Privacy policy
Shopify Privacy Policy – Founders Funding Summit Store
This policy explains how we collect and use your personal data when you visit or buy from the Founders Funding Summit online store, where we sell Founders Funding Summit tickets and e-books from The Founders' Library. It explains our processing under the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), each as amended, including by the Data (Use and Access) Act 2025.
This policy works alongside the Founders Funding Summit Privacy Policy at www.foundersfundingsummit.com, which covers ticket applications, attending the summit, website accounts and The Founders' Library in full.
1. Who we are
The store is operated by Medigi Limited, a company registered in England and Wales (company number 11953188), with its registered office at 71-75 Shelton Street, London, WC2H 9JQ. We are the data controller for the personal data described in this policy.
ICO registration number: ZC239977
Contact: helpdesk@foundersfundingsummit.com
The store is powered by Shopify, which hosts it and processes payments.
2. What we collect
2.1 Information you give us
Contact details: your name, email address and, if you give it, phone number and company name.
Order information: the tickets or e-books you buy, order number, amount paid, billing address and payment status.
Payment information: processed securely by Shopify and its payment partners. We do not see or store your full card details.
Account and library information: your account email, whether it is confirmed, and your e-book or ticket entitlements.
Communications: anything you send us, for example a support request or a refund request.
Marketing preferences: whether you have opted in to or out of marketing.
2.2 Information collected automatically
Device and usage information: your IP address, browser and device type, pages viewed, and how you arrived at the store. Strictly necessary information is collected to run the store and checkout. Analytics and marketing information is collected only with your consent (see section 5).
2.3 Information from others
From Shopify and its payment partners, to confirm your order and payment.
From our main website, to link your store order to your account and ticket or library access.
We do not collect delivery addresses, because everything we sell is supplied digitally or as an event ticket.
3. How we use your information and our legal basis
Under the UK GDPR we must have a legal basis for each use of your personal data.
To process your order, take payment, send your ticket, and supply your e-books: performance of a contract with you (Article 6(1)(b)).
To provide your account and library access, and send service messages about your orders: performance of a contract.
To prevent fraud, keep the store secure and investigate misuse of e-book copies: our legitimate interests in protecting our business, customers and copyright (Article 6(1)(f)).
To keep accounting and tax records: legal obligation (Article 6(1)(c)).
To handle questions, complaints and refund requests: performance of a contract and our legitimate interests.
To understand how the store is used: your consent for analytics cookies.
To measure and show our advertising: your consent for marketing cookies.
To send you marketing emails: your consent, or the soft opt-in (see section 4).
To establish, exercise or defend legal claims: our legitimate interests.
We do not make decisions about you using automated processing that has legal or similarly significant effects.
4. Marketing
We send marketing emails about our events and e-books only if you have opted in, or under the "soft opt-in" in regulation 22 of PECR where you have bought from us and were given a clear chance to opt out. Buying an e-book or ticket does not, on its own, sign you up. We do not send marketing by text message or post.
You can unsubscribe at any time using the link in any marketing email, or by emailing helpdesk@foundersfundingsummit.com. You will still receive service messages about your orders and account.
5. Cookies and similar technologies
5.1 The store uses cookies and similar technologies. Some are strictly necessary to run the store, your basket and secure checkout, and are set without consent. Others are for analytics (to understand how the store is used) or marketing (to measure and show our adverts, for example on Facebook and Instagram). We set analytics and marketing cookies only if you agree.
5.2 When you first visit, a cookie banner lets you accept or reject optional cookies. Rejecting is as easy as accepting, and you can still shop if you reject. You can change your choice at any time using the cookie or privacy settings link in the store footer, or by clearing cookies in your browser.
5.3 Most store cookies are set by Shopify. Their names, purposes and how long they last are listed in Shopify's Cookie Policy. Choices you make on our main website are not automatically carried over to the store, so please set your preferences here too.
6. Who we share your information with
We do not sell your personal data. We share it only where needed, with:
Shopify and its payment partners: to host the store, process payments, prevent fraud and manage orders (see section 7).
Our website, account and library providers: to link your order to your account and unlock your ticket or e-books.
Customer relationship management (CRM) providers: our own CRM and, where we use it, HubSpot, to manage enquiries, orders and our relationship with you.
Apps installed in our store: for example to deliver digital products and record your agreement to our terms.
Email service providers: to send order, account and, where allowed, marketing emails.
Analytics and advertising providers such as Google and Meta (Facebook and Instagram): only if you consent to analytics or marketing cookies.
Professional advisers such as accountants and solicitors, where needed.
Law enforcement or regulators, where the law requires it.
A buyer of our business, if we sell or transfer all or part of it.
7. Our relationship with Shopify
The store is hosted by Shopify, which processes your information to provide, secure and improve the store and checkout. For services it provides to us, Shopify acts as our processor. For its own services, such as Shop Pay, the Shop app and certain fraud-prevention and enhanced features that use data from your interactions across Shopify-powered stores, Shopify acts as an independent controller and is responsible for that processing, including responding to your rights requests about it. See the Shopify Consumer Privacy Policy and the Shopify Privacy Portal at privacy.shopify.com for details.
8. International transfers
Some of our providers, including Shopify, Google and Meta (and HubSpot, if we use it), may process your data outside the UK, for example in Canada, the United States or the EU. Where this happens, we rely on UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the ICO's International Data Transfer Addendum to the EU Standard Contractual Clauses. Contact us if you would like details of the safeguards that apply.
9. How long we keep your information
Order and accounting records: six years, as tax law requires.
Account and e-book purchase records: for as long as needed to provide your continuing access to e-books you have bought. Ticket library access lasts 12 months from ticket purchase.
Download records: only as long as needed to administer access, investigate misuse or handle legal claims.
Customer service messages: usually up to 24 months after your last contact with us.
Marketing preferences: until you unsubscribe, after which we keep a record so we do not contact you again.
Shopify's retention for its own services is explained in its privacy policy.
10. How we protect your information
We use appropriate technical and organisational measures to protect your data, including secure, reputable providers and restricted access. No system is completely secure, so please do not send sensitive information to us by unsecured channels.
11. Your rights
Under the UK GDPR you have the right to:
access the personal data we hold about you;
correct inaccurate or incomplete data;
erase your data in certain circumstances;
restrict how we use your data;
data portability: receive your data in a portable format or have it sent to another organisation;
object to processing based on our legitimate interests, and to direct marketing at any time; and
withdraw consent at any time where we rely on it, without affecting processing before you withdrew.
To use any of these rights, email helpdesk@foundersfundingsummit.com. We may need to verify your identity. We will respond within one month, as the law requires. Some rights have exceptions, for example we must keep accounting records even if you ask us to delete your data.
12. Complaints
If you are unhappy with how we have handled your personal data, please contact us first at helpdesk@foundersfundingsummit.com. We will acknowledge your complaint within 30 days and respond without undue delay. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
13. Children
The store is for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us so we can delete it.
14. Links to other websites
Our main website, www.foundersfundingsummit.com, is also run by Medigi Limited and is covered by the Founders Funding Summit Privacy Policy. The store also links to websites run by others, such as government sources. Their own privacy policies apply, and we are not responsible for them.
15. Changes to this policy
We may update this policy to reflect changes in our practices or the law. We will always publish the current version on this page. We will tell account holders about significant changes by email.
16. Contact us
Medigi Limited, 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom
Email: helpdesk@foundersfundingsummit.com
ICO registration number: ZC239977