PRIVACY POLICY

Last Updated: July 26, 2026

At FindXtra (“we”, “our”, or “us”), operated under the FindXtra Collective framework, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, submit a member pledge, participate in our pre-launch point engines, or join our community workspace.

1. Important Information & Who We Are

This Privacy Policy applies to all services, waitlists, platforms, and interactive dashboards provided by FindXtra. Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, FindXtra acts as the Data Controller responsible for your personal data.

If you have any questions regarding this Privacy Policy or wish to exercise your legal rights, please contact us at:

  • Data Privacy Lead: privacy@findxtra.com (Replace with your actual contact email)

  • Business Location: United Kingdom

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data depending on your stage in the FindXtra journey:

  • Identity Data: First name, last name, professional role/niche, and portfolio or LinkedIn handles.

  • Contact Data: Email address, geographic location (city/region), and phone number.

  • Pledge & Referral Data: Referral tracking codes, pledge form responses, and client project briefs submitted via our pre-launch forms (Form 1 and Form 2).

  • Engagement & Activity Data: Leaderboard points, event attendance records, community interaction metrics, and subscription billing status.

  • Technical Data: IP address, browser type, time zone setting, and device information gathered when you navigate our website.

3. How We Collect Your Personal Data

We use different methods to collect data from and about you:

  1. Direct Interactions: You provide your Identity, Contact, and Pledge Data by filling out forms on our website (e.g., submitting a waitlist pledge, referring a peer, or submitting a live client project brief).

  2. Automated Technologies: As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions, and patterns via cookies and standard web analytics.

  3. Workspace Operations: When you join the active platform, our management team (Field Leaders and Sub-Managers) logs live event attendance, daily engagement, and referral points to run our gamified ecosystem.

4. How We Use Your Personal Data & Legal Basis

We process your personal data under the following legal grounds and for the explicit operational purposes outlined below:

  • Waitlist & Pledge Tracking

    • Purpose: Managing your entry into the regional waitlist and sending pre-launch updates (e.g., the Day -7 "We Are Going LIVE" notification).

    • Data Types Collected: Identity, Contact, and Pledge Data.

    • Legal Basis: Legitimate Interests (to validate regional market demand and manage pre-launch communications).

  • Pre-Launch & Ongoing Gamification

    • Purpose: Managing public leaderboard scores, point engine tracking, and referral reward rankings.

    • Data Types Collected: Identity and Engagement Data.

    • Legal Basis: Legitimate Interests (to incentivize community growth and measure member participation).

  • 14-Day Free Trial & Paid Subscription

    • Purpose: Activating your workspace access, processing billing transactions, and delivering curated lead packs, resources, and perk vaults.

    • Data Types Collected: Identity, Contact, and Transaction Data.

    • Legal Basis: Performance of a Contract (to deliver our core workspace services and fulfil membership obligations).

  • Community Operations & Direct Support

    • Purpose: Facilitating 1-on-1 check-ins by Field Leaders, resolving platform friction, and sending critical operational updates.

    • Data Types Collected: Identity, Contact, and Engagement Data.

    • Legal Basis: Legitimate Interests (to maintain community health, service quality, and member retention).

5. UK GDPR Leaderboard Compliance & Data Masking

To protect your privacy while running our gamified growth engine, we enforce strict Data Masking Protocols:

  • Public & Shared View Protection: Any public-facing or community-shared leaderboard view will display participant identities using First Name and Last Initial only (e.g., "Sarah K.", "James T.").

  • Prohibited Disclosures: Full names, email addresses, phone numbers, or company affiliations will never appear on any shared leaderboard view.

  • Internal management teams (Field Leaders and Games Managers) maintain secure access to unmasked data solely for verification, point auditing, and reward delivery.

6. How We Share Your Personal Data

We do not sell, rent, or trade your personal data to third parties. However, we may share your data with trusted third parties in the following scenarios:

  • Core Operating Team: Your regional Nationwide Field Leader, News Manager, Events Manager, and Games Manager receive access strictly necessary to manage workspace operations, triage client briefs, and host live events.

  • Service Providers: Infrastructure partners providing web hosting, database storage, email automation, automated breakout software, and payment processing (e.g., Stripe).

  • Founding Perk Partners: Where you explicitly choose to claim a third-party corporate discount or service cashback (e.g., insurance or accounting software), you will be directed to the partner’s portal subject to their privacy terms.

  • Legal Obligations: If required by law, regulation, or court order to disclose personal information.

7. Data Retention & Security

  • Data Security: We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, accessed, or used in an unauthorized way.

  • Data Retention: We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for (e.g., while you are an active waitlist pledger or active subscription member). If you opt out of the waitlist or cancel your membership, your personal identifying data will be securely deleted or anonymized within 30 days, unless a legal requirement dictates longer retention.

8. Your Legal Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the right to:

  • Request Access to your personal data (a "data subject access request").

  • Request Correction of incomplete or inaccurate data we hold about you.

  • Request Erasure ("Right to be Forgotten") of your personal data where there is no good reason for us continuing to process it.

  • Object to Processing of your personal data where we rely on a legitimate interest.

  • Request Restriction of processing your personal data while accuracy or legal grounds are verified.

  • Data Portability: Request the transfer of your data to you or a third party in a structured, machine-readable format.

  • Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please email us at privacy@findxtra.com. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

9. Third-Party Links

Our website and workspace may include links to third-party websites, external client project briefs, software tools, or perk providers. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

10. Changes to This Privacy Policy

We review and update this Privacy Policy regularly to reflect operational shifts across our growth milestones. Any changes will be posted on this page with an updated "Last Updated" date.

If you'd like me to tailor the contact details or specific platform tools (e.g., Slack, Stripe, Typeform) into this template, just let me know!