THE BUSINESS MOUNTAIN LTD
PRIVACY POLICY
Effective date: 14 September 2026
The Business Mountain Ltd is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you:
* visit or use our websites;
* create an account;
* purchase goods, books, Digital Products or services;
* join a Membership or subscription;
* access podcasts, videos or other restricted content;
* contact us;
* enter a competition, promotion or prize draw;
* subscribe to marketing communications; or
* otherwise interact with The Business Mountain Ltd.
This Privacy Policy applies to:
www.thebusinessmountain.com
www.rabbitts.com
It also applies to associated online shops, customer accounts, Membership areas, contact forms and digital services operated by or on behalf of The Business Mountain Ltd.
Please read this Privacy Policy carefully so that you understand how we handle your personal information.
1. Who We Are
The data controller responsible for your personal information is:
The Business Mountain Ltd
A company registered in England and Wales
Company registration number: 7790661
Registered office:
287 High Street
London Colney
St Albans
Hertfordshire
AL2 1EU
Email: hello@thebusinessmountain.com
Websites:
www.thebusinessmountain.com
www.rabbitts.com
In this Privacy Policy, “we”, “us” and “our” mean The Business Mountain Ltd.
2. Data-Protection Law
We process personal information in accordance with applicable UK data-protection legislation, including the UK General Data Protection Regulation, the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations 2003.
UK data-protection law requires organisations to explain the purposes for which personal information is used, the lawful basis relied upon, how long it is retained, who it may be shared with and the rights available to individuals.
3. Personal Information We May Collect
We may collect and process the following categories of personal information.
3.1 Information You Provide to Us
You may provide information when you:
* create an account;
* purchase a product, service or Membership;
* download a Digital Product;
* subscribe to a mailing list;
* complete a form;
* contact us by email, telephone, social media or another method;
* request information or support;
* submit a review or testimonial;
* enter a competition, promotion or prize draw;
* report a problem with a Website; or
* communicate with us for another business purpose.
This information may include:
* your name;
* business or organisation name;
* job title;
* postal, billing and delivery addresses;
* email address;
* telephone number;
* account and login information;
* order and purchase information;
* Membership or subscription details;
* correspondence and customer-service records;
* preferences and marketing choices;
* reviews, comments or other content you voluntarily submit; and
* any other information you choose to provide.
3.2 Payment Information
Payments may be processed by third-party payment providers, currently including Stripe and PayPal. Each provider processes your payment information under its own terms and privacy policy, and its data-protection role depends on the activity concerned:
* Stripe may act as our processor for the payment processing it carries out on our instructions, and as a controller for other activities it carries out for its own purposes, such as fraud prevention, risk management and legal and regulatory compliance;
* PayPal processes payment information in accordance with its own applicable payment-data terms and privacy policy.
We may receive information such as:
* payment status;
* transaction reference;
* payment method;
* billing address;
* fraud-screening results; and
* limited payment-card information, such as the card type and final digits.
Full payment-card details are normally collected and processed directly by the relevant payment provider and are not stored by us.
3.3 Information Collected Automatically
When you visit or use a Website, certain information may be collected automatically, including:
* Internet Protocol address;
* browser type and version;
* device type;
* operating system;
* screen resolution;
* language and time-zone settings;
* Website pages visited;
* products or content viewed;
* links selected;
* referring Website;
* dates and times of visits;
* page-response times;
* download errors;
* time spent on pages;
* Website interaction information;
* login and account activity; and
* security, diagnostic and performance information.
This information may be collected through cookies, server logs and similar technologies.
3.4 Information Received from Other Sources
We may receive personal information from:
* payment processors;
* delivery and fulfilment providers;
* online marketplaces;
* Website, hosting and technology suppliers;
* email and communications providers;
* analytics and security services;
* social-media platforms;
* professional advisers;
* publicly available sources; and
* business partners where lawful.
We may combine information received from these sources with information collected directly from you.
4. How We Use Personal Information
We may use personal information to:
* process and fulfil orders;
* provide Digital Products and downloads;
* administer customer accounts;
* provide and manage Memberships and subscriptions;
* provide access to podcasts, videos, courses and restricted materials;
* arrange delivery of Physical Products;
* process payments and refunds;
* issue invoices, receipts and order confirmations;
* communicate about purchases, accounts and services;
* respond to enquiries, complaints and support requests;
* verify identity and account ownership;
* protect our Websites, customers and systems;
* detect and prevent fraud, chargebacks, misuse and unlawful activity;
* maintain business, tax, accounting and transaction records;
* improve our products, services and Websites;
* conduct research, testing, analysis and statistical reporting;
* understand Website use and customer preferences;
* manage promotions, competitions and prize draws;
* request or publish reviews and testimonials with appropriate permission;
* send marketing communications where legally permitted;
* protect and enforce our legal and intellectual-property rights;
* comply with legal, regulatory and contractual obligations; and
* establish, exercise or defend legal claims.
