Privacy Policy

1. Who we are

Data controller: Milestones Group Ltd, registered in England and Wales. Company number: 10800284. Trading as: The Realignment. Registered office: Cadre Advisory, Unit B Off Edge, Station Approach, Penarth, Wales, CF64 3EE. Website: therealignment.com. Contact for data requests: admin@therealignment.com. We are the data controller for the personal data described in this policy.

2. What data we collect

The data we collect depends on how you interact with us.

When you complete a scorecard

Your name and email address. Your responses to the scorecard questions, including business-related answers about your company, revenue band, team size, and inner-state reflections. Your consent preference for ongoing marketing communications. Your IP address and basic technical information for security and analytics. The date and time of submission.

When you book a conversation

Your name, email, and any details you provide in the booking form. The date and time of the booking. Any notes you add about your situation.

When you become a client

Contact details (name, email, phone number where relevant, business name). Billing information processed securely through our payment provider. Session notes, reflections, exercise responses, and other content you generate as part of the programme. Communications between us, including email, written messages, and session recordings if you consent to them.

When you visit our website

Standard analytics data including pages visited, time on page, referring source, approximate location at city level, and device type. Cookies and similar technologies as described in section 7.

When you contact us

Your name, email, and the content of your message.

3. Why we collect it and our legal basis

Legitimate interest

We use your data on the basis of legitimate interest to deliver the scorecard results you have asked for; respond to enquiries you have sent us; operate, secure, and improve our website and services; communicate with you about a service you are actively engaged in.

Consent

We rely on your consent for sending you marketing emails, including the welcome sequence and ongoing newsletter; setting non-essential cookies; and recording sessions where applicable. You can withdraw consent at any time. See section 9.

Contract

When you become a paying client, we process the data necessary to deliver the services you have contracted us to provide.

Legal obligation

We retain certain data such as financial records for as long as UK tax and accounting law requires.

4. How we use your data

We use your personal data to deliver the scorecard results to you; respond to your questions and book conversations; provide our coaching services if you become a client; send you marketing communications if you have consented; improve our methodology and services through aggregated, non-identifying analysis; meet our legal and regulatory obligations; and protect the security and integrity of our website and services. We do not use your data for automated decision-making that produces legal or similarly significant effects.

5. Who we share your data with

We do not sell your personal data. We do not share it with third parties for their own marketing purposes. We use a small number of trusted service providers who help us deliver our services. They process your data only on our instructions and under contractual obligations of confidentiality and data protection.

Current processors

HubSpot: CRM and email marketing (US-based; EU-US Data Privacy Framework). Resend: transactional email delivery (US-based; Standard Contractual Clauses). Manus: scorecard hosting and form processing. Calendly: appointment booking (US-based; EU-US Data Privacy Framework). Notion: internal documentation and methodology workspace (client data anonymised or pseudonymised where stored). Stripe: payment processing (PCI-DSS certified). Google Workspace: email hosting and document storage (Standard Contractual Clauses). We review our processors periodically and update this list when our stack changes.

We may also share data if required by law, court order, or regulatory authority; to protect our legal rights or those of others; or in the event of a merger, acquisition, or sale of our business (you would be notified in advance).

6. International data transfers

Some of our processors are based in the United States or other countries outside the UK and EU. When your data is transferred outside the UK or EU, we ensure it is protected by appropriate safeguards: EU-US Data Privacy Framework certification for US-based processors that participate; Standard Contractual Clauses approved by the UK ICO and the European Commission; adequacy decisions where applicable. You can request more information by contacting admin@therealignment.com.

7. Cookies and tracking

Our website uses cookies and similar technologies. Essential cookies are required for the website to function and are set automatically without requiring consent. Analytics cookies help us understand how visitors use our site and are only set if you consent via the cookie banner. Marketing cookies track conversion and remarketing and are only set if you consent. You can manage your cookie preferences through the cookie banner at any time, or block and delete cookies through your browser settings.

8. How long we keep your data

Scorecard responses and contact data: retained while you remain an active contact. If you unsubscribe and do not engage for 2 years, we delete or anonymise the data. Client data: retained for the duration of our working relationship and for 7 years afterwards for legal, tax, and professional accountability reasons. Financial records: retained for 7 years as required by UK tax law. Marketing consent records: retained for as long as you are subscribed and for 3 years after withdrawal. Website analytics: retained for up to 26 months in aggregated form. When data is no longer needed, we delete or fully anonymise it.

9. Your rights

Under UK and EU GDPR, you have the right to be informed; the right of access to a copy of your personal data; the right to rectification; the right to erasure; the right to restrict processing; the right to data portability; the right to object to processing based on legitimate interest including direct marketing; the right to withdraw consent at any time; and the right not to be subject to automated decision-making.

If you are in California

Under the CCPA and CPRA, you also have rights to know what personal information we collect, use, share, and disclose; delete personal information we have collected; opt out of the sale or sharing of personal information (we do not sell or share personal information as defined under CCPA); correct inaccurate personal information; limit use of sensitive personal information; and non-discrimination for exercising your rights.

How to exercise your rights

Email admin@therealignment.com. We will respond within one month. There is no charge unless your request is excessive or repeated. If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk, your local EU data protection authority, or the California Attorney General's office.

10. Security

We take reasonable steps to protect your personal data. These include encryption in transit (HTTPS), encryption at rest, access controls limiting who can view personal data, two-factor authentication on critical systems, and regular reviews of our processors' security practices. No system is perfectly secure. If we become aware of a data breach that meets the legal threshold for notification, we will inform you and the relevant supervisory authority within 72 hours as required by UK/EU GDPR.

11. Children's data

Our services are not directed at people under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact admin@therealignment.com and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the Last updated date at the top. If the changes are material, we will notify you by email (if we have your address and consent) or via a prominent notice on the website.

13. Contact us

Email: admin@therealignment.com. Postal address: Milestones Group Ltd, Cadre Advisory, Unit B Off Edge, Station Approach, Penarth, Wales, CF64 3EE. We aim to respond to all data-related queries within one week.

Summary

We collect your name, email, and what you tell us when you take our scorecard or work with us. We use your data to deliver what you have asked for and, with your consent, to send you ongoing emails. We do not sell your data and we do not share it for other people's marketing. We work with trusted tools like HubSpot, Resend, Calendly, and Manus who are bound by contracts to protect your data. You can ask to see what we have, correct it, or delete it at any time by emailing admin@therealignment.com. We keep your data only as long as we need it. Cookies on our site are only the essential ones unless you give consent for others.