Privacy Policy

Last updated: 18 November 2025

1. Introduction

Eva Wealth is a trading style of Clarus Wealth Ltd ("we", "our", "us"). We are committed to protecting your personal data and respecting your privacy.

This privacy policy explains how we collect, use, and protect your personal information when you register for or purchase tickets to our Reset & Rise workshop.

Data Controller

Clarus Wealth Ltd (trading as Eva Wealth)
Appointed representative of Best Practice IFA Group Ltd
FCA Reference: 581586
Authorised and regulated by the Financial Conduct Authority

This privacy policy is subject to the UK regulatory regime and is targeted at consumers based in the UK.

2. Information We Collect

2.1 Information You Provide

When you register interest or purchase a ticket, we collect:

  • Name - to identify you at the event
  • Email address - to send confirmation and event information
  • Billing address - required by our payment processor (Stripe) for purchases

2.2 Information Collected Automatically

  • Admin authentication cookie - used only for secure admin access (HttpOnly, Secure)
  • IP address - used temporarily for rate limiting to prevent abuse

2.3 Payment Information

Payment card details are processed directly by Stripe, our payment processor. We never see or store your full card details. Stripe is PCI DSS compliant.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent - when you opt in to receive marketing emails about workshops and events
  • Contract - to process your ticket purchase and provide access to the event
  • Legitimate interests - to prevent fraud and abuse of our systems

4. How We Use Your Information

We use your personal data to:

  • Process your ticket purchase and send confirmation
  • Send you event details, updates, and reminders
  • Provide you with pre-workshop materials and post-workshop resources
  • Send you information about future Eva Wealth workshops and events (only if you consented)
  • Verify your attendance at the event

5. Data Storage and Security

Security Measures

Your personal data is encrypted using AES-256-GCM encryption before storage. We use industry-standard security practices to protect your information.

Your data is stored securely using:

  • Vercel KV - encrypted cloud storage (servers located in the EU/UK)
  • Automatic deletion - all registration data is automatically deleted after 90 days

6. Third-Party Processors

We share your data with the following trusted third parties:

Stripe (Payment Processing)

Processes payments securely. PCI DSS Level 1 certified.
Privacy Policy: stripe.com/gb/privacy

Vercel (Hosting & Database)

Hosts our website and securely stores encrypted registration data.
Privacy Policy: vercel.com/legal/privacy-policy

Google Maps (Venue Display)

Provides the interactive venue map on our website.
Privacy Policy: policies.google.com/privacy

Google Fonts (Typography)

Provides fonts for our website design. No tracking cookies.
Privacy Policy: policies.google.com/privacy

All third-party processors are GDPR-compliant and have appropriate data processing agreements in place.

7. Your Data Protection Rights

Under UK GDPR, you have the following rights:

  • Right of access - request a copy of your personal data
  • Right to rectification - request correction of inaccurate data
  • Right to erasure - request deletion of your data (subject to legal obligations)
  • Right to restrict processing - request limitation of how we use your data
  • Right to data portability - receive your data in a portable format
  • Right to object - object to processing based on legitimate interests
  • Right to withdraw consent - unsubscribe from marketing emails at any time

To exercise any of these rights, please contact us at:

Please include "Data Protection Request" in the subject line. We will respond within 30 days.

8. Data Retention

We retain your personal data only as long as necessary:

  • Registration interest - automatically deleted after 90 days
  • Ticket purchases - automatically deleted after 90 days (unless required for legal/accounting purposes)
  • Marketing consent - retained until you withdraw consent

9. Cookies

This website uses minimal cookies:

  • Admin authentication cookie - essential for secure admin access (expires after 1 hour)

We do not use tracking cookies, analytics cookies, or advertising cookies. Third-party embeds (Google Maps, Google Fonts) may set their own cookies as per their privacy policies.

10. Marketing Communications

If you opt in to marketing communications, we will send you:

  • Information about upcoming Eva Wealth workshops and events
  • Exclusive early-bird offers for attendees
  • Resources related to financial empowerment and wellbeing

You can unsubscribe at any time by clicking the "unsubscribe" link in any email or by contacting us at hello@evawealth.co.uk.

11. Complaints

If you have concerns about how we handle your personal data, you can:

Contact Our Complaints Manager

Email: complaints@benchmarkcapital.co.uk
Phone: 01403 334455
Address: Benchmark Capital Limited, Broadlands Business Campus, Langhurstwood Road, Horsham, West Sussex, RH12 4QP

If you cannot settle your complaint with us, you may refer it to the Financial Ombudsman Service (FOS):

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We will notify you of significant changes via email if you have registered with us.

13. Contact Us

If you have any questions about this privacy policy or how we handle your data:

Eva Wealth (Clarus Wealth Ltd)
Email: hello@evawealth.co.uk
Website: evawealth.co.uk

Regulatory Information: Eva Wealth is a trading style of Clarus Wealth Ltd, an appointed representative of Best Practice IFA Group Ltd which is authorised and regulated by the Financial Conduct Authority. Clarus Wealth Ltd is entered on the Financial Services Register under reference 581586. The guidance and information contained within this website is subject to the UK regulatory regime, and is therefore targeted at consumers based in the UK.