We will not use personal information for purposes that are incompatible with those explained in this Privacy Policy unless permitted or required by law.
5. Lawful Bases for Processing
We process personal information only where we have a lawful basis.
Depending upon the circumstances, we may rely upon:
5.1 Performance of a Contract
Processing may be necessary to:
* take steps at your request before entering into a contract;
* process an order;
* provide a product, service, Membership or Digital Product;
* administer a customer account;
* arrange delivery;
* process a payment or refund; or
* provide customer support connected with a contract.
5.2 Legal Obligation
We may process information where necessary to comply with legal obligations, including:
* accounting and tax requirements;
* consumer-protection obligations;
* fraud-prevention requirements;
* regulatory requests;
* court orders; and
* other applicable legal duties.
5.3 Legitimate Interests
We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights.
These interests may include:
* operating and improving our business;
* administering our Websites;
* maintaining Website and account security;
* preventing fraud and misuse;
* responding to business enquiries;
* maintaining customer records;
* understanding how products and services are used;
* protecting our intellectual property;
* recovering sums lawfully due; and
* establishing, exercising or defending legal claims.
Where we rely upon legitimate interests, we consider the necessity and proportionality of the processing and its effect upon individuals.
5.4 Consent
We may rely upon consent where you have actively agreed to a particular use of your personal information.
This may include:
* certain marketing communications;
* non-essential cookies and similar technologies;
* publishing particular photographs, testimonials or content; or
* another activity for which consent is appropriate.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing undertaken before consent was withdrawn.
5.5 Other Lawful Bases
In limited circumstances, processing may be necessary to protect vital interests or to perform a task in the public interest.
The lawful basis used can affect which individual rights apply.
6. Orders, Downloads and Memberships
Where you purchase from us, we may process information necessary to:
* accept and administer your order;
* provide order confirmation;
* supply downloads or online access;
* establish and maintain your account;
* administer Membership access;
* record consent to immediate digital supply where applicable;
* manage renewals and cancellations;
* deal with failed payments or chargebacks;
* provide customer service; and
* retain records required for legal, tax and accounting purposes.
Access and transaction records may be retained as evidence that Digital Products, Membership content or other services were supplied.
7. Marketing Communications
We may send information about products, services, books, Digital Products, Memberships, podcasts, promotions or business resources where:
* you have consented;
* the law permits us to contact you as an existing customer; or
* another lawful basis applies.
Electronic marketing to individuals will normally require consent unless a recognised exception applies. Every marketing email should provide a clear method of unsubscribing.
You may opt out at any time by:
* selecting the unsubscribe link in a marketing email;
* changing available account preferences; or
* contacting hello@thebusinessmountain.com.
We may retain limited information about your opt-out request so that we can respect your preferences.
Service communications concerning an order, account, security matter, Membership or contractual change are not marketing communications and may still be sent where necessary.
8. Cookies and Similar Technologies
Our Websites may use cookies and similar technologies to:
* operate essential Website functions;
* keep shopping baskets and accounts working;
* maintain Website security;
* remember user choices;
* understand Website use;
* assess performance;
* improve content and services; and
* support advertising or marketing where permitted.
Where required, we will request consent before placing non-essential cookies or using similar technologies.
Essential technologies may be used without consent where permitted by law.
You can manage available choices through the Website cookie banner or your browser settings. Blocking some technologies may affect Website functionality.
The Privacy and Electronic Communications Regulations operate alongside UK data-protection law and contain specific rules covering cookies and electronic marketing.
Further information should be provided in the separate Cookie Policy displayed on the relevant Website.
Where we use analytics or performance tools (for example Google Analytics, provided through Google Site Kit, and Jetpack/WordPress statistics) to understand how the Website is used, these operate under their providers’ terms; where they are not strictly necessary, we request your consent through the Website’s cookie banner before they are used.
Do Not Track and Global Privacy Control. Some web browsers and privacy tools can send a “Do Not Track” (DNT) signal, or a Global Privacy Control (GPC) or similar preference signal, to the websites you visit. Our consent-management tool is configured to detect these signals and, where one is present, to treat it as a request to withhold consent to non-essential cookies and similar technologies. There is no single finalised industry standard governing how such signals must be interpreted, and we keep our approach under review and will update this Privacy Policy if it changes.
