) may set their own cookies under their own policies. You can block or delete cookies in your browser settings; some features may then not work.
9. How long we keep it
- Email subscribers: until you unsubscribe, then deleted or anonymised within [90] days (we may keep a minimal suppression record so we don’t email you again).
- Survey and form answers: up to [24] months, then deleted or anonymised.
- Purchase and refund records: as long as tax and accounting laws require (often 5–7 years).
- Interview notes: up to [12] months, then deleted.
- Support emails: up to [24] months after the conversation ends.
10. How we protect it
We use reputable providers, strong unique passwords and two-factor authentication on our accounts, limit access to the founder and any authorised helper, and collect as little as possible. No method of transmission or storage is completely secure, but we’ll act promptly and notify you and regulators where the law requires if a data breach is likely to cause serious harm.
11. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy (including in a portable format)
- correct inaccurate information
- delete your information
- object to or restrict certain processing, including direct marketing (always honoured)
- withdraw consent at any time
- opt out of the sale or sharing of personal information and of targeted advertising (we don’t do either)
- not be discriminated against for using your rights
- complain to a privacy regulator
Who these apply to: Everyone.
We give these rights to all users, wherever they live, even where a law doesn’t strictly require it.
How to make a request: Email [CONTACT EMAIL] with the subject “Privacy request”. We may need to confirm your identity (usually by replying from the email address we hold). We’ll respond within one month (EU/UK), 45 days (California) or 30 days (Australia), and usually sooner. You may use an authorised agent where the law allows; we may ask for proof of their authority. Requests are free unless they’re clearly unfounded or excessive.
Complaints: If you’re unhappy with our response, you can complain to your local regulator, for example: the Office of the Australian Information Commissioner (oaic.gov.au); the UK Information Commissioner’s Office (ico.org.uk); your EU/EEA data protection authority; or the California Privacy Protection Agency (cppa.ca.gov). We’d appreciate the chance to fix things first.
12. Region-specific information
Australia. We handle personal information in line with the Australian Privacy Principles. You can ask to access or correct your information and complain as described above. You can deal with us anonymously or under a pseudonym where practical (for example, by reading free pack pages without signing up).
EU/EEA and UK. Our lawful bases are listed in section 4. [EU REPRESENTATIVE: name and contact, if required.] [UK REPRESENTATIVE: name and contact, if required.] We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.
California and other US states. In the past 12 months we have collected the categories listed in section 3 (identifiers, commercial information, internet activity, approximate geolocation, and inferences from survey answers), for the purposes in section 4, from the sources in section 3. We disclose them to the service providers in section 6 for business purposes. We don’t sell or share personal information, we don’t knowingly collect information from anyone under 16 (or under 18), and we don’t use or disclose sensitive personal information for purposes that require a right to limit. We honour Global Privacy Control signals where technically possible.
13. Children
FutureInReach is not directed to, and is not intended for, anyone under 18. We don’t knowingly collect personal information from children. Our sign-up form asks you to confirm you’re 18 or over. Family Safe Setup content is guidance for parents and carers only. It doesn’t involve children creating accounts or giving us any information. If you believe a child has given us personal information, contact [CONTACT EMAIL] and we’ll delete it.
14. Changes to this policy
We may update this policy as FutureInReach changes or laws change. We’ll post the new version here with a new effective date and, for significant changes, tell subscribers by email.
15. Contact
[BUSINESS NAME], [ADDRESS]. Email: [CONTACT EMAIL].