Privacy Policy

Last updated: 13th October 2026

This policy explains how I collect and use your personal data when you use matt-haycox.com, sign up to my emails, listen to or appear on my podcasts, apply to work or invest with me, or buy my courses and programmes.

1. Who I am

matt-haycox.com is run by Matthew Haycox, known as Matt Haycox, as a sole trader. I’m the controller of your personal data, which means I decide how it’s used and I’m responsible for it.

For anything about this policy or your data, email [email protected].

2. What I collect

What you give me

• Newsletter and free downloads: your name and email address.
• Contact and enquiry forms (contact, borrow from me, invest with me, send me deals, introduce to me, speaker booking, media, sponsorship): your name, email, phone number, company, your message, and the details of your deal or funding need, including amounts.
• Podcast guest applications: your name, contact details, your story and links to your profiles.
• Job applications: your CV, contact details, work history and anything else you send.
• Course, community and programme purchases (for example Capital Catalyst, Capital Raiser and Growth HQ): your name, email, billing details and application answers. My payment provider handles card payments. I never see or store your full card number.
• Calls and events: your booking details. I record a call only when I tell you at the start.
• Podcast and event appearances: if you appear on one of my shows, I publish your voice, image and what you say.

What I collect automatically

• Your IP address, device and browser type, the pages you visit, the site you came from, and how you use my site. I collect this with cookies and similar technologies (see section 9).
• Whether you open my emails and click the links in them.

What I get from others

• If you use Sign in with Google, the name, email and profile picture Google shares with me.
• Referral details from SparkLoop if you subscribed through another newsletter’s recommendation.
• Public business information (for example from Companies House or LinkedIn) when I look at a deal or funding enquiry you’ve sent me.

I don’t ask for special category data, such as health, ethnicity or religion. Please leave it out of forms and CVs.

3. How I use it and my lawful basis

I don’t make decisions about you by automated processing alone where they have legal or similarly significant effects.

4. Who I share it with

I don’t sell your data. I share it with:

• Service providers who process data for me: my website host and WordPress; Google (Analytics, Tag Manager, Workspace, Sign in with Google); HighLevel/LeadConnector (CRM and email); beehiiv (newsletter); SparkLoop (newsletter referrals); OptinMonster (sign-up forms); Typeform (applications); Calendly (call booking); Stripe (payments); Skool (community and courses); Riverside (podcast recording); and Meta, Google and YouTube for advertising, where you’ve agreed to it.
• The people who work with me, such as my assistants, editors and developers, where they need your details to do their job.
• Lenders, investors and partners you’ve asked to be introduced to. If you come to me for funding, for example, I may pass your enquiry to a lender or partner who can help. I’ll tell you before I do.
• My professional advisers, such as lawyers and accountants, and authorities where the law requires it.
• A buyer if I sell all or part of the business.

5. International transfers

I’m based in Indonesia, the people who work with me are in several countries, and several of my providers are in the US. When your data goes outside the UK or the European Economic Area, I protect it with an adequacy decision (including the UK-US Data Bridge and EU-US Data Privacy Framework for certified US companies), or with standard contractual clauses (the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses). Email me for a copy of the safeguard that applies.

6. How long I keep it

• Newsletter subscribers: until you unsubscribe. I remove anyone who hasn’t opened an email in 24 months.
• Enquiries I don’t take forward: 24 months.
• Customers: for as long as you’re a customer, then 6 years for tax and legal claims.
• Job applicants: 12 months after the role is filled, unless you agree to me keeping your details longer.
• Analytics data: 14 months.
• Published podcast episodes: indefinitely, as part of the public archive.

7. Your rights

You can:

• get a copy of your data;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how I use it, including stopping direct marketing at any time;
• have your data moved to another provider;
• withdraw your consent at any time.

Email [email protected] to use any of these rights. I reply within 1 month. There’s no charge unless a request is clearly unfounded or excessive.

8. Complaints

If you’re unhappy with how I’ve handled your data, email [email protected] first. I acknowledge every complaint within 30 days and tell you the outcome without undue delay. You can also complain to the data protection authority where you live. In the UK that’s the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

9. Cookies

Strictly necessary cookies run without consent. I only set analytics and advertising cookies after you accept them in the cookie banner. The full list, and how to change your choice, is in the Cookie Policy. [link to /cookie-policy/]

10. Children

My site and services are for adults and aren’t intended for anyone under 18. I don’t knowingly collect data from children.

11. Other websites

My site links to other sites, including my other businesses and the podcast platforms. Each has its own privacy policy, and I’m not responsible for how they use your data.

12. Changes

I’ll update this policy when anything changes, and email you about significant changes.