Third parties, such as analytics providers, may receive or collect information about your use of the Website through cookies and similar technologies. Depending on those third parties’ own settings, configuration and terms, they may be able to collect information relating to your online activities over time and, in some cases, across different websites and online services. Details of the third parties we use, and how to manage or withdraw consent for non-essential cookies and similar technologies, are set out in this Privacy Policy and in the separate Cookie Policy, and through the Website’s cookie controls and your browser settings.
9. Sharing Personal Information
We may share personal information with trusted third parties where necessary and lawful, including:
* payment processors;
* banks and financial institutions;
* delivery, postal and fulfilment providers;
* our website and shop platform (WordPress and WooCommerce), website developers and administrators, and hosting and cloud-service providers, which host and operate the Website and store order and account information on our behalf as our processors;
* email and communications providers;
* customer-management and Membership platforms;
* analytics, security and fraud-prevention providers;
* online marketplaces and sales platforms;
* accountants, auditors, insurers and professional advisers;
* debt-recovery or dispute-resolution providers;
* regulators, courts, government bodies and law-enforcement authorities;
* a purchaser, investor or adviser involved in a proposed sale, merger, restructuring or transfer of the business; and
* another person where you have authorised the disclosure.
Service providers may process personal information only for agreed purposes and must provide appropriate protection.
We do not sell personal information to advertisers.
Fulfilment of physical merchandise. Physical merchandise is produced and dispatched on our behalf by third-party print-on-demand and fulfilment providers, currently including suppliers within the Printify network and Printful. Where you order physical merchandise, we share the order details necessary for fulfilment (such as the design ordered, your delivery name and USA delivery address) with the relevant provider. These providers act as our processors and process that information only to manufacture, fulfil and deliver your order in accordance with their data-processing terms; a provider within the Printify network may engage the manufacturing print provider as a sub-processor. We do not send the details of digital-image, document, podcast, membership or externally-purchased book orders to any print-on-demand or fulfilment provider.
10. Business Transfers
If The Business Mountain Ltd, its business or substantially all of its assets are sold, transferred, merged or reorganised, personal information may be disclosed to prospective purchasers and their professional advisers and may form part of the transferred business assets.
Any disclosure will be limited to what is reasonably necessary and subject to applicable data-protection law.
11. International Transfers
Some service providers may store or process personal information outside the United Kingdom.
Where personal information is transferred to a separate organisation outside the UK and the transfer is restricted under UK data-protection law, we will use an appropriate lawful safeguard.
This may include:
* a UK adequacy regulation;
* an approved international data-transfer agreement;
* an approved addendum to standard contractual clauses;
* another legally recognised safeguard; or
* a permitted exception where appropriate.
The ICO’s international-transfer guidance was updated in January 2026 and explains that UK GDPR restrictions apply when personal information is sent or made accessible to a separate organisation outside the United Kingdom.
Because physical merchandise is fulfilled in the United States, where you order physical merchandise the delivery information necessary to fulfil that order is transferred to our fulfilment providers in the United States. Where such a transfer is restricted under UK data-protection law, we rely on an appropriate safeguard, such as UK-approved standard contractual clauses or the UK International Data Transfer Addendum incorporated in the relevant provider’s data-processing terms.
You may contact us for further information about safeguards relevant to your personal information.
12. How Long We Retain Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:
* providing products and services;
* maintaining accounts and Memberships;
* responding to enquiries and complaints;
* satisfying tax, accounting, legal and regulatory obligations;
* preventing fraud and misuse;
* enforcing contracts and licences; and
* establishing, exercising or defending legal claims.
Different categories of information may be retained for different periods.
When determining a retention period, we consider:
* the nature and sensitivity of the information;
* the purpose for which it is used;
* the duration of the customer relationship;
* legal and regulatory requirements;
* applicable limitation periods;
* security and fraud-prevention requirements; and
* whether the information can be securely deleted or anonymised.
Retention schedules help organisations document what information is held, why it is retained and the appropriate retention period.
When information is no longer required, we will delete it, anonymise it or securely restrict its use, subject to technical and legal requirements.
By way of indication: order, invoice and transaction records are ordinarily retained for at least six years after the relevant tax year to meet accounting and tax obligations; account and membership information is retained for the life of the account and a reasonable period afterwards; marketing preferences are retained until you opt out and for a short period afterwards to record your choice; and general enquiry correspondence is retained for a reasonable period after the matter is closed.
13. Security
We use reasonable technical and organisational measures intended to protect personal information against:
* accidental or unlawful loss;
* destruction;
* alteration;
* unauthorised disclosure;
* unauthorised access; and
* other unlawful processing.
