- Privacy Policy
What we do with your data, and the rights you have over it.
Written in plain English. Explains how we handle personal data under UK GDPR and the Data Protection Act 2018.
- CONTENTS
1. Who we are
Obsessed Ltd is the data controller for the personal data processing described in this policy, including data processed through this website and in connection with enquiries, referrals, Obsessed Ambassadors, client administration and Obsessed Ltd programmes and services. Where another Obsessed group company acts as controller for a separate service, its own privacy information applies. Professional accounting and tax processing by Obsessed Accounting Ltd is covered by the Obsessed Accounting Ltd Privacy Notice.
Registered office: 71-75 Shelton Street, London, WC2H 9JQ
Company number: 17143772
ICO data protection registration number: ZC153675
If you want to contact us about anything in this policy – how we use your data, your rights, or a complaint – email legal@obsessed.co.uk.
2. How to contact us about your data
If you want to ask about your data, exercise any of your rights under data protection law, or raise a concern about how we’ve handled your data, email legal@obsessed.co.uk.
If you’re not happy with how we respond, you can complain to the Information Commissioner’s Office (ICO) – the UK’s data protection regulator:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
3. What personal data we collect
We only collect what we need to do the thing you’re asking us to do. The detail below sets out what we collect, where it comes from, and what happens next.
When you sign up to be notified when our newsletter launches
If you submit your email on a newsletter signup form on this site, we collect:
- Your email address
When you book a free advisory session
The booking itself goes through Calendly. Calendly collects:
- Your first and last name
- Your email address
- Your phone number
- Your business name
- Your approximate annual turnover (a range)
- What you want from the call
- The date and time of your booking
When you contact us about selling your accountancy practice
If you fill in the form on /sell-your-practice, we collect:
- Your first and last name
- Your email address and phone number
- Your practice name
- Approximate annual turnover
- Approximate team size
- When you are thinking about selling
- Anything you choose to tell us upfront
Your submission is handled through HubSpot and used to assess and discuss a potential transaction with you. We treat sale enquiries confidentially and do not use the information for general marketing unless you have separately agreed to that. Access is limited to the people and service providers who reasonably need it for the enquiry and any resulting transaction process.
When you register interest as an investor
If you fill in the form on /investors, we collect:
- Your first and last name
- Your email address and phone number
- Your company or occupation
- The approximate amount you may consider investing
- What interests you about investing alongside Obsessed
Your submission is handled through HubSpot and used to assess your expression of interest, communicate with you about the registration and, where appropriate, carry out the eligibility and compliance steps required before any investment-specific information is provided. Access is limited to the people, advisers and service providers who reasonably need the information for those purposes.
When you use the general contact form
If you fill in the form on /contact, we collect:
- Your first and last name
- Your email address
- Your company name, if you choose to give it
- Your phone number, if you choose to give it
- The type of enquiry you are making
- Whatever you write in the message box
- The date and time you submitted it, and the IP address you submitted it from
Submissions are handled through HubSpot and routed to the appropriate person or team so we can respond to your enquiry and follow up where it makes sense.
When you send an accounting enquiry
If you use the quick-enquiry form on /accounting, we collect the contact detail you provide, your business type, what you need help with, your approximate annual turnover, your employee band and anything you choose to tell us about the work.
The enquiry is handled through HubSpot and routed to the Obsessed Accounting team so we can respond, scope the work and discuss a potential engagement. If you become an accounting client, professional onboarding and subsequent professional data processing are covered by the applicable engagement documents and privacy information supplied by Obsessed Accounting Ltd.
When you email us
If you email us at legal@obsessed.co.uk or any other address, we have your email address and whatever you’ve put in the email. We treat this as you giving us that information for the purpose of replying.
When someone refers you to Obsessed, or you join Obsessed Ambassadors
A person making a warm introduction may give us your name, business details, contact details and limited information needed to explain the introduction. Our referral forms require the person making the introduction to confirm that they have spoken to you about Obsessed, that you have agreed they may share your contact details with us, that you have authorised Obsessed to contact you using the contact method or methods recorded in the referral, and that you are expecting Obsessed to contact you about its services.
If you make a one-off referral, we process the information you provide about yourself and the referral so that we can record the introduction, administer attribution, provide limited referral-status updates where appropriate and administer any referral payment that becomes due.
