Privacy Policy

Who we are

GWOP University is operated by Simple Strategy Consulting LLC, Boston, MA.

For anything in this policy, write to info@thegwopblueprint.com.

What this policy covers

This policy covers the GWOP University website and product. It does not cover any other website you reach from ours, including IdentityIQ — see “Who else receives your information” below.

What you give us

You can complete our seven-question assessment without an account and without paying. We ask for:

• First name — to personalise your plan and any follow-up
• Last name — optional
• Email address — to send your plan and marketing emails
• Mobile number — for marketing text messages, only if you consent
• The topic you want help with — so follow-up is relevant

The seven questions ask you to pick one answer from a fixed list: where you are financially, roughly what range your credit score is in, how much emergency savings you have, whether you budget, what you are building toward, and your biggest obstacle. Every answer is your own statement about yourself. We do not check any of it.

We hold no credit report and no credit score. The credit question asks you to choose a range yourself, and “I don’t know” is one of the options. We never obtain a credit report, never contact a credit bureau, and receive nothing about you from any credit reporting agency.

Text message consent

The consent box is optional and unchecked by default. If you tick it, we record that you agreed, the exact wording you were shown, the date and time, and the internet address your device was using.

We keep the wording itself so that if a question ever arises we can show what you agreed to, rather than what the website says today.

If you do not tick it, we still keep you as a contact and simply send you no text messages.

Your account and payment

If you create an account we hold your name, email, phone number and marketing preference.

Card details are entered on Stripe’s own payment page, not ours. Card numbers never reach our website or our records. We keep only the amount, the currency, the date, and Stripe’s reference numbers for the transaction.

What we collect automatically

The internet address of your device

When you submit a form, and when our staff act on an account. Part of the consent record, fraud prevention, and our internal security log.

Your browser and device type

When you submit a form.

Which website or advertisement you came from

To know which marketing is working.

Which printed QR code you scanned

To attribute a signup to a specific event.

General page-view analytics are currently switched off.

What we record as you use the product

• Which levels you have access to, and from when
• Which lessons you started and finished, how far through a video you reached, and when you first opened a lesson. This also serves as evidence of delivery if a charge is later disputed
• Certificates you earn
• Actions our staff take on your account, including the staff member’s internet address

Who else receives your information

The following are service providers acting on our instructions. Everything is stored in the United States.

GoHighLevel

Name, email, phone, topic of interest, your consent record and the wording shown, where you came from, and the date. After the assessment: email, phone, your seven answers, and which plan you were given. Used for email and text follow-up.

Supabase

Hosts our database. Receives everything described above.

Vercel

Hosts our website. Receives website traffic, including internet addresses.

Cloudflare

Receives your internet address and browser details at the moment you submit a form, to block automated spam.

Stripe

Receives your name, email and card details