Privacy Policy

BossFree is a professional learning network where operators share tactical insights with other founders. This policy explains what information we collect when you join our waitlist, create an account, or browse the platform, and how we handle that information.

We collect only what we need to run the service well. We do not sell your personal information, and we do not share your email address with the creators whose material you study unless you explicitly ask us to make an introduction.

The information we hold falls into three categories:

• chevron_rightInformation you give us: your name, work email address, company, role, and any details you add to your member profile or submit through a form.
• chevron_rightInformation from your use of the platform: the courses and briefs you open, your progress through them, saved items, and support conversations.
• chevron_rightTechnical information: IP address, browser and device type, approximate region derived from your IP address, and referring pages. This is collected automatically when you visit.

If you pay for a membership, our payment processor handles your card details directly. We receive only a transaction reference, the last four digits of the card, and its expiry date. We never see or store full card numbers.

We use the information described above to:

• chevron_rightOperate your account, deliver course content, and remember your progress.
• chevron_rightNotify you when the Elite Network opens a new cohort, if you asked to be on the waitlist.
• chevron_rightSend service messages such as receipts, security alerts, and material changes to this policy.
• chevron_rightUnderstand which material is genuinely useful so we can commission more of it.
• chevron_rightDetect and prevent fraud, credential sharing, and abuse of the platform.

Marketing email is opt-in and every message includes a one-click unsubscribe link. Unsubscribing from marketing does not stop essential service messages about your account.

If you are in the United Kingdom, European Economic Area, or another region with comparable law, we rely on the following legal bases: performance of our contract with you to provide the platform, your consent for marketing communications and non-essential cookies, our legitimate interest in securing and improving the service, and compliance with legal obligations such as tax record keeping.

Where we rely on consent, you can withdraw it at any time without affecting processing that already took place.

We share personal information only with service providers who help us run BossFree, and only to the extent they need it. These include our cloud hosting provider, email delivery service, payment processor, analytics provider, and customer support tooling. Each is bound by contract to protect your information and use it solely on our instructions.

We may also disclose information where we are legally required to do so, or where it is necessary to establish or defend a legal claim. If BossFree is involved in a merger or acquisition, we will give you notice before your information becomes subject to a different privacy policy.

We use a small number of cookies. Essential cookies keep you signed in and protect against cross-site request forgery; these cannot be turned off without breaking the service. Analytics cookies help us measure which pages and courses people actually finish, and they run only with your consent.

You can clear or block cookies through your browser settings. Blocking essential cookies will prevent you from signing in.

We keep account information for as long as your account is active. If you close your account, we delete or anonymise your personal information within 90 days, except where we must retain records longer to meet accounting, tax, or legal obligations. Waitlist entries are removed after two years of inactivity if you have not become a member.

Depending on where you live, you may have the right to:

• chevron_rightAccess the personal information we hold about you and receive a copy of it.
• chevron_rightCorrect information that is inaccurate or incomplete.
• chevron_rightDelete your personal information where we have no overriding obligation to keep it.
• chevron_rightObject to or restrict certain processing, including direct marketing.
• chevron_rightReceive your information in a portable, machine-readable format.
• chevron_rightLodge a complaint with your local data protection authority.

To exercise any of these rights, email legal@bossfree.com. We will verify your identity and respond within 30 days, or tell you if we need longer.

We encrypt data in transit with TLS and at rest on our hosting infrastructure. Access to production systems is restricted to staff who need it, protected by multi-factor authentication, and logged. No system is perfectly secure, but if a breach ever affects your personal information we will notify you and the relevant regulator as required by law.

BossFree operates globally, so your information may be processed in countries other than your own, including the United States. Where we transfer information out of the United Kingdom or European Economic Area, we rely on approved safeguards such as the UK International Data Transfer Agreement or the European Commission's standard contractual clauses.

BossFree is built for working professionals and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a minor has given us personal information, contact us and we will delete it.

We may update this policy as the platform evolves. When changes are material we will email registered members and update the date at the top of this page at least 14 days before the new version takes effect. Continuing to use BossFree after that date means you accept the revised policy.