Measures may include access controls, passwords, restricted permissions, secure hosting, backups, software updates, monitoring and appropriate service-provider arrangements.
However, no Website, internet transmission or storage system can be guaranteed to be completely secure.
Customers are responsible for keeping account passwords confidential and for notifying us promptly if they suspect unauthorised access.
14. Your Data-Protection Rights
Depending upon the circumstances and the lawful basis relied upon, you may have the right to:
* be informed about how your personal information is used;
* request access to personal information held about you;
* request correction of inaccurate or incomplete information;
* request deletion of information;
* request restriction of processing;
* object to certain processing;
* object to direct marketing;
* request transfer of information in a structured, commonly used and machine-readable format;
* withdraw consent where processing is based upon consent; and
* complain to a supervisory authority.
These rights are not absolute and may be subject to legal conditions or exemptions.
To exercise a right, contact:
We may request information reasonably necessary to verify your identity and locate the relevant records.
We will respond within the period required by applicable law.
15. Right to Object to Direct Marketing
You have the right to object at any time to the use of your personal information for direct-marketing purposes.
Where you object, we will stop using your information for that purpose.
You can object by selecting the unsubscribe link in a marketing email or by contacting:
16. Complaints
Please contact us first if you have any concern about how your personal information has been handled.
Email: hello@thebusinessmountain.com
Postal address:
The Business Mountain Ltd
287 High Street
London Colney
St Albans
Hertfordshire
AL2 1EU
You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office
Current contact and complaint information is available through the Information Commissioner’s Office.
17. Children’s Information
Our Websites, products, Memberships and services are not directed at children unless a particular product or service expressly states otherwise.
Customers must be at least 18 years old to create an account, place an order or enter into a binding contract unless a parent, guardian or other authorised adult is involved.
We do not knowingly seek to collect personal information directly from children without an appropriate lawful basis and, where required, parental or guardian involvement.
If you believe that a child has provided personal information to us improperly, please contact us.
18. Reviews, Testimonials and Submitted Material
Where you voluntarily provide a review, testimonial, photograph, comment or other material, we will use it only in accordance with applicable law and any permission provided.
We may contact you to verify a submission or request permission to publish it.
Submitting an enquiry, suggestion or comment does not automatically transfer ownership of your personal information or intellectual-property rights to The Business Mountain Ltd.
You should not provide confidential, commercially sensitive or third-party personal information unless you have authority to do so.
19. External Websites and Social Media
Our Websites may contain links to third-party websites, services and social-media platforms.
Those organisations operate under their own privacy policies and may collect information independently.
We do not control and are not responsible for the privacy practices, security or content of external websites or platforms.
You should review the relevant third party’s privacy information before providing personal information.
For example, our books are purchased from external retailers such as Amazon/Kindle Direct Publishing. When you follow a book link you leave our Website, and any purchase is completed on the retailer’s platform under the retailer’s own terms and privacy policy. We do not receive or process the payment or fulfilment information for externally-purchased books.
20. Automated Decision-Making
We do not ordinarily make decisions producing legal or similarly significant effects solely through automated processing.
Fraud-prevention, payment or security providers may use automated tools to assess transactions or activity.
Where applicable, further information may be available from the relevant provider.
21. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
* law or regulatory guidance;
* our Websites;
* products and services;
* technologies and suppliers;
* our business operations; or
* how personal information is processed.
The latest version will be published on the relevant Website and will show the effective date.
Where appropriate, we may also notify customers or members by email or through their account.
You should review this Privacy Policy periodically.
22. Copyright and Trade Marks
Website content, publications, templates, documents, designs, graphics, photographs, branding and other materials may be protected by copyright, trade-mark and other intellectual-property laws.
Unless otherwise stated, copyright and associated intellectual-property rights are owned by Virginia Rabbitts and are used, published, distributed, marketed and commercially exploited by The Business Mountain Ltd under licence.
No personal-information submission transfers ownership of Website content, trade marks or Company intellectual property.
The Business Mountain name, branding and associated marks may not be used without prior written permission from Virginia Rabbitts or The Business Mountain Ltd acting within the authority granted under its licence.
23. Contact Us
Questions, requests or complaints concerning this Privacy Policy should be sent to:
The Business Mountain Ltd
Company registration number: 7790661
Registered office:
287 High Street
London Colney
St Albans
Hertfordshire
AL2 1EU
Email: hello@thebusinessmountain.com
Websites:
www.thebusinessmountain.com
www.rabbitts.com
⸻
Get in touch — we’re friendly and sociable.
We would be pleased to hear from you. You can use the contact form on either Website or connect with us through our official social-media channels.