Last updated: August 2026
This Privacy Notice for Tiny Monkey Studios (“we”, “us”, or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal data.
We take your privacy seriously and are committed to protecting the privacy of your personal data. We put great effort into making sure that the personal data we process is safe and used properly.
Personal data is information that, alone or in combination with other information, could be used to identify you. Your name, address, photograph, video, or voice can all be considered personal data.
This Privacy Policy explains our data practices, and the choices available to you regarding use of, access to, and how to update and correct your personal data and other information in connection with your use of our website steveallsworth.com and our services (referred to in this policy as “services”).
We are not responsible for the privacy policies or privacy practices of clients or other third parties, including YouTube or other social media platforms.
By using our services, you consent to the policies and practices described in this Privacy Policy. If you disagree with any of the practices described in this Privacy Policy, you should not use our services. If you have any questions or concerns, please contact us at info@steveallsworth.com.
Tiny Monkey Studios is the data controller responsible for your personal data (referred to as “we”, “us”, or “our” in this Privacy Policy).
Legal entity: Tiny Monkey Studios
Email: info@steveallsworth.com
Postal address: 3 Dallington Road, Hove, BN3 5HS, UK
We mainly collect personal data directly from you when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us. For example, you voluntarily provide us with personal data when you complete a web form, email us directly, request a free trial of our Services, or engage in any of our workshops or courses.
The types of personal data we collect vary based on the services we offer, but generally include your full name, email address, address and phone number, and other information that you voluntarily give to us.
When you purchase any of our services through our website, we will collect the information you choose to upload to your account, which may include additional personal information such as your image, voice, or video.
We may also collect information provided, posted, or uploaded by users to the Steve Allsworth Instagram page, Steve Allsworth Facebook Group, or the Steve Allsworth YouTube Channel, which may include personal information. We do not control content posted by users on these platforms. You should carefully consider whether you wish to submit personal data or make your profile available to other users, and review any additional terms and conditions that govern your use of those services.
As you interact with our website, we may collect information about your computer or device and your visits to our website (automatically collected data) through cookies, web beacons, and other technologies, IP address/URL tracking, and other tools (collectively, tracking technologies). This may include search terms used, new or returning user information, browser information, computer or device type, operating system, internet service provider, website usage, referring/exit pages, platform type, date/time stamp, number of clicks, and ads viewed. See the [Tracking Technologies section] below.
To be clear about why we process each type of personal data, and under which lawful basis (as required by UK GDPR), here’s a category-by-category breakdown:
We do not collect sensitive data about you (this includes details about race, ethnicity, religious beliefs, sex life, sexual orientation, political opinions, trade union membership, or health, genetic, or biometric data), and we do not collect information about criminal convictions or offences.
Where we’re required to collect personal data by law, or under a contract with you, and you don’t provide that data when asked, we may be unable to perform the contract — for example, delivering a course you’ve purchased. If this happens, we’ll let you know at the time.
We’ll only use your personal data for the purpose it was collected for, or a reasonably compatible purpose. If we need to use it for something unrelated, we’ll tell you and explain the legal basis first. We don’t carry out automated decision-making or profiling.
We use the personal data we collect from you (unless otherwise restricted by law) to:
We also use your contact details to send information we think may interest you. If you don’t want to receive marketing materials or emails from us, you can tell us your preferences by contacting us using the details below, submitting a contact form, or clicking “unsubscribe” at the bottom of any marketing email.
Where required by applicable law (for example, if you are an EU or UK data subject), we will only send you marketing information with your consent, given at the time you provided your personal data. If you don’t give us consent, we won’t send you this information (see the [EU/UK Data Subjects section](#euuk-data-subjects) for more on your rights). California residents should also see the [California Residents section](#us-california-residents).
With your permission, we may use information you provide as a testimonial in our promotional materials.
If you communicate with us by email, web form, or any other channel, we may keep the communication and the information it contains, and use it for business purposes including responding to your inquiry and marketing (see the Marketing section above for how to opt out).
We collect information about your IP address and your use of our website to help us improve it. We may use this information to diagnose problems with our server, administer our website, analyse trends, track visitor movements, understand preferences, enhance security, and investigate an actual or potential security incident.
