PRIVACY POLICY

Last updated: 1 April 2026
1. About this Privacy Policy
OMB Connect® respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you, including but not limited to:
visit or use our websites, landing pages or checkout pages; create an account; purchase or access a course, eBook, template, digital download or other product; join a free or paid community; register for an event, webinar or programme; subscribe to our emails or other communications; contact us, complete a form, leave a review or otherwise interact with us.
This policy applies across:
ownermanaged.business; ombconnect.business; omb.business
It also applies to relevant subdomains, course portals, checkout pages, community platforms and communications operated by us under the OMB Connect® name.
In this policy, “OMB Connect”, “we”, “us” and “our”.
2. Who Controls Your Personal Information?
OMB Connect is the data controller responsible for deciding how and why your personal information is used.
3. The Information We May Collect
The personal information we collect depends on how you interact with us.
Identity and contact information
This may include your:
name; email address; telephone number; billing or postal address; business or organisation name; social media username; country or general location.
Account and enrolment information
This may include:
account username and login details; course or community enrolments; product access and entitlement records; membership status; preferences and account settings.
Purchase and transaction information
This may include:
products or services purchased;
order value;
payment status;
transaction date;
discounts, refunds or rebates;
billing information;
limited payment-related information received from payment processors.
Payments are generally processed by third-party payment providers. We do not normally receive or store your full payment-card details.
Learning and participation information
Where relevant, we may collect:
course progress;
module completion;
quiz answers and results;
certificate status;
completion dates;
refund or rebate eligibility;
event attendance;
community activity;
questions submitted to us;
feedback and survey responses.
Communications and support information
This may include:
emails, messages and enquiries;
customer-support records; telephone or video-call information; complaints and refund requests; communication preferences; records of consent, unsubscribe requests and marketing choices.
We may record a call or meeting only where you are informed and where doing so is lawful.
Community and user-submitted content
If you participate in a community or interactive feature, we may process content you choose to post, including:
comments; questions; profile information; images; documents; reviews; other content you submit.
Information posted in shared community areas may be visible to other members. You should not post confidential, sensitive or unnecessary personal information in a public or shared area.
Technical and usage information
When you use our websites or platforms, we or our service providers may collect:
IP address; browser and device type; operating system; referring website; pages viewed; links clicked; login and session information; approximate location; dates and times of visits; error, security and diagnostic information.
Marketing and advertising information
This may include:
email engagement; advertisement interactions; marketing preferences; campaign and referral information; cookie or pixel identifiers; information about which content, products or offers may interest you.
Information you voluntarily provide
You may choose to provide other information when contacting us, participating in a programme or asking a question.
Please do not provide sensitive personal information unless it is genuinely necessary and we have asked you to provide it.
4. How We Collect Your Information
We may collect personal information:
directly from you; when you complete a form or checkout; when you create an account; when you purchase or access a product; when you join a course or community; when you contact us;
automatically through cookies and similar technologies;
through payment, course, community, communications or analytics providers; from referral or affiliate systems; from someone purchasing or registering on your behalf; from publicly available business sources where lawful.
Where information is obtained from another source, we will provide appropriate privacy information where required by law.
5. How and Why We Use Your Information
We only use personal information where we have a lawful reason to do so.
To provide products and services
We use personal information to:
process purchases;
create and manage accounts;
provide access to courses, eBooks, downloads and communities;
monitor course completion;
determine refund or rebate eligibility;
deliver events or programmes;
provide customer support;
communicate important service information.
Our lawful basis is usually the performance of our contract with you or taking steps at your request before entering into a contract.
To operate and protect our business
We may use information to: administer our websites and platforms; maintain security; prevent fraud, piracy and misuse; investigate unauthorised account access; enforce our terms; manage complaints and disputes; protect our legal rights;
maintain appropriate business records.
Our lawful basis is usually our legitimate interests, compliance with a legal obligation or the establishment, exercise or defence of legal claims.
