Privacy Policy · Incuv8or

This policy explains what personal data Incuv8or collects through incuv8or.com, why we collect it, who processes it on our behalf, and what rights you have. We are the data controller for the information described here.

Contact: samantha@incuv8or.com

What we collect

We only collect what you give us. We do not buy lists, and we do not track you across other websites.

Enquiry and application forms (ACTIV8 strategy call, INNOV8 coaching application, INCUB8 enquiry, contact form): your first name, last name, email address, and the answers you type into the form — for example what your business does, where your time goes, your goals, and your budget range.
Newsletter, blog access and the Launchpad waitlist: your first name, last name and email address.
Payments: if you buy a service, payment is taken by Stripe. Stripe handles your card details directly — we never see or store your card number. We receive confirmation that a payment succeeded, plus your name and email.
Technical data: our host records standard server logs (IP address, browser type, pages requested) for security and reliability.

Why we use it, and our lawful basis

To answer your enquiry and deliver what you asked for — necessary to take steps at your request before or under a contract.
To send you marketing emails (newsletter, offers, blog posts) — your consent, given when you tick or submit a form that says you are joining the email list. You can withdraw it at any time.
To keep records of enquiries and clients — our legitimate interest in running and improving the business.
To meet accounting and tax obligations — legal obligation.

Who processes your data

We use a small number of established providers. They process data on our instructions only:

Mailchimp (Intuit) — email marketing list and tags.
Brevo — sends the notification and thank-you emails triggered by our forms.
ClickUp — our internal CRM, where an enquiry becomes a task so it doesn't get missed.
Supabase — database record of form submissions.
Stripe — payment processing.
Vercel — website hosting.
Calendly — scheduling, if you book a call with us.

Some of these providers are based in the United States. Where data is transferred outside the UK, it is protected by the providers' standard contractual clauses and equivalent safeguards.

How long we keep it

Enquiries that don't become clients: up to 24 months, then deleted.
Marketing list: until you unsubscribe, or after 24 months of no engagement.
Client and payment records: 7 years, as required for UK tax purposes.

Your rights

Under UK GDPR you have the right to:

ask what data we hold about you, and get a copy;
have inaccurate data corrected;
have your data deleted;
object to or restrict how we use it;
withdraw consent to marketing at any time;
ask us to send your data to another provider.

Email samantha@incuv8or.com and we'll action it within one month. Every marketing email also has a one-click unsubscribe link at the bottom.

If you think we've handled your data badly, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies

This site does not use advertising or tracking cookies. Our host may set strictly necessary cookies required for the site to function and stay secure. Embedded third-party content — such as a Calendly booking widget or a Stripe checkout — may set its own cookies when you interact with it, governed by that provider's own privacy policy.

Changes

If we change this policy we'll update the date at the top of the page.