Legal
Privacy policy
Last updated: November 2026
This policy explains what personal data we collect, why we collect it, who we share it with and the rights you have. It applies to our website, theflipmethod.co.uk, our newsletter and our membership.
Who we are
This website and the membership are run by The Flip Method, a UK business. You can reach us at hello@theflipmethod.co.uk.
We are the controller of the personal data described in this policy. This means we decide how and why it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about your data, email us at hello@theflipmethod.co.uk.
What we collect
When you sign up to our newsletter
- your first name
- your email address
- whether you agreed to receive marketing emails, and the date and time you agreed
- how you found us, such as the page you signed up on and any campaign information in the link you followed (UTM parameters, for example the source, medium and campaign name)
When you contact us
- your name
- your email address
- your message and anything you choose to include in it
When you browse our website, if you accept analytics and marketing cookies
- information about your device and browser
- the pages you visit and how you use them
- your approximate location, based on your IP address
- cookie identifiers set by Google Analytics and Meta
We do not collect this information unless you accept the relevant cookies. See our cookie policy for details.
When you become a member
Your payment and account details are handled by Whop, which runs our checkout, member accounts and course platform. Whop processes your card and payment details under its own privacy policy, and we never see your full card number.
Whop shares some membership details with us, such as your name, email address, membership status, plan, payment dates and whether you have asked for a refund. We use these to run your membership and provide support.
When you join the Discord community, we see your Discord username and profile, and we use it to give you access to the members' channels and alerts. Your use of Discord is also covered by Discord's own privacy policy.
If you claim our First Sale Promise, we will also see the evidence you send us, such as screenshots of your listings and sales history.
Why we use your data and our lawful bases
We can only use your personal data when we have a lawful reason. These are the reasons we rely on:
- Consent. We send marketing emails only if you opted in, and we use analytics and marketing cookies only if you accept them. You can withdraw your consent at any time.
- Contract. We use your membership details to provide the membership you have paid for, including access to the course, alerts, community and wholesale stock, and to handle cancellations, refunds and guarantee claims.
- Legitimate interests. We use your contact details to reply to your enquiries, keep our website secure, prevent misuse of the membership and improve our service. We only do this where it does not override your own rights and interests.
- Legal obligation. We keep some records, such as payment and refund records, because the law requires us to, for example for tax purposes.
How long we keep your data
- Newsletter. We keep your details until you unsubscribe. After that, we keep a short record of your email address and the date you unsubscribed, so we make sure we do not email you again.
- Contact messages. We keep these for 24 months after our last reply, then delete them.
- Analytics. Data is kept according to each provider's settings. For Google Analytics 4, we keep user-level data for 14 months.
- Membership records. We keep these while you are a member and for up to 6 years afterwards, to meet our tax and accounting obligations and to deal with any claims.
Who we share your data with
We do not sell your personal data. We share it only with service providers who help us run our business. They act on our instructions and must keep your data secure.
| Provider | What they do for us | Data involved |
|---|---|---|
| Supabase | Database that stores newsletter signups and contact messages | Name, email, consent record, UTM information, messages |
| Resend | Email delivery for newsletters, replies and notifications | Name, email, email content |
| Vercel | Website hosting | IP address and technical data from website requests |
| Whop | Payments, member accounts, course hosting and membership management | Name, email, payment details, membership status |
| Google Analytics | Website analytics, with your consent | Device, pages visited, approximate location, cookie identifiers |
| Meta Pixel | Advertising measurement, with your consent | Device, pages visited, actions on the site, cookie identifiers |
| Discord | Members' community and deal alerts | Discord username, profile and messages in the server |
Some of these providers, such as Whop, Google, Meta and Discord, also act as separate controllers for some of the data they hold, and their own privacy policies apply to that use.
We may also share data with professional advisers, such as accountants or lawyers, or where the law requires us to, for example with HMRC or the police.
International transfers
Some of our providers store or process data outside the UK, mainly in the United States. When this happens, we make sure your data is protected by one of these safeguards:
- UK adequacy regulations, which confirm that the destination country protects personal data to a suitable standard
- the UK Extension to the EU-US Data Privacy Framework, where the US provider is certified under it
- the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU standard contractual clauses
You can ask us for more information about the safeguards for a particular provider.
Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you and get a copy of it
- rectification, which means asking us to correct data that is wrong or incomplete
- erasure, which means asking us to delete your data
- restriction, which means asking us to limit how we use your data
- object to us using your data where we rely on legitimate interests, and to object to direct marketing at any time
- data portability, which means asking for your data in a format you can take to another service
- withdraw consent at any time, where we rely on your consent
To use any of these rights, email us at hello@theflipmethod.co.uk. We will respond within one month. We may need to ask you to confirm your identity first. Some rights have exceptions, for example we may need to keep payment records for tax purposes, and we will explain if one applies.
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.
Unsubscribing from emails
Every marketing email we send has an unsubscribe link at the bottom. You can also email us at hello@theflipmethod.co.uk and we will remove you.
If you are a member, we will still send you emails about your membership, such as access details and important changes, because these are part of the service.
Under-18s
Our website and membership are for adults aged 18 and over. They are not directed at children, and we do not knowingly collect data from anyone under 18. If you think someone under 18 has given us their data, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last updated. If we make a significant change, we will tell you by email or with a notice on our website.
Contact us
For any question about this policy or your personal data, email us at hello@theflipmethod.co.uk.