Privacy Policy
Last updated: July 22, 2026
This Privacy Policy explains how Conquer Social Anxiety Ltd (“CSA,” “we,” “us,” or “our”) collects, uses, stores, and protects personal data when you use this website, contact us, subscribe to emails, or purchase a product or service.
Conquer Social Anxiety provides educational information about social anxiety, free email resources, and may offer digital products, courses, or related services.
We do not sell your personal data. We do not currently use display-advertising networks on this website.
Who we are
Conquer Social Anxiety Ltd is the controller responsible for the personal data described in this Privacy Policy.
Conquer Social Anxiety Ltd
Company number: 13555615
Registered office:
20–22 Wenlock Road
London N1 7GU
United Kingdom
Intended audience
This website and its services are intended for adults aged 18 and over.
We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will take reasonable steps to delete it unless we have a lawful reason to retain it.
If you believe a child has provided personal data through this website, please contact us.
Personal data we collect
The personal data we collect depends on how you interact with CSA.
Information you provide directly
This may include:
- your name;
- your email address;
- information included in messages or contact forms;
- email subscription preferences;
- account details if you create an account;
- order and transaction information;
- course enrolment and progress information;
- survey, questionnaire, or feedback responses;
- any other information you choose to provide.
Information collected automatically
When you use the website, we or our service providers may collect technical and usage information such as:
- IP address;
- browser type and version;
- device type and operating system;
- pages visited and actions taken;
- referring website or source;
- approximate location derived from an IP address;
- cookie identifiers and consent choices;
- dates, times, and duration of visits;
- technical error and security information.
Some technical information is necessary for the website to function securely. Other information, including certain analytics data, is collected only where permitted by law and subject to your consent where required.
Health-related and sensitive information
Because CSA provides information about social anxiety, information you submit may reveal details about your mental health. Health information can be special-category data under UK and European data protection law and receives additional protection.
Please do not send personal medical records, diagnostic documents, detailed mental-health histories, or other sensitive information through general contact forms or email unless it is genuinely necessary.
Some questionnaires, self-reflection exercises, or educational tools may invite you to consider mental-health-related information. Where a particular tool intentionally collects or stores identifiable health information, we will provide relevant information at the point of collection.
If we intentionally process identifiable special-category data, we must identify both:
- a lawful basis under Article 6 of the applicable data protection law; and
- an additional condition for processing under Article 9.
Depending on the particular activity, the Article 9 condition may be your explicit consent or another condition permitted by law. We will not use identifiable health-related information for unrelated marketing or advertising.
If you voluntarily include health-related information in an email or message, we will limit our use of it to what is reasonably necessary to review and respond to your communication, administer the relevant service, comply with legal obligations, or establish, exercise, or defend legal claims.
How we use personal data
We may use personal data to:
- operate, maintain, secure, and improve the website;
- respond to questions and messages;
- provide requested resources or services;
- manage email subscriptions and preferences;
- process orders and administer customer accounts;
- provide access to courses or digital products;
- keep necessary business, financial, and transaction records;
- understand how people use the website;
- identify technical problems and prevent fraud or misuse;
- comply with legal and regulatory obligations;
- establish, exercise, or defend legal claims.
We do not use personal data to provide individualized medical diagnoses or treatment recommendations.
Email communications
If you subscribe to CSA emails, request a resource, or otherwise agree to receive email communications, we may send you educational content, service information, and relevant updates.
Our email service provider may process information such as:
- your name and email address;
- subscription status and preferences;
- delivery, bounce, and unsubscribe information;
- email opening and link-interaction information, where enabled and permitted.
Our email providers may include Brevo, formerly known as Sendinblue, or another provider disclosed in this policy or at the time of collection.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in an email. We may still send essential transactional or service-related communications when necessary.
Payments and purchases
If you purchase a product, course, or service, payment information may be processed by third-party payment providers such as Stripe or PayPal.
CSA does not normally receive or store your complete payment-card number. Payment providers process payment details under their own privacy and security practices.
We may retain transaction information such as:
- your name and contact details;
- the product or service purchased;
- the transaction date and amount;
- payment status and transaction reference;
- billing information needed for accounting, tax, refunds, or legal compliance.
Website, commerce, and course-related services may include WordPress, WooCommerce, LearnDash, and associated service providers.
Analytics
We may use analytics services, such as Google Analytics or Microsoft analytics tools, to understand how visitors use the website and to improve its content and performance.
Depending on the service and your consent choices, analytics data may include device information, approximate location, pages visited, referral information, interactions, and cookie or similar identifiers.
Analytics cookies or comparable non-essential technologies are used only where permitted by applicable law and subject to consent where required.
We use analytics information to understand general patterns and website performance. We do not use it to diagnose mental-health conditions.
International transfers
CSA is based in the United Kingdom, but some service providers may process personal data in other countries.
