Privacy Policy

This policy explains what Offramp collects and why, and your rights under the UK GDPR and the Data Protection Act 2018. We aim to collect as little as possible.

Who is the controller

Offramp is the data controller for personal information collected through this site. You can reach us via the contact details on the site.

What we collect

Your email address, when you choose to join our list or unlock a result. We also record which tool you used (e.g. the quiz) and, for the readiness quiz, your score band — so we can send relevant guidance. If you buy a playbook, our payment processor handles your card details; we do not store them.

Our lawful basis

We rely on your consent for marketing emails (you opt in, and can withdraw at any time) and on contract / legitimate interests to deliver a product you have purchased and to keep our service secure.

How we use it

To send you the resources you requested and occasional updates about emigration rules and Offramp products. You can unsubscribe at any time using the link in any email.

What we don't do

We don't sell your personal information.

Processors & international transfers

We use reputable providers to store data, send email and process payments. They process your data only on our instructions. Some may process data outside the UK; where they do, appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent) are relied upon.

How long we keep it

We keep your information for as long as you remain subscribed or as needed to provide a product you purchased, and then delete it within a reasonable period unless we must keep it to meet a legal obligation.

Your rights

Under UK data protection law you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these, contact us using the details on the site.

Complaints

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to put things right first.

This is a starting template. Before launch, update it to name your actual processors and confirm it reflects how you handle data in practice, and have it reviewed against UK GDPR.