Privacy Policy

Who we are

Inclusive Business Growth Planner (First Edition, 2027) is sold under the Elaine Hughes brand and operated by Elaine Hughes Consultancy Ltd, the data controller for the information described here.

Elaine Hughes Consultancy Ltd, Company No. 13411137, Registered in England and Wales. Registered office: Flat A, 80 Falkland Road, London, N8 0NP, United Kingdom

Privacy questions and requests: elaine@elainehughes.co.

What we collect

Account details: your email address, your name if you give it, and the date your account was created. Sign-in is by email and a verification code.

Your business profile: business name, type, sector, what you sell, who you serve, your values and your growth objective, plus a logo if you upload one.

Financial planning figures you enter yourself: revenue targets and actuals, sales you record, expenses, products and prices, and any owner payments you log.

Your planning content: goals, monthly plans, notes, diary tasks, growth card progress, content drafts, accessibility statement text, and any ideas you save in the Ideas Lab together with their AI reviews.

Access and payment records: what you bought, the amount, the dates your access runs, and the payment reference from Stripe. Card details are entered on Stripe and never reach this app.

Marketing consent records: whether you opted in, the exact wording you were shown, the wording version, the date and time, and where the choice was made.

Support messages you send us, and the email address you send them from.

Why we use it, and our lawful basis

To provide the planner you have paid for, to keep your saved work available, and to confirm your access: necessary to perform our contract with you.

To take payment and keep accurate financial records: necessary to perform our contract, and to meet our legal and accounting obligations.

To keep the service secure, prevent abuse of the AI allowances, and investigate faults: our legitimate interests in running a safe, working service.

To send optional marketing emails: your consent, which you can withdraw at any time. We do not rely on soft opt-in or treat a purchase as consent.

Lawful basis wording is stated for transparency and is to be confirmed in legal review before it is relied on.

Payments

Card payments are processed by Stripe. Your card number, expiry and security code are entered on Stripe’s own checkout page and are not received or stored by this app.

We receive from Stripe a confirmation that a payment succeeded, the amount, the currency, the email address you gave at checkout, and a payment reference. We use these to grant access and to handle refunds.

Stripe’s own privacy notice governs the information it processes as a payment provider.

Hosting, accounts and sign-in

This app is built and hosted on the Base44 platform, which provides the database, file storage, account records, authentication and the sending of verification codes and service emails.

Sign-in uses your email address and a verification code, or a supported third-party sign-in if you choose it. A sign-in token is kept in your browser’s local storage so you stay signed in; it is removed when you sign out.

Your planner records are readable only by your own account. Administrators can manage access records but cannot sign in as you, and cannot browse your planning content.

AI features

Some features use an AI model provided through the Base44 platform: adapting growth cards to your business, drafting content in the Content Studio, and reviewing an idea in the Ideas Lab.

When you use one of these features, the text needed for that request (for example your business description and the card, prompt or idea concerned) is sent to the AI provider and the generated text is returned and saved to your account. You choose when to run one, and nothing is sent in the background.

Output is illustrative. It is not financial, legal, tax or market research, and it should be checked before you rely on it. We do not use your content to make automated decisions about you, and using these features is optional.

Whether the AI provider retains a request for its own service purposes is set by that provider and is to be confirmed before this policy is relied on.

Marketing emails and your consent

Promotional email is optional. The consent box is unticked by default, and buying the planner never opts you in.

When you make a choice we record the exact wording you were shown, the version of that wording, the date and time, and where you made the choice. You can change or withdraw it at any time in My Account; each change is recorded the same way.

We are not sending promotional email at present, and no external email marketing platform is connected to this app yet. If one is connected, consent records will be synchronised to it and this policy will be updated first.

Service emails your account needs, such as a verification code, purchase confirmation or an access notice, are not marketing and are sent regardless of your marketing choice.

Cookies, analytics and advertising

This app does not set advertising or analytics cookies, and no advertising pixel or session-recording tool is installed in it today.

The only browser storage used is what the app needs to work: the sign-in token, and a small local flag so a welcome message is not shown again.

If advertising or analytics tools are added later, this policy will be updated and consent requested before any non-essential cookie or pixel runs.

Who we share it with

Stripe, to take payments and process refunds. Base44, as the hosting and application platform. Email delivery for verification codes and service emails.

We do not sell your information and we do not share your planning content with other customers.

Where a provider processes data outside the UK, appropriate safeguards under UK data protection law are required. The specific providers, locations and transfer safeguards are to be confirmed and listed here before this policy is relied on.

How long we keep it

Your account and planner content are kept while your account exists and your access is live. When the 2027 edition ends on 5 January 2028 your saved work is kept, not deleted, so you can return to it or ask for a copy.

Payment and access records are kept as long as needed for accounting, tax and consumer-law purposes.

Specific retention periods are to be confirmed with legal and accounting review. They are not set out here rather than guessed.

Deleting your information

You can request account closure or deletion of your personal data from My Account. A request is reviewed by a person and does not change or delete anything on its own.

Some records, such as payment records, may need to be kept for a period after closure where the law requires it. We will tell you what is kept and why when we deal with your request.

Your rights

You have the right to be informed, to ask for a copy of your information, to have it corrected, to have it erased, to restrict or object to how it is used, and to receive it in a portable format.

Where we rely on consent, you can withdraw it at any time without affecting anything done before you withdrew.

To use any of these rights, email elaine@elainehughes.co or use My Account. A person will reply.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk.

Changes to this policy

If the way the planner handles information changes, this policy is updated and the date below changes with it.

Contact

Questions about this policy: elaine@elainehughes.co.

Operated by Elaine Hughes Consultancy Ltd, Company No. 13411137, Registered in England and Wales. Registered office: Flat A, 80 Falkland Road, London, N8 0NP, United Kingdom