To improve our products and customer experience
We may use information to:
understand how our websites and products are used; improve courses, products and communications; identify technical problems; conduct surveys and research; develop new products and services;
measure the effectiveness of content and advertising.
Our lawful basis is usually our legitimate interests. Where cookies or similar technologies require consent, we will request that consent separately.
To meet legal and financial obligations
We may use and retain information to:
maintain accounting and tax records; process refunds; respond to lawful requests; comply with regulatory obligations; prevent or detect unlawful activity.
Our lawful basis is compliance with a legal obligation or our legitimate interests.
With your consent
We may rely on consent where required, including for:
certain marketing communications; non-essential cookies; advertising technologies; testimonials, photographs or recordings; sharing information with a specifically identified third party for that party’s marketing.
You may withdraw your consent at any time. Withdrawal will not affect processing that was lawful before consent was withdrawn.
6. Emails, Calls, Text Messages and Marketing
We may send you administrative or service-related communications concerning:
your order; your account; product access; course progress; security; refunds; changes to a service; changes to our policies.
These are not marketing messages and may be necessary to provide your product or service.
We may also contact you about OMB Connect® products, services, content, events or offers where:
you have requested or consented to the communication;
you have purchased or expressed an interest in a similar product and applicable law allows us to contact you;
another lawful basis applies.
Communications may be sent from addresses using ombconnect.business, omb.business or another clearly identified OMB Connect® communication channel.
We may use communication systems that schedule or send messages automatically. Where required by law, automated marketing calls, emails or text messages will only be sent with appropriate consent.
Providing information, making a purchase or joining a service does not automatically give unrelated third parties permission to market to you.
We do not provide your personal information to partners for their own marketing unless:
the partner and purpose have been clearly identified;
you have been given an appropriate choice; and
you have provided any consent required by law.
You can stop marketing communications at any time by:
clicking the unsubscribe link in an email;
following the opt-out instructions in a text message;
asking us during a call;
updating your available communication settings;
contacting us and asking to opt out.
Opting out of marketing will not prevent us from sending necessary account, purchase or service communications.
7. Cookies and Similar Technologies
Our websites may use cookies, pixels, tags and similar technologies.
These may be used to:
make our websites work;
keep accounts secure;
remember choices;
process purchases;
analyse website use;
measure advertising;
support affiliate or referral tracking;
personalise content or marketing.
Essential technologies may operate because they are necessary for the website or service.
Where consent is required for analytics, advertising or other non-essential technologies, they will not be activated until you make an appropriate choice through our cookie controls.
You can change your preferences through the cookie settings made available on our websites.
Further information about individual technologies and their duration should be provided in our Cookie Policy or cookie-management tool.
8. When We Share Personal Information
We do not sell or rent your personal information.
We may share information with trusted organisations that help us operate our business, including:
website and hosting providers;
course and community platforms;
payment processors;
email, telephone and messaging providers;
customer-support systems;
analytics and advertising providers;
event and webinar platforms;
cloud-storage and IT-security providers;
accountants, legal advisers and other professional advisers;
affiliate or referral technology providers;
contractors working under appropriate confidentiality obligations.
These organisations may only use the information for the relevant service, their lawful independent purposes or as otherwise permitted by law.
We may also disclose information:
where required by law, regulation or court order;
to prevent fraud, crime, security threats or misuse;
to protect our rights, users or other people;
in connection with a business sale, merger, restructuring or transfer;
where you have asked or authorised us to do so.
Community content may be shared with other community members according to the settings and nature of the community.
9. International Transfers
Some service providers may process personal information outside the United Kingdom.
Where a restricted international transfer takes place, we will use a lawful transfer mechanism where required. This may include:
UK adequacy regulations;
the UK International Data Transfer Agreement;
the UK Addendum to approved standard contractual clauses;
another legally recognised safeguard;
a permitted legal exception.
You may contact us for more information about the safeguards applying to a particular transfer.
