Privacy Policy


 

Effective date: 19th January 2026
Last updated: 19th January 2026

1) Who we are

Adaptive Resilience Ltd (“we”, “us”, “our”) provides online training programmes including the Executive State Training™ (EST)  (the “Services”).
We are the primary data controller for personal data we collect and use to deliver the Services.

Contact: privacy@statecraft.training
Registered office address:  DNS House, 382 Kenton Road, Harrow, Middlesex, HA3 8DP

2) Where this Privacy Policy applies

This Privacy Policy applies to:

• Our websites and pages that link to it
• Our Kajabi-hosted learning platform (courses, checkout, and member areas)
• Our communications with you (email/support)
 
3) What personal data we collect

We collect the following categories of personal data, depending on how you use the Services:

A. Information you provide

• Name
• Email address
• Billing address and country
• Company name 
• Organisation/company (if provided)
• Password/account credentials 
• Messages you send us (support requests, feedback, forms)
 

B. Payment and transaction data

• Purchase history, invoices/receipts, and payment status
• Payments are processed by third-party payment providers (Stripe/PayPal/Kajabi).
• We do not receive or store full card details.
 

C. Course usage and engagement data

• Enrolments and access status
• Content viewed, progress/completion, timestamps
• Download/activity logs relevant to service delivery and security
 

D. Technical and device data

• IP address
• Device type, browser type, operating system
• Approximate location (derived from IP)
• Log data related to security and performance
 

E. Cookies and similar technologies

• Cookies, pixels, and similar tools used for site functionality, analytics, and remembering preferences (see section 10).
 

4) What we do not intentionally collect

The Services are educational and training-focused. We do not require medical records.
Please do not submit sensitive health information in free-text fields (e.g., support messages).
If you choose to share sensitive information, you do so voluntarily and we will handle it carefully, but we may ask you to remove it or submit it in a safer way.

5) How we use your personal data

We use personal data to:
• Provide access to courses, resources, and member areas
• Create and administer your account and purchases
• Deliver customer support and respond to enquiries
• Send essential service communications (e.g., purchase confirmations, access changes, policy updates)
• Improve and secure the Services (debugging, performance, fraud prevention, account security)
• Run analytics to understand how the platform is used and improve delivery
• Send educational or marketing communications only where permitted and/or where you opt in, and you can unsubscribe anytime
 

6) Our legal bases for processing (UK GDPR)

We process personal data under one or more of these legal bases:

• Contract: to provide the Services you requested or purchased
• Legitimate interests: to secure, operate, and improve the Services (balanced against your rights)
• Consent: for certain optional communications/cookies where required
• Legal obligation: for accounting, tax, and compliance requirements
 

7) Kajabi and other third-party processors

We use trusted third parties to operate the Services. These parties may process personal data on our behalf as processors, and in some cases may act as independent controllers for their own purposes.

Key service providers may include:

• Kajabi (course hosting, account management, checkout, email delivery tools, analytics within the platform)
• Payment processors connected to Kajabi (Stripe/PayPal, depending on your checkout method)
• Video hosting/streaming: Vimeo
• Email and communications tooling (including Kajabi email and/or other providers if connected)

We share personal data only as needed to deliver and secure the Services. Kajabi is hosted on Amazon Web Services (AWS), with primary data storage in the United States.

8) International data transfers and hosting

Our Services are delivered using third-party platforms, including Kajabi, which is hosted on Amazon Web Services (AWS).

As a result, personal data processed through the Kajabi platform is primarily stored and processed in the United States.
Where personal data is transferred outside the UK, we rely on appropriate safeguards under UK GDPR, including Standard Contractual Clauses (SCCs) and equivalent legal mechanisms, to ensure an adequate level of data protection.
We do not offer UK-only or EU-only data residency on the Kajabi platform.

9) How long we keep your data (retention)

We keep personal data only for as long as necessary for the purposes described in this policy, including:

• Maintaining your account and access
• Providing support
• Meeting legal and tax obligations
• Resolving disputes and enforcing agreements

If you request deletion, we will delete or anonymise data where legally permissible. Some records (e.g., invoices) may need to be retained to comply with legal obligations.

10) Cookies and tracking

We and our service providers (including Kajabi) use cookies and similar technologies to:

• Enable site and platform functionality
• Remember preferences
• Understand usage and improve performance
• Support security features

You can control cookies through your browser settings and, where shown, cookie preference tools on the site. Disabling cookies may affect functionality.

11) Marketing communications

If you receive marketing/educational emails from us, you can opt out at any time by using the unsubscribe link in the email or contacting us at: [email protected].
We still may send essential service communications (e.g., purchase confirmations, access notices).

12) Your rights (UK GDPR)

You may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (where legally permitted)
• Restrict or object to certain processing
• Withdraw consent (where processing is based on consent)
• Data portability (in certain circumstances)

To exercise your rights, contact: [email protected]
We may need to verify your identity before completing requests.

13) Security

We use reasonable technical and organisational measures to protect personal data, including access controls and security monitoring.
No online system can be guaranteed 100% secure; you use the Services at your own risk, and we continually improve safeguards.

14) Children

The Services are intended for adults. We do not knowingly collect personal data from children.

15) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change. If changes are material, we will take reasonable steps to notify you (e.g., via the site or email).

16) Contact and complaints

Privacy contact: privacy@statecraft.training
Business: Adaptive Resilience Ltd
Registered office address: DNS House 382 Kenton Road, Harrow, Middlesex, HA3 8DP

If you are unhappy with how we handle your personal data, you also have the right to complain to the UK Information Commissioner’s Office (ICO).

Â