When personal data is transferred internationally, we aim to use an appropriate transfer mechanism where required. Depending on the applicable law and destination, this may include:
- a UK adequacy regulation or an EU adequacy decision;
- the UK International Data Transfer Agreement;
- the UK Addendum to the European Commission’s Standard Contractual Clauses;
- the European Commission’s Standard Contractual Clauses;
- another safeguard, certification, or exception recognized by applicable data protection law.
Where required, relevant transfer risks and supplementary protections are also considered.
Lawful bases for processing
The lawful basis we rely on depends on the information involved and why it is being processed.
Consent
We may rely on your consent for marketing emails, non-essential cookies, certain analytics activities, or other optional processing. You can withdraw consent at any time, although this does not affect processing that was lawful before withdrawal.
Contract
We may process personal data when necessary to take steps at your request before entering into a contract or to perform a contract with you, such as processing a purchase or providing access to a paid product.
Legitimate interests
We may rely on legitimate interests to operate and secure the website, respond to ordinary correspondence, prevent misuse, maintain business records, and understand or improve our services, provided those interests are not overridden by your rights and interests.
Legal obligation
We may process or retain information when necessary to meet legal, tax, accounting, regulatory, or reporting obligations.
Special-category data
If we intentionally process special-category data, such as identifiable health information, an Article 6 lawful basis is not sufficient by itself. We must also identify a valid condition under Article 9, such as explicit consent where appropriate, or another condition that applies to the particular circumstances.
Data retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting, tax, security, and dispute-resolution requirements.
Retention periods vary depending on the type of information. For example:
- email subscription data may be retained until you unsubscribe, followed by limited suppression information needed to respect that choice;
- contact correspondence may be retained while an inquiry is active and for a reasonable period afterward;
- order and financial records may be retained for the period required by tax and accounting law;
- account and course information may be retained while the account or service remains active and for a reasonable period afterward;
- security logs and backups may be retained for limited operational and security periods.
We may retain information for longer where necessary to comply with law, resolve disputes, investigate misuse, or establish, exercise, or defend legal claims.
When personal data is no longer required, we aim to delete it, anonymize it, or securely isolate it until deletion is possible.
Your data protection rights
Depending on where you live and the circumstances, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing, including direct marketing;
- receive certain data in a portable format;
- withdraw consent where processing is based on consent;
- raise concerns about automated decision-making;
- complain to a data protection authority.
These rights are not absolute. A request may be limited or refused where an exception applies, but we will explain the relevant reason where required.
To exercise a right, email contact@conquersocialanxiety.com.
We may need to verify your identity before responding. We normally respond within the time required by applicable law and generally do not charge a fee. A reasonable fee may be permitted for requests that are manifestly unfounded or excessive, or for additional copies.
Automated decision-making
We do not currently use personal data to make solely automated decisions that produce legal effects or similarly significant effects concerning you.
Educational quizzes, questionnaires, or self-reflection tools may generate automated feedback based on the answers entered. This feedback is educational and is not a medical diagnosis, clinical assessment, or decision about your eligibility for a service.
Data security
We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.
These measures may include secure hosting, encryption in transit, access controls, software updates, backups, security monitoring, and the use of reputable service providers.
No website, storage system, or internet transmission can be guaranteed to be completely secure. You should avoid sending information through the website or email that is not necessary for the purpose of your communication.
External links
This website may link to websites and services operated by other organizations.
We do not control how external websites collect or use personal data. Their own privacy policies and terms apply when you visit them. We encourage you to review those policies before providing personal information.
Complaints
If you have a concern about how we handle personal data, please contact us first so we can try to address it.
You also have the right to complain to the UK Information Commissioner’s Office:
Make a complaint to the Information Commissioner’s Office
If you live in the European Economic Area or another jurisdiction with a local data protection authority, you may also have the right to complain to the authority responsible for your usual place of residence, place of work, or the location of the alleged infringement.
Changes to this policy
We may update this Privacy Policy when our services, providers, legal obligations, or data-processing practices change.
The latest version will be published on this page with an updated revision date. If a change materially affects how we use personal data, we will provide additional notice where appropriate.
Contact
For privacy questions, requests, or complaints, contact:
Conquer Social Anxiety Ltd
20–22 Wenlock Road
London N1 7GU
United Kingdom
Accessibility
If you have difficulty accessing this Privacy Policy or need it in another reasonable format, please contact us.
For more information about our approach to accessibility, see the Accessibility page.
Continue Learning
These pages provide additional information about privacy, website use, and CSA’s educational boundaries.
Learn how cookies and similar technologies may be used on this website.
Read the terms that apply when using this website and CSA resources.
Read company and legal information for Conquer Social Anxiety.
Contact CSA about privacy, website, accessibility, or professional questions.
Social media and comments
If you interact with CSA through a social-media platform, that platform may process information under its own privacy policy.
Information posted publicly on social media, in public comments, or through other public features may be visible to other people. Please do not publish sensitive personal or health information in a public area.
If commenting features are available, we may moderate, restrict, or remove content to protect users, maintain safety, prevent spam, or enforce website rules.