For EU/UK data subjects, this use is necessary for our legitimate interests in understanding how our website and services are used, improving your experience, and ensuring network and information security. See the [EU/UK Data Subjects section](#euuk-data-subjects) for more on legitimate interests.
We may compile, anonymise, and/or aggregate your personal data and other information as described in this Privacy Policy, and use it for our business purposes, including disclosing it to partners, service providers, advertisers, and/or other third parties for marketing or promotional purposes. Aggregate information does not identify you, and we may keep it indefinitely.
For EU/UK data subjects, this use is necessary for our legitimate interests in understanding how to improve the services we offer.
Our contract with you governs our relationship, so any information we receive about you during this process will only be used for the purposes of performing the services agreed with you.
We do not process sensitive information
All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes.
In short: We may share information in specific situations described in this section and/or with the following third parties.
We only disclose personal data that we collect in accordance with the terms in this section. We share your personal data with third parties who provide services to us, and we expressly authorise these third parties to process your personal data on our behalf, for the purpose of providing these services. Our service providers include:
We may also disclose personal data to third parties in the following circumstances:
We store your information in the cloud and use third-party providers, such as ActiveCampaign and Google Cloud Platform. We do not designate a fixed country for data storage, so your data may be stored outside your own country. Data privacy laws in other countries may offer different protections from the laws in your country. By using our services or submitting your personal data, you agree to the transfer of your personal data as described in this Privacy Policy. If you don’t agree to such cross-border transfers, please don’t submit your personal data through our website.
We aim to work only with reputable third-party providers who commit to protecting personal information and provide a reasonable level of data protection appropriate to the type of data involved.
We use interfaces with social media platforms owned or controlled by third parties, such as YouTube, Facebook, Instagram, and LinkedIn (“Social Media Sites”). If you “like” or share information through any Social Media Site, its interface may allow that platform to connect your website visit to your personal data. Information you share with Social Media Sites is governed by their own privacy policies and terms, not this Privacy Policy. Review a platform’s privacy policy before interacting with our pages there.By providing a testimonial specifically, you agree we may use it in our marketing and advertising, with or without reward.
In short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies (such as web beacons and pixels) to gather information when you interact with our Services. Some tracking technologies help us maintain security, prevent crashes, fix bugs, save your preferences, and support basic site functions.
We also permit third parties and service providers to use tracking technologies on our Services for analytics and advertising, including managing and displaying advertisements, tailoring ads to your interests, or sending abandoned-cart reminders (depending on your communication preferences). These third parties use their own technology to provide advertising tailored to your interests, which may appear on our Services or elsewhere.
To the extent these tracking technologies are deemed a “sale” or “sharing” under applicable US state laws (including targeted advertising as defined under those laws), you can opt out by emailing info@steveallsworth.com.
See our Cookie Policy for more detail on how we use cookies and how you can manage your preferences.
We may share information with Google Analytics to track and analyse use of the Services, including Demographics and Interests Reporting. To opt out of Google Analytics tracking, visit the Google Analytics opt-out page. You can also manage Google Analytics Advertising Features through Ads Settings, or opt out generally via the Network Advertising Initiative. See Google’s Privacy & Terms page for more.
We connect software to YouTube Channels and use API-collected data for analysis. This data does not generally contain personal information, though it may reference a specific “point in time” on a video and extract a short snippet, which could occasionally contain incidental personal information not intentionally collected. This is used solely to analyse channel performance and deliver our services.
You have the right to access your personal data, and we will allow you to access, correct, amend, or delete inaccurate data. If you write to us requesting removal of your data, we will respond within a reasonable timeframe. You cannot request that your data be identified or extracted from anonymised or aggregated data.
Upon request, we will confirm whether we hold any of your personal data. You may access, update, correct, or request removal of your personal data by contacting us in writing (see [Contact Us](#how-can-you-contact-us-about-this-notice) below). We typically respond within thirty (30) days; if we can’t meet that timeframe, we’ll provide an estimated date. If we deny a request, we will explain our reasons.
If you are an EU or UK data subject, see the [EU/UK Data Subjects section](#euuk-data-subjects) below for information on your rights.
In short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless otherwise required by law.
We only keep your personal information for as long as necessary for the purposes set out in this notice, unless a longer period is required or permitted by law. In deciding how long to keep data, we consider its amount, nature, and sensitivity, the potential risk of harm from unauthorised use or disclosure, the purposes for processing it, whether those purposes could be achieved another way, and any applicable legal requirements.
