Privacy Policy

Effective Date: 4 April 2026
Last Updated: 4 April 2026
Data Controller: Accatalyst Ltd

1. Introduction

This privacy policy explains how Accatalyst Ltd ("we", "us", "our") collects, uses, and protects personal data you provide when using jamesmcaulay.co.uk and related services including the Agentic Growth Accelerator programme.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered as the data controller for personal data processed through this website.

2. Data we collect

We collect personal data in the following ways:

When you submit a form or enquiry

  • Name
  • Email address
  • Company name (where provided)
  • Information about your current use of AI agents (where provided)
  • Billing email address (where provided)

When you purchase a programme or subscription

  • Name, email, billing address
  • Payment card details (processed by Stripe - we never see your full card number)
  • Company/VAT details for invoicing
  • Purchase history and invoice records

When you enrol teammates in a team programme

  • Teammate names and email addresses
  • Course progress and lesson completion data

When you browse the website

  • IP address, browser type, device info
  • Pages viewed, time spent, referring site
  • Interaction events (clicks, scroll depth)

3. Legal basis for processing

We process your personal data on the following legal bases:

  • Contract: to deliver programmes you have purchased, process payments, and provide access to course materials
  • Legitimate interests: to respond to enquiries, improve the website, detect fraud, and measure marketing effectiveness
  • Consent: for marketing emails and non-essential analytics (you can withdraw consent at any time)
  • Legal obligation: to maintain financial records for HMRC and comply with accounting law

4. Third-party data processors

We use the following service providers to operate this site and deliver our services. Each has their own privacy policy and data protection obligations:

Hosting and infrastructure

  • Vercel - website hosting, serverless functions
  • Supabase - database for course progress tracking and system state
  • Cloudflare - CDN and security

Payments and invoicing

  • Stripe - card payment processing
  • Xero - invoice generation, bookkeeping, and accounting records

Communication and CRM

  • Kit (ConvertKit) - email newsletter delivery and subscriber management
  • Resend - transactional email delivery
  • Attio - customer relationship management
  • Cal.com - discovery call scheduling
  • Tally - form submissions and feedback collection

Course delivery

  • Thinkific - course platform, lesson delivery, and student progress

Analytics

  • PostHog - product analytics (EU region); purchase records and identified profiles use your email address
  • Google Analytics - website usage statistics
  • Vercel Analytics - performance monitoring

5. International transfers

Some of our service providers are based outside the UK/EEA (primarily in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards including the UK International Data Transfer Agreement, EU Standard Contractual Clauses, and providers' participation in the EU-US Data Privacy Framework.

6. Data retention

  • Marketing subscribers: until you unsubscribe
  • Course students: 7 years after course completion (for accounting and learning record purposes)
  • Financial and invoice records: 7 years (UK HMRC requirement)
  • Website analytics: up to 26 months (Google Analytics default)
  • Form enquiries without purchase: 24 months

7. Your rights under UK GDPR

You have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you
  • Rectification: ask us to correct inaccurate data
  • Erasure: ask us to delete your data (subject to legal retention requirements)
  • Restriction: ask us to stop certain processing
  • Portability: receive your data in a portable format
  • Objection: object to processing based on legitimate interests
  • Withdraw consent: where processing is based on consent
  • Complain: to the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email hello@jamesmcaulay.co.uk. We will respond within 30 days.

8. Cookies and tracking

We use essential cookies for site functionality and analytics cookies to understand usage. PostHog and Google Analytics set cookies that help us measure traffic and improve the site.

This site does not set affiliate tracking cookies. Affiliate referral tracking for the Agent Accelerator happens on agentaccelerator.ai and is covered by the privacy notice there.

If you join the Agent Accelerator waitlist via someone's referral link, we share your name with that referrer so they can see who they've introduced, along with when you joined and whether you went on to enrol. If you'd rather not appear there, email hello@jamesmcaulay.co.uk and we'll remove you.

You can disable cookies in your browser settings, though some site features may not work correctly.

9. Security

We take reasonable measures to protect personal data including HTTPS encryption, access controls, and encrypted credential storage. We use established, reputable service providers that maintain their own security certifications (SOC 2, ISO 27001).

If we become aware of a personal data breach affecting your information, we will notify affected individuals and the ICO as required by law.

10. Marketing communications

If you subscribe to our newsletter or opt in to marketing emails, we may send you updates about the Agentic Growth Accelerator, AI agent development, and related programmes. You can unsubscribe at any time via the link at the bottom of any email.

11. Children's data

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email (for subscribers) or posted here with an updated effective date.

13. Contact

For privacy-related questions or to exercise your rights:

Email: hello@jamesmcaulay.co.uk
Company: Accatalyst Ltd
Country: United Kingdom