Privacy Policy
Last updated: 20 September 2026
W.I.N (West Indian Nation) respects your privacy. This policy explains what personal data we collect, why, and your rights. The data controller is [registered business name], [registered address] ([ICO registration number, if registered]). Contact us about privacy at hello@winnation.org.uk.
What we collect
- Account details you provide — name, email, display name, and password (stored only as a secure hash).
- Membership & billing — your plan and status, and payment records. Card payments are processed by Stripe; we never see or store full card numbers.
- Orders — items, and the delivery address you provide for physical goods.
- Communications — newsletter sign-ups and messages you send us.
- Usage & device data — basic analytics and security logs (for example IP address and pages visited) to run, secure and improve the Site.
- Sign-in with Google — if you use it, we receive your basic profile and email from Google to create or match your account.
Why we use it & our lawful bases
- To provide the service (accounts, membership, orders, courses) — performance of our contract with you.
- To take payments and keep financial records — contract and legal obligation.
- To send marketing emails (newsletters) — your consent, which you can withdraw anytime via the unsubscribe link.
- To secure the Site and prevent fraud/abuse — our legitimate interests.
Who we share it with
We share data only with the providers that help us run W.I.N, under contract and only as needed:
- Stripe — payment processing.
- Our email provider — account/transactional email and newsletters.
- Google — optional sign-in.
- Cloudflare — course video delivery.
- Microsoft Azure (UK) — secure hosting of the Site and database.
We don't sell your personal data. We may disclose data if required by law.
Where your data is held & transfers
Our hosting and database are in the UK. Some providers above may process data outside the UK; where they do, appropriate safeguards (such as UK-approved transfer mechanisms) apply.
How long we keep it
We keep account and order data for as long as you have an account and as needed for our legal and accounting obligations (financial records are typically kept for six years), then delete or anonymise it. Newsletter data is kept until you unsubscribe.
Cookies
We use essential cookies to run the Site and, with your consent, analytics cookies to understand usage. Manage your choices anytime via Cookie settings.
Your rights
Under UK GDPR you can access, correct, delete or port your data, object to or restrict certain processing, and withdraw consent. To exercise any of these, email hello@winnation.org.uk. You can also download or delete your data from your account's Personal data page. If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk).
Changes
We may update this policy; the current version is dated above.