Privacy Policy

Last updated: 19 May 2026

This Privacy Policy explains how 4+ Strategy Lab ("we", "us", "our") collects, uses, and protects information about you when you visit fourplusstrategylab.com (the "Site") or purchase our products.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

4+ Strategy Lab is a small UK-based business providing educational resources for parents preparing children for 4+ school assessments. For any privacy-related questions, contact us at support@fourplusstrategylab.com.

2. What information we collect

We collect the following types of information:

Information you give us directly:

  • Name

  • Email address

  • Billing address and delivery address (where applicable)

  • Payment details (processed securely by our payment provider — we do not store card numbers ourselves)

  • Any messages or information you send us via email or contact forms

Information collected automatically:

  • Basic analytics data via our website platform (Squarespace), such as pages visited, time on site, and approximate location based on IP address

  • Cookies and similar technologies (see section 7 below)

We do not knowingly collect any information from children. Our Site and products are intended for adults preparing children for assessments, not for use by children directly.

3. How we use your information

We use your information to:

  • Process and fulfil your orders

  • Deliver digital and physical products you have purchased

  • Send order confirmations and delivery notifications

  • Respond to your support enquiries

  • Send occasional updates about our products, if you have opted in

  • Improve our website and products

  • Comply with legal and tax obligations

We will only send marketing emails if you have actively opted in, and you can unsubscribe at any time using the link in any marketing email.

4. Legal basis for processing

Under UK GDPR, we process your personal data on the following bases:

  • Contract: to fulfil our contract with you when you make a purchase.

  • Legitimate interest: to operate and improve our business, respond to enquiries, and prevent fraud.

  • Consent: for marketing emails and non-essential cookies, which you can withdraw at any time.

  • Legal obligation: to comply with tax, accounting, and other legal requirements.

5. Who we share your information with

We do not sell, rent, or trade your personal data. We share your data only with the following service providers, who help us run the business:

  • Squarespace — our website and e-commerce platform

  • Stripe and/or PayPal — payment processing

  • Royal Mail and/or other couriers — delivery of physical products (where applicable)

  • Google Workspace or similar — email hosting

Each of these providers has their own privacy policies and processes data in accordance with UK GDPR or equivalent standards.

We may also disclose your information if required by law, by court order, or to protect our legal rights.

6. How long we keep your data

We keep your data only as long as needed:

  • Order and customer data: retained for at least 6 years to meet UK accounting and tax requirements (HMRC rules).

  • Email enquiries: retained for up to 2 years, then deleted.

  • Marketing email list: retained until you unsubscribe.

  • Analytics data: retained according to Squarespace's standard retention periods.

7. Cookies

Our Site uses cookies and similar technologies. These include:

  • Essential cookies — required for the Site to function (e.g. keeping you logged in, processing checkout).

  • Analytics cookies — to help us understand how visitors use the Site.

  • Marketing cookies — only set if you have given consent via our cookie banner.

You can manage your cookie preferences via the banner on the Site, or by adjusting your browser settings. Note that disabling essential cookies may prevent parts of the Site from working.

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.

  • Rectification: ask us to correct inaccurate or incomplete data.

  • Erasure: ask us to delete your data, subject to legal retention obligations.

  • Restriction: ask us to limit how we use your data.

  • Objection: object to processing based on legitimate interest, including for marketing.

  • Portability: request your data in a portable format.

  • Withdraw consent: at any time, where consent is the basis for processing.

To exercise any of these rights, email support@fourplusstrategylab.com. We will respond within 30 days.

If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Data security

We take reasonable steps to protect your data, including secure payment processing, encrypted data storage via our service providers, and limited internal access to personal data. However, no online transmission is 100% secure, and we cannot guarantee absolute security.

10. International transfers

Some of our service providers (such as Squarespace, based in the US) may store and process data outside the UK. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent mechanisms to ensure your data is protected.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, with the "Last updated" date at the top. Significant changes will be communicated where possible.

12. Contact

For any questions about this Privacy Policy or how we handle your data, please email support@fourplusstrategylab.com.