Privacy Policy

Last updated: 17th September 2026

This Privacy Policy explains how tomshooter.co.uk (“we”, “us”, “our”), operated by Tom Shooter, collects, uses, and protects your personal information when you visit this site, purchase a course, or otherwise interact with us.

1. Who We Are

Tom Shooter, operating tomshooter.co.uk, is the data controller responsible for your personal information under UK GDPR.

2. What Information We Collect

We may collect the following information:

  • Account details — name, email address, username, and password when you register or enrol in a course
  • Payment information — processed securely by PayPal; we do not store your card or bank details ourselves
  • Course activity — progress, quiz results, and completion status within courses you’re enrolled in
  • Contact details — if you email us or fill in a contact form
  • Technical data — IP address, browser type, and site usage data collected via cookies or analytics tools

3. How We Use Your Information

We use your information to:

  • Provide access to purchased courses and manage your account
  • Process payments and issue refunds where applicable
  • Communicate with you about your course, orders, or support requests
  • Send occasional marketing emails, where you’ve opted in (you can unsubscribe at any time)
  • Improve our site and course content
  • Meet legal and accounting obligations

4. Legal Basis for Processing

We process your data under the following legal bases: performance of a contract (delivering your course), consent (marketing emails), and legitimate interests (improving our services).

5. Sharing Your Information

We do not sell your personal information. We may share data with trusted third parties who help us operate the site, including:

  • PayPal — for payment processing
  • 123 Reg — for website hosting
  • Mailchimp — if you’re subscribed to our mailing list
  • Tutor LMS / WordPress — for course delivery, hosted on our own servers

These providers only process data as needed to deliver their service and are bound by their own privacy obligations.

6. Cookies

This site uses cookies to support login sessions, shopping cart functionality, and basic analytics. You can control cookies through your browser settings.

7. Data Retention

We retain your account and course data for as long as your account remains active, or as required to meet legal, accounting, or reporting obligations.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Object to or restrict certain processing
  • Withdraw consent for marketing at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at [your contact email].

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.

11. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, contact me here.