10. How Long We Keep Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.
The periods we use may include:
Purchase, billing and accounting records: normally up to six years after the relevant transaction or accounting period, where required for tax, accounting or legal purposes.
Account and product-access records: for as long as the account or promised access remains active, followed by any period reasonably required to manage claims, security or legal obligations.
Lifetime-access products: core entitlement information may be retained for as long as access continues to be provided.
Course progress, quizzes and completion records: for the duration of the programme and any related refund, rebate, certification or contractual period, followed by an appropriate legal-record period.
Customer-support and complaint records: for as long as required to resolve the matter and normally for up to six years afterwards where necessary.
Community content: while the community or account remains active, subject to deletion, moderation, legal and technical requirements.
Marketing information: until you unsubscribe, object or we determine that it is no longer appropriate to retain it.
Marketing suppression records: we may retain limited information to ensure that we continue to respect an opt-out request.
Technical and cookie information: according to the duration stated in our cookie controls or applicable provider settings.
We may retain information for longer where required by law, where a dispute exists or where it is needed to establish, exercise or defend legal rights.
We may anonymise information so that it can no longer identify you. Anonymised information may be retained and used for research, analysis and business improvement.
11. Security
We use reasonable technical and organisational measures designed to protect personal information against:
unauthorised access;
loss;
misuse;
alteration;
disclosure;
destruction.
Access is restricted to people and providers who reasonably need the information for their work.
No website, platform or electronic transmission can be guaranteed to be completely secure. You are responsible for keeping your account password confidential and notifying us if you believe your account has been compromised.
12. Children and Young People
Some OMB Connect® educational content may be suitable for families, students or young people.
Where a programme is intended for a person under 18, we may require enrolment, payment or consent to be provided by a parent, guardian or responsible adult.
We do not knowingly ask children to provide more personal information than is reasonably necessary.
Where we offer an online service directly to a child and rely on consent to process their information:
a UK child aged 13 or over may be able to provide their own consent where legally appropriate;
consent from a person with parental responsibility will be required for a UK child under 13;
we may take reasonable steps to verify parental responsibility.
Parents and guardians should supervise a young person’s use of online accounts, communities and interactive features.
We do not knowingly use children’s information for targeted advertising in a manner that would be unlawful or inconsistent with their best interests.
Please contact us if you believe a child has provided information without appropriate permission.
13. Your Data-Protection Rights
Depending on the circumstances, you may have the right to:
request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion of your information;
request restriction of processing;
object to processing based on legitimate interests;
object to direct marketing at any time;
request transfer of information you provided to us;
withdraw consent;
complain to a data-protection authority.
These rights are not absolute and may be subject to legal exemptions.
We may need to verify your identity before completing a request. We will not normally charge a fee, although the law may allow a reasonable fee or refusal where a request is manifestly unfounded or excessive.
To exercise a right, contact us using the privacy contact details in this policy.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. We would appreciate the opportunity to address your concerns first, but you are not required to contact us before approaching the ICO.
If you live outside the UK, you may also have rights under the laws applying in your country or region. We will respect mandatory local privacy rights where those laws apply to us.
14. Automated Decisions
We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects concerning you.
We may use automation to organise communications, recommend content, assess course completion or identify potentially fraudulent activity. Where human review is appropriate or legally required, it will be available.
15. Third-Party Websites and Platforms
Our websites and products may contain links to third-party websites, platforms or services.
Those organisations control their own privacy practices. This Privacy Policy does not govern information collected directly by a third party acting for its own purposes.
You should review the privacy information provided by any external website or platform before submitting personal information.
16. Changes to this Privacy Policy
We may update this Privacy Policy to reflect:
changes to our products or services;
changes to our technology or providers;
changes to the law;
changes to how we use personal information.
The latest version will be published on our websites with an updated revision date.
Where a change materially affects how we use personal information, we will provide additional notice or request new consent where required.