For tax and accounting purposes, UK law requires us to keep basic customer records (such as contact, identity, and transaction data) for six years after you stop being a customer. Account and course-access data is generally kept for as long as your account remains active.
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymise it, or, if that isn’t possible (for example, because it’s stored in backup archives), we will securely store and isolate it from further processing until deletion is possible. We may anonymise your personal data for research or statistical purposes, in which case we may use that anonymised information indefinitely.
Neither party is liable for lost profits, lost opportunities, or indirect or consequential losses arising from advice, coaching, or content we provide. Our total liability for any claim relating to a program is capped at the amount you paid us for that program. You agree to indemnify us against losses arising from your breach of these terms.
None of this limits liability for death or personal injury caused by our negligence. These liability provisions are governed by English law; if any part is found unenforceable, the rest remains in effect. This section survives termination of these terms.
We do not knowingly collect, solicit data from, or market to children under 18, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to their use of the Services. If we learn that we’ve collected personal information from a user under 18, we will deactivate the account and take reasonable steps to promptly delete that data. If you become aware of any data we may have collected from a child under 18, please contact us at info@steveallsworth.com.
By using our services, you agree to the terms of this Privacy Policy and any other terms and conditions we publish on this website or provide directly to you (collectively, “these terms”). If you don’t agree, please don’t use our services. Any dispute over privacy or the terms contained in this Privacy Policy is governed by the laws of England and Wales, and subject to the exclusive jurisdiction of the courts of England and Wales — consistent with our Terms & Conditions.
We may update this Privacy Policy from time to time, for any reason, by posting a new version online. Your continued use of our services and/or continued provision of your personal data is subject to the then-current Privacy Policy. We encourage you to review this page periodically. The date at the top of this policy shows when it was last updated.
This section applies if you are an individual located in the United Kingdom or European Union (including the European Economic Area countries of Iceland, Liechtenstein, and Norway, and, where applicable, Switzerland).
Tiny Monkey Studios is the data controller for the processing of your personal data.
Subject to applicable law, you have the following rights in relation to your personal data:
If we have shared your personal data with a third party and you exercise a right above, wherever possible we will contact them to action your request and let you know.
You can exercise your rights by contacting us in writing using the Contact Us section below.
Legitimate interests refer to the way we conduct and manage our business. For example, we have a legitimate interest in analysing how our website and services are used, and in ensuring network and information security, as described in this Privacy Policy.
When we process your personal data based on legitimate interests, we consider and balance any potential impact on you and your rights under data protection law. Our legitimate interests don’t automatically override yours. You have the right to object, in writing, to processing based on our legitimate interests — see Your Rights above.
Where we transfer personal data outside the UK or European Economic Area, we do so using appropriate safeguards recognised under UK and EU data protection law, such as Standard Contractual Clauses, or by relying on an adequacy decision covering the destination country, where applicable. We prioritise working with reputable third-party providers who take meaningful steps to protect personal information, even where full independent verification of their compliance isn’t possible.
We take reasonable steps to secure your personal data and use a variety of security procedures to help protect against unauthorised access. However, we cannot guarantee or warrant the security of any information transmitted to us or to/from our online products or services over the internet, and we accept no liability for the security of information transmitted this way. If you have questions about this Privacy Policy or the security of your personal data, please contact us using the Contact Us section below.
We retain your personal data for as long as your account is active or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.
This Privacy Policy only addresses our own use and disclosure of your personal data. When you visit another website, please read that site’s own privacy policy carefully.
Tiny Monkey Studios is a UK-based business. Where our services are used by residents of the United States, we may be subject to the regulatory enforcement powers of the U.S. Federal Trade Commission in relevant circumstances. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concern that we haven’t addressed satisfactorily, you can contact the UK Information Commissioner’s Office (ICO), free of charge.
This section provides additional details about the rights of California consumers under the California Consumer Privacy Act (CCPA).
The What Information Do We Collect section describes the personal information we may have collected over the last 12 months, including the categories of sources. We collect this information for the purposes described in How We Use Information, and share it as described in Disclosure of Information.
If you have questions or comments about this notice, email us at info@steveallsworth.com
