Privacy Policy
Last updated: November 2025
Compliant with UK GDPR & Data Protection Act 2018
This Privacy Policy explains how OffScript (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit offscript.co, access our services, download a resource, or otherwise interact with our content.
By using our website, you agree to the terms of this Privacy Policy.
If you do not agree, please discontinue use of the site.
1. Who We Are
OffScript is owned and operated by:
Sarah Swaroop Consulting
Registered in the United Kingdom
Email: hello@offscriptcareers.com
Under UK GDPR, we are the Data Controller responsible for deciding how and why your personal data is processed.
2. Scope of This Policy
This policy applies to all personal data we collect, store, or process—whether through our website, coaching applications, email communication, digital products, bookings, or online programmes.
It applies to anyone who:
• Visits the OffScript website
• Downloads a free resource
• Joins the mailing list
• Purchases a product
• Books a coaching session
• Contacts us directly
3. What Personal Data We Collect
We collect information that is necessary to provide services, operate our business, and meet legal requirements.
a) Information you provide directly
This may include:
• Name
• Email address
• Phone number
• Billing address
• Payment information (via Stripe/PayPal through ThriveCart — we do not store card details)
• Coaching application responses
• Information shared via email, forms, questionnaires, or messaging
• Any additional details you choose to share
b) Information collected automatically
Through cookies and analytics tools, we may gather:
• IP address
• Device and browser type
• Pages viewed
• Time spent on the site
• Referring website
• Location (approximate)
• Metadata from uploaded files (unless removed by you)
c) Sensitive data
We do not intentionally collect special category data. If you voluntarily share it in coaching or communication, it will be handled securely and confidentially.
d) Cookies
We use cookies to ensure the website functions properly, to analyse behaviour, and to track newsletter/lead magnet conversions. You can disable cookies in your browser at any time.
4. How We Collect Personal Data
We collect information when you:
• Fill out a form
• Submit a coaching application
• Make a purchase
• Join the mailing list
• Contact us
• Access services
• Visit or navigate the website
We may also collect information via email exchanges, video calls, or direct messages.
5. Why We Collect Personal Data
We collect and use your information to:
• Provide coaching, digital content, or consultancy services
• Deliver newsletters and OffScript Notes
• Process payments and bookings
• Respond to enquiries
• Improve our website and user experience
• Send marketing updates (only if you opt in)
• Create anonymised statistical insights
• Meet legal, tax, and regulatory obligations
We may use your information for secondary purposes that are reasonably related to the original purpose—always within UK GDPR.
You can unsubscribe from marketing emails at any time.
6. Legal Bases for Processing (UK GDPR Article 6)
We process personal data on the following legal grounds:
• Consent — newsletters, lead magnets, waitlists
• Contract — purchases, coaching agreements
• Legitimate Interest — analytics, security, improving services
• Legal Obligation — accounting, tax, record-keeping
You may withdraw your consent at any time.
7. Third Parties & Data Sharing
We never sell your personal information.
We only share data with trusted providers who help us operate our business, including:
• MailerLite — email delivery + automation
• ThriveCart — checkout system
• Stripe / PayPal — payment processing
• Showit — website hosting
• Calendly — bookings
• Google Workspace — documents and email
• IT support, accountants, or legal providers where legally necessary
Where your data is shared with third parties:
• They are authorised to use it only for the purpose provided
• They must protect it according to GDPR
• They cannot use it for their own marketing
We may share anonymised or aggregated data for insights or reporting, but never in a way that identifies you.
8. International Data Transfers
Some service providers may store data outside the UK/EEA (e.g., US-based platforms).
When this occurs, we ensure appropriate safeguards are in place, such as:
• ICO-approved International Data Transfer Agreements (IDTAs)
• Standard Contractual Clauses (SCCs)
• Adequacy regulations
You may request details of these safeguards at any time.
9. Security of Your Personal Data
We take measures to protect your data from loss, misuse, unauthorised access, or disclosure, including:
• Secure, encrypted platforms
• Access controls
• Password protection
• Regular system and security reviews
If personal data is no longer required, it will be securely destroyed or anonymised.
10. Data Retention & Destruction
We retain data only as long as necessary:
• Email list data: until you unsubscribe
• Coaching records: up to 6 years
• Purchase data: 6 years (legal requirement)
• Analytics data: typically 12–26 months
You may request deletion at any time, unless we must retain data for legal reasons.
After the retention period, all data is securely deleted or permanently anonymised.
11. Data Breaches
A data breach means unauthorised access, disclosure, or loss of personal data.
If a breach occurs that may cause harm:
• We will assess the severity
• We will notify you promptly
• We will report it to the ICO where required
12. Your Rights Under UK GDPR
You have the right to:
• Access your personal data
• Correct inaccuracies
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Withdraw consent at any time
• Request a copy of your data
• Opt out of direct marketing
• Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise these rights, email hello@offscriptcareers.com.
13. Direct Marketing
We only send marketing communications if:
• You have explicitly opted in, or
• We have a legitimate interest and it is permitted by law
You may opt out at any time using the “unsubscribe” link or by contacting us directly.
14. Links to Other Websites
OffScript may include links to external websites or resources.
We are not responsible for their privacy practices.
Please check their privacy policies before providing any personal data.
15. Children’s Privacy
OffScript is intended for adults aged 18 and over.
We do not knowingly collect data from children.
16. Changes to This Policy
We may update this policy periodically.
The updated version will be posted here with a revised “Last updated” date.
Continued use of the site constitutes acceptance of the updated policy.
17. Contact Us
For questions, requests, or GDPR rights:
Email: support@offscriptcareers.com
Company: Sarah Swaroop Consulting