If you join Obsessed Ambassadors, we also process information needed to operate the programme, including your account and contact details, Referral records, attribution, stage-level progress, Referral Payments, payment information where required, Qualifying Conversion history, tier, bonus and milestone progress, Portal activity and programme communications.
We do not give a referrer access to a referred person’s private conversations, pricing, tax or accounting information, financial details, payment arrangements or personal circumstances merely because they made the introduction.
When you become an Obsessed Ltd client or participate in an Obsessed programme
If you enter into a client relationship with Obsessed Ltd, or participate in the Growth Academy, Acquisitions Academy, V.O.P. or another Obsessed Ltd programme or service, we may process information needed to administer and deliver that relationship. This may include your name and contact details, business and role information, contractual and account records, programme-access records, attendance and booking information, community participation, communications with the Obsessed team, questions or contributions made during sessions, support records and other information you choose to provide in connection with the service.
Where the contractual Client is an organisation and it nominates a director, employee or other individual to participate, we may receive that individual’s details from the Client which nominated them.
Academy Days, coaching calls, V.O.P. events and other programme sessions may be photographed, audio-recorded or video-recorded where this forms part of programme delivery. Participation does not by itself give Obsessed permission to use an identifiable individual’s image, voice, testimonial, case study or contribution in public marketing where separate optional marketing permission is required under the applicable programme terms.
For V.O.P. First Look and other transaction-specific communications, we may also process information, declarations, evidence and compliance records reasonably required to determine whether a particular person may lawfully receive the relevant communication. V.O.P. membership itself does not establish eligibility to receive every opportunity communication.
When you use the website
Like most websites, ours collects some data automatically as you browse:
- Type and version of your device, operating system, and browser
- Approximate location derived from your IP address, where collected
- Pages or features you interact with, where tracking is enabled
- Referrer information
- Your IP address and other technical / security information
Most of this is collected through cookies and similar technologies. Our Cookie Policy sets out exactly what’s in use and how to control it.
4. Where we get your data from
We collect most personal data directly from you – through forms, bookings, emails and your activity on the website. We may also receive limited personal data about you from a person or business making a warm introduction through our Refer or Obsessed Ambassadors routes, where they confirm that you know about the introduction, have agreed that your details may be shared with us, have authorised Obsessed to contact you using the contact method or methods recorded in the referral, and are expecting Obsessed to contact you about its services. We also receive information from service providers acting on our behalf when you use their functionality, including our CRM, booking, referral and Portal systems. We do not buy or scrape personal data for the purpose of making referrals through these routes.
5. Why we use your data and the lawful basis
UK data protection law says we have to have a specific reason for using your data, and that reason has to be one of the lawful bases set out in Article 6 of the UK GDPR. Below is what we use your data for, and which lawful basis we rely on in each case.
Notifying you when the newsletter launches
Lawful basis: Consent (UK GDPR Article 6(1)(a)). You give consent by submitting the form. You can ask us to delete your email at any time.
Lawful basis: Legal obligation (UK GDPR Article 6(1)(c)). UK GDPR requires us to be able to demonstrate that we obtained valid consent.
Advisory sessions
Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f)). Our legitimate interest is providing the session you’ve requested. Your interest in receiving the call is the same.
Enquiries about selling your practice, or investing with us
Lawful basis: Steps you’ve taken with a view to entering into a contract (UK GDPR Article 6(1)(b)). You’ve initiated a step that could lead to a transaction; using the information you’ve provided for that purpose is necessary.
Accounting enquiries
Lawful basis: steps taken at your request before entering into a contract (UK GDPR Article 6(1)(b)) and, where appropriate for general pre-engagement administration, our legitimate interests in responding to business enquiries.
Referrals and Obsessed Ambassadors
Where the communication method and recipient type permit us to do so without consent, our lawful basis is our legitimate interests in responding to a genuine warm introduction, balanced against the person’s rights and interests.
Where PECR requires consent for the chosen electronic communication method, we rely on the referred person’s specific permission to be contacted by Obsessed using that method, as confirmed through the referral process.
For a person making a one-off referral, we use their contact, referral, attribution and payment information to administer the referral and any Referral Payment that becomes due.
Our lawful bases are performance of the One-Off Referral Terms, our legitimate interests in administering genuine referrals, and legal obligations applying to payment, tax and record-keeping.
For Participants in Obsessed Ambassadors, we use account, referral, attribution, payment, Portal, tier, bonus, milestone and related Programme information to administer participation in the Programme.
