Privacy Policy

1. Who we are

This site, tristanlevels.com ("the site"), and The 200% Club coaching programme are operated by Tristan Rushworth trading as Tristan Levels, a sole trader ("we", "us", "our"). We are the "data controller" for the personal information described here. You can contact us about anything in this policy at tristan@tristanrushworth.com.

2. What this policy covers

This policy explains what personal information we collect, why we collect it, who we share it with, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018). It covers the site itself and what happens when you join the free 200% Club community, book a call, or work with us as a coaching client.

3. The information we collect

The site itself has no sign-up form

You cannot type any personal details into this site. The "Book a call" and "free cheat codes" buttons send you to our booking system at join.tristanlevels.com, which runs on GoHighLevel. When you sign up or book there you provide your email address, and, if you book or become a client, your name and anything you choose to tell us about your business so we can help you.

Health information: what we deliberately do not collect

ADHD and related conditions are special-category health data. We do not ask for, require, or record whether you have ADHD, any diagnosis, or any other health information, and we do not use any such detail to target, segment, or profile you. If you choose to mention something about your health in conversation, we do not add it to any marketing list.

Information the site collects automatically

• Aggregate, cookieless analytics. We use Cloudflare Web Analytics, which sets no tracking cookies and does not build a profile of you. It reports anonymous, aggregate statistics only (for example, how many people viewed a page).
• Technical and security data. Our host and security provider, Cloudflare, processes your IP address and basic device and browser information to deliver the site and protect it from abuse.

4. Why we use it, and our lawful basis

What we do	Lawful basis (UK GDPR)
Send you the free ADHD cheat codes and occasional marketing emails you asked for	Your consent (Art. 6(1)(a)). You can withdraw it at any time.
Deliver coaching you have purchased and arrange your calls	Performance of a contract with you (Art. 6(1)(b)).
Keep the site secure, prevent abuse, and understand aggregate usage	Our legitimate interests (Art. 6(1)(f)) in running a safe, working site, balanced against your rights.
Keep tax, accounting and business records	Legal obligation (Art. 6(1)(c)).

5. The free community and double opt-in

When you request the cheat codes we send a confirmation email. Your marketing consent takes effect only when you confirm (double opt-in). Confirming gives you access to the free 200% Club community, which we host in GoHighLevel. Every marketing email includes a one-click unsubscribe.

6. Who we share your information with

We do not sell your personal information. We share it only with the service providers ("processors") that help us run the business, under contracts that require them to protect it:

• GoHighLevel: our booking system, email delivery, CRM and the community platform.
• Cloudflare: website hosting, delivery, security and cookieless analytics.
• Our payment processor: a third-party provider that takes coaching payments securely. We do not see or store your full card details.

We may also disclose information if the law requires it, or to establish, exercise or defend legal claims.

7. Sending information outside the UK

Some of our providers (including GoHighLevel) are based in the United States. Where your information is transferred outside the UK, we rely on appropriate safeguards recognised by UK law (such as the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum) so that it stays protected.

8. How long we keep it

• Marketing contacts: kept until you unsubscribe or ask us to delete you, then removed within 30 days.
• Coaching client records: for the length of our work together and then 6 years, to meet tax and limitation requirements.
• Financial records: 6 years, as required by HMRC.
• Security and server logs: a short period set by our host.

9. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you (access);
• have inaccurate information corrected (rectification);
• ask us to delete your information (erasure);
• restrict or object to how we use it;
• ask for your information in a portable format (portability);
• withdraw your consent to marketing at any time; and
• complain to a data protection regulator.

To exercise any of these, email tristan@tristanrushworth.com. We will respond within one month. Exercising your rights is free, and it will not affect the coaching you receive.

10. Marketing choices

You are always in control. Use the unsubscribe link in any email, or email us, and we will stop. Withdrawing consent does not affect any messaging you have already received.

11. Children

The site and The 200% Club are for business owners aged 18 or over. They are not directed at children, and we do not knowingly collect children's data.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed. Significant changes affecting how we use your information will be communicated to active clients and subscribers.

13. How to complain

If you are unhappy with how we have handled your information, please tell us first so we can put it right. If you are in the UK, you also have the right to raise a concern with the Information Commissioner's Office at ico.org.uk/make-a-complaint.