Privacy Policy

Last updated: 6 March 2026

1. Who We Are

JustStart Limited ("JustStart", "we", "us", or "our") is an operator-led venture studio registered in England and Wales. We help ambitious professionals turn ideas into validated ventures through structured programmes, hands-on support, and AI-powered tools.

For the purposes of data protection law, JustStart Limited is the data controller responsible for your personal data. If you have questions about this policy, please contact us at privacy@juststart.tech.

2. Information We Collect

Information you provide directly

  • Account and registration data: name, email address, and phone number when you sign up for our Masterclass, Leap Sprint, Leap Bootcamp, or newsletter.
  • Payment information: payment card details processed securely by our payment provider Stripe. We do not store full card numbers on our servers.
  • Assessment and scorecard responses: answers you provide through our Readiness Assessment and Idea Scorecard tools.
  • Communications: messages you send to us via email or through our platform.

Information collected automatically

  • Usage data: pages visited, features used, time spent on site, and interaction patterns.
  • Device information: browser type, operating system, screen resolution, and device identifiers.
  • Log data: IP address, access times, and referring URLs.

3. How We Use Your Information

We use your personal data to:

  • Deliver and administer our programmes (Masterclass, Leap Sprint, Leap Bootcamp).
  • Process payments and manage your account.
  • Send programme updates, session reminders, and relevant communications.
  • Provide personalised feedback through our assessment and scorecard tools.
  • Send our newsletter and marketing communications (only with your consent).
  • Improve our platform, content, and user experience.
  • Comply with legal obligations and protect against fraud or misuse.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

  • Contract: processing necessary to deliver the programmes and services you have purchased or registered for.
  • Consent: marketing communications and newsletter subscriptions, which you can withdraw at any time.
  • Legitimate interests: improving our services, preventing fraud, and understanding how our platform is used.
  • Legal obligation: where required by applicable law, such as financial record-keeping.

5. How We Share Your Information

We do not sell your personal data. We may share your information with:

  • Stripe: our payment processor, to handle transactions securely.
  • Supabase: our database provider, which hosts programme and account data.
  • Analytics providers: to help us understand site usage and improve the experience.
  • Legal and regulatory authorities: where required by law or to protect our rights.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy. Specifically:

  • Account data: retained while your account is active and for up to 2 years after your last interaction.
  • Payment records: retained for 7 years as required by UK financial regulations.
  • Marketing preferences: retained until you unsubscribe or withdraw consent.
  • Assessment data: retained for 12 months to allow you to revisit your results, then anonymised.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your personal data in certain circumstances.
  • Restrict or object to processing of your data.
  • Data portability: receive your data in a structured, machine-readable format.
  • Withdraw consent at any time where consent is the basis for processing.

To exercise any of these rights, contact us at privacy@juststart.tech. We will respond within 30 days.

8. International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data to the same standard as under UK GDPR.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure authentication, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at:

JustStart Limited
Email: privacy@juststart.tech

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.