Our lawful bases are performance of the Obsessed Ambassadors Programme Terms, our legitimate interests in operating and protecting the Programme, and legal obligations applying to payment, tax and record-keeping.
Client administration and programme delivery
Where you purchase or participate in an Obsessed Ltd programme or service, we use the information reasonably required to establish, administer and deliver that relationship, provide access to contracted services and programme benefits, communicate with participants, operate programme communities, manage attendance and support, protect participants and our services, and maintain appropriate contractual, operational and evidential records.
Where you contract with us personally, our lawful basis will ordinarily include performance of our contract with you. Where the Client is an organisation and we process information about its directors, employees, representatives or nominated participants, our lawful basis will ordinarily include our legitimate interests in administering and delivering the contracted service to the Client. We may also process information where necessary to comply with legal obligations or establish, exercise or defend legal rights.
Where we rely on separate optional consent for an identifiable public marketing use, that consent may be declined or withdrawn without affecting the underlying programme or service.
Where V.O.P. First Look or another opportunity communication requires recipient-specific legal or regulatory checks, we may process the information reasonably required to assess and document whether the communication may lawfully be made. Our lawful bases may include our legitimate interests in operating the service lawfully and responsibly and compliance with applicable legal obligations.
General correspondence
Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f)). Our legitimate interest is being responsive when someone gets in touch.
Website analytics and similar technologies
Where consent is required for the use of cookies or similar technologies, the associated processing of personal data relies on consent. Our Cookie Policy explains the technologies in use and the choices available to you.
Strictly necessary technologies, and other storage or access technologies that may lawfully be used without consent, are used where the applicable legal requirements allow this.
Strictly necessary cookies – the ones the site needs to function – don’t require consent.
Meeting our legal and regulatory obligations
Lawful basis: Legal obligation (UK GDPR Article 6(1)(c)).
6. Who we share your data with
We share your data with a small number of third-party services that help us run the website. Each one is named below, with what they handle and why.
WPX
Our website / email hosting provider. Website content, server logs and hosted site data may be processed on its infrastructure.
HubSpot
Our CRM and website-form platform. Website enquiries, contact records, referral/prospect records and related CRM activity are processed in HubSpot. HubSpot website tracking is also enabled, subject to the cookie / storage-access controls described in our Cookie Policy.
Partner Portal
The referral-programme platform behind The Obsessed Portal. It processes participant account information, referral attribution, stage-level progress, commission and programme-status information.
Calendly
Our booking platform for Advisory Sessions. It processes booking/contact information needed to arrange and manage the meeting.
Testimonial.to
The platform used to display our testimonial wall and testimonial videos on the Proof page. It may process technical information when its embedded content loads.
We use four Google services on the site:
- Google Fonts - to load the typefaces (Inter and Playfair Display) used across the site.
- Google Analytics 4 (GA4) - to understand how visitors use the site.
- Google Tag Manager - to manage the tags that fire when you visit.
- reCAPTCHA - to stop spam bots from submitting forms.
Each of these may collect technical data about your visit – IP address, device type, browser, pages visited, and similar – and pass it to Google.
We do not sell your personal data or allow these providers to use it for their own unrelated commercial purposes merely because they supply services to us.
7. International transfers of your data
Some of our service providers may process or store personal data outside the UK, including in the United States or the EEA. This includes HubSpot, Partner Portal, Calendly, Testimonial.to and Google.
Where personal data is transferred outside the UK, we use a lawful transfer mechanism appropriate to the destination and provider. This may include a UK adequacy regulation, the UK Extension to the EU–US Data Privacy Framework where the recipient is eligible, or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.
You can ask us for more information about the safeguard used for a particular transfer by emailing legal@obsessed.co.uk.
8. How long we keep your data
We don’t keep your data forever. Below is how long we keep each type, and what triggers deletion.
- DATA
- How long we keep it
Newsletter notify-list email
Until we send the launch notification, plus 90 days. If you don’t subscribe at that point, we delete your email.
Consent records (email + IP + timestamp)
While we’re relying on your consent, plus 2 years after it ends – so we can answer a regulator if asked.
Advisory session booking details (Calendly + pre-call form)
24 months from the date of the session, unless you become a client – in which case retention follows your client engagement letter.
Sell Your Practice form submissions
24 months from your last contact with us, unless you become a client or a longer retention period is required. You can ask us to delete it sooner, subject to the right to erasure described below.