This policy explains how ChallengeStacker.com and Hodgkinson Publishing Ltd collect, use, protect, and share personal information.
1. Scope Of This Privacy Policy
ChallengeStacker is operated by Hodgkinson Publishing Ltd, a company based in the United Kingdom (“ChallengeStacker”, “we”, “us”, or “our”). This policy applies when you visit ChallengeStacker.com, purchase or use a membership, access the member area, contact support, interact with emails or checkout pages, or otherwise communicate with us.
ChallengeStacker is intended primarily for business, commercial, professional, entrepreneurial, educational, and organisational use.
2. Personal Information We Collect
Information you provide
- Name, business name, email address, and account information.
- Billing details, purchase information, transaction references, and membership status.
- Support messages, feedback, testimonials, survey responses, and other communications.
- Information submitted through forms, checkout pages, or the member portal.
Payment information
Payments are processed by third-party payment processors. We do not intentionally store complete payment card numbers on our own systems. We may receive limited payment information such as your name, email address, billing address, transaction ID, payment status, payment method type, tax information, and fraud-screening information.
Technical and usage information
- IP address, browser, device type, operating system, referring URL, and approximate location.
- Login activity, access records, security logs, error logs, and member portal usage.
- Information needed to prevent fraud, abuse, unauthorised access, scraping, or account sharing.
3. How We Use Personal Information
We may use personal information to:
- Create and manage member accounts and provide access to ChallengeStacker.
- Process recurring membership payments, issue receipts, and manage billing.
- Provide support, investigate technical or account issues, and maintain support records.
- Protect the website, member portal, tools, users, and intellectual property.
- Send access instructions, account notices, security alerts, service updates, policy updates, and permitted marketing communications.
- Maintain, improve, troubleshoot, and develop ChallengeStacker.
- Comply with legal, tax, accounting, regulatory, and record-keeping obligations.
4. Lawful Bases For Processing
Where UK GDPR, EU GDPR, or similar laws apply, we may rely on contract, legitimate interests, legal obligation, or consent. Legitimate interests may include operating and improving the service, preventing fraud, securing accounts, protecting intellectual property, maintaining business records, and communicating with business contacts.
5. Cookies, Local Storage, And Similar Technologies
ChallengeStacker.com may use strictly necessary cookies, local storage, session storage, or similar technologies to operate the website, maintain secure sessions, remember essential preferences, prevent fraud, and provide requested functionality.
The ChallengeStacker builder and exported challenge files may use browser local storage to remember theme choices, project state, participant progress, reflections, and other local settings. This information is generally stored in the user’s browser or downloaded by the user rather than saved by ChallengeStacker on our servers.
We do not use third-party tracking cookies unless this policy is updated and any legally required consent is obtained.
6. Third-Party Service Providers
We may use providers for hosting, member access, checkout and payment processing, email, support, security, fraud prevention, and technical infrastructure. Member login is currently provided through ProductDyno. These providers may process limited personal information as necessary to provide services to us.
Our websites and services may be hosted or processed outside the United Kingdom or European Economic Area. Where required, we use appropriate contractual and legal safeguards for international transfers.
7. AI Tools, Challenge Projects, And Exported Files
ChallengeStacker does not provide or resell AI processing. Members use their own chosen AI service to generate planning content. Any prompts or content submitted to an external AI provider are governed by that provider’s terms and privacy policy.
ChallengeStacker does not intentionally store members’ editable challenge project files or finished challenge exports. Members download and manage their own Project JSON and HTML files. We may still process ordinary account, billing, support, and technical information needed to operate the membership.
Do not submit passwords, API keys, card details, health information, confidential client data, children’s data, trade secrets, regulated data, or other sensitive information to third-party AI services unless you have a lawful basis and appropriate safeguards.
8. Retention And Security
We keep personal information only for as long as reasonably necessary to provide the service, maintain records, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements. Payment, invoice, accounting, and tax records may be retained for six or seven years where required.
We use reasonable technical and organisational measures designed to protect personal information. No website, portal, payment system, or internet transmission can be guaranteed completely secure. You are responsible for keeping login details confidential.
9. Your Data Protection Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, withdraw consent, or object to direct marketing. We may need to verify your identity before responding.
We do not sell personal information for money and do not knowingly share personal information for cross-context behavioural advertising.
ChallengeStacker is not directed at children or anyone under 18, and we do not knowingly collect personal information from children.
10. Third-Party Links
Our website, member area, tools, and materials may link to third-party websites, AI providers, payment services, hosting providers, or other resources. We are not responsible for their privacy practices, security, content, or policies.
11. Changes To This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.
12. Contact
For privacy, data protection, account, billing, or support enquiries, use our Support Desk.