Privacy Policy

PRIVACY & COOKIES POLICY — X2 METHOD LIMITED

Version: 1.0
Effective Date: 1/1/2026
Controller: X2 Method Limited, Company Number 16789095
Registered Address: 2 Butterfly Meadows, Beverley, HU17 9GA, United Kingdom
Email Contact: privacy@x2method.com

1. Who We Are

We are X2 Method Limited. We operate online training, coaching and membership services directed at small businesses and entrepreneurs. We also operate digital marketing funnels including quizzes and other lead magnet tools.

We are the “controller” of your personal information for the purposes of data protection law. You can contact us about privacy by emailing privacy@x2method.com

2. What This Policy Covers

This policy explains how we collect and use personal information when you:

  • visit our websites or landing pages
  • complete quizzes or lead magnets
  • enrol in or access our membership community (hosted on Skool)
  • register for coaching, training or events
  • purchase services
  • interact with us by email or messaging
  • respond to our marketing or advertising
  • follow our content on social platforms

This policy does not cover third-party platforms we do not control. If you submit personal information to those platforms (e.g., Stripe, Meta, Google or LinkedIn), please refer to their own privacy policies.

3. Changes to This Policy

We may update this policy periodically to reflect operational or legal changes. The effective date above will always indicate the latest version. Material changes may also be notified by email or via our websites. By continuing to use our services after the effective date, you accept the revised terms.

4. What Personal Information We Collect

We may collect the following categories of personal information:

4.1 Information You Provide Directly

Including:

  • name
  • business name (if applicable)
  • email address
  • telephone number
  • postal or billing address
  • payment information (handled directly by Stripe — we only receive limited billing metadata)
  • account login details (for membership access)
  • communication content (email, chat, comments, posts)
  • quiz responses and survey data
  • preferences (e.g., topics, training interests)
  • marketing permissions

4.2 Information Collected Automatically

Including:

  • IP address
  • device identifiers
  • browser type & version
  • operating system & platform
  • request timestamps
  • referral URLs
  • usage activity within our websites and membership area
  • cookie and tracking data (see section 10)

4.3 Information Provided by Third Parties

We may receive information from:

  • Payment providers (Stripe billing metadata)
  • Advertising platforms (e.g., Meta, Google, LinkedIn analytics and conversion reporting)
  • Email platform (Engagement analytics from Encharge)
  • Skool (membership authentication and usage metadata)
  • Publicly available sources (e.g., social profiles)

We do not collect special category data (e.g., health, political opinions, religion) and we do not target children.

5. How We Use Personal Information & Legal Basis

We process personal information for the following purposes under UK-GDPR:

5.1 Contract Performance

Necessary for entering into or performing a contract with you, including:

  • creating and managing accounts
  • delivering training, coaching and membership content
  • providing customer support
  • processing payments
  • sending contractual communications (service updates, login information, renewals)

5.2 Legitimate Interests

For purposes including:

  • improving our services and user experience
  • operating secure IT systems
  • monitoring usage and engagement
  • preventing fraud or abuse
  • personalising recommendations based on quiz responses
  • direct marketing of relevant services to existing customers or prospects who have expressed interest
  • producing aggregated analytics and business intelligence

You may object to processing on legitimate interest grounds (see section 9).

5.3 Consent

We rely on consent where required for:

  • email marketing to new subscribers (PECR)
  • optional newsletters
  • non-essential cookies (advertising, tracking, social pixels)
  • profiling for digital advertising where consent is required
  • custom audience matching where applicable

You may withdraw consent at any time.

6. Quizzes, Lead Magnets & Profiling

We operate quizzes and other lead magnet tools that collect information to:

  • assess challenges or needs
  • personalise recommendations
  • segment audiences
  • tailor follow-up content and marketing

This may constitute “profiling” under UK-GDPR. We do not make legally significant automated decisions. You may object to profiling for direct marketing purposes at any time.

7. Digital Advertising, Pixels & Audience Building

We use advertising platforms including Meta, Google, YouTube and LinkedIn to acquire traffic and optimise marketing. This may involve:

  • pixel tracking / tags
  • conversion measurement
  • retargeting
  • audience segmentation
  • frequency capping
  • attribution reporting

Where required by law (e.g., for non-essential cookies), we obtain consent before activating such technologies.

We may in future use custom audience lists (e.g., email -> Meta upload) based on Legitimate Interests. Individuals can opt out of such use at any time by contacting us.

8. Sharing Your Information With Service Providers

We use carefully selected service providers acting as “processors”. These include:

  • Skool – membership hosting & community platform
  • Stripe – payment processing
  • Encharge – email automation & nurture sequences
  • Supabase – application database & hosting for quizzes
  • Cloud hosting/CDN providers – site performance & security (e.g., Cloudflare or equivalent)
  • Analytics & ad platforms – Meta, Google, LinkedIn
  • Email delivery providers
  • IT security & support vendors

Processors are contractually obliged to safeguard personal information.

We may also share personal information with:

  • law enforcement/regulators (compliance & fraud)
  • insurers and legal advisors (risk & claims)
  • prospective acquirers (business transfer scenarios)

We do not sell personal data.

9. International Transfers

Some of our processors are located outside the UK, including the United States. Where this occurs, we rely on approved safeguards such as:

  • Standard Contractual Clauses (SCCs) issued by the European Commission, together with the UK Addendum, or
  • International Data Transfer Agreement (IDTA) issued by the ICO, or
  • other legally recognised mechanisms

Information stored within Supabase, Skool, Encharge or advertising platforms may be processed outside the UK as part of their global infrastructure.

10. How Long We Retain Information

We retain personal data for no longer than necessary for the relevant purpose:

  • Contractual & account data: up to 6 years after contract end (legal & tax considerations)
  • Marketing data: until withdrawal of consent or objection
  • Quiz & segmentation data: until no longer operationally required or upon request for deletion
  • Cookie data: according to the lifetime disclosed in cookie settings/preferences

11. Your Rights

Under UK-GDPR you may have the following rights:

  • access to your personal information
  • correction of inaccuracies
  • erasure in certain circumstances
  • restriction of processing
  • data portability
  • withdrawal of consent
  • objection to processing based on legitimate interests
  • objection to profiling for direct marketing

To exercise rights, contact us using the details in section 1. We may require verification.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe we are not handling your personal information lawfully. See: www.ico.org.uk

12. Cookies & Tracking Technologies

We use cookies and similar technologies for:

  • session management
  • authentication
  • preferences
  • analytics
  • advertising/retargeting
  • performance & security

Non-essential cookies (including advertising & analytics) will not be set without your consent. Cookie preferences can be adjusted at any time through our cookie control tools or browser settings.

Rejecting cookies may impair site functionality.

13. Third-Party Links & Integrations

Our services may contain links to external websites or platforms (e.g., social networks, payment portals). We are not responsible for their privacy practices and encourage you to review their policies.

14. Contact Us

If you have questions about this policy or wish to exercise your rights, contact:

X2 Method Limited
Email: privacy@x2method.com
Address: 2 Butterfly Meadows, Beverley, HU17 9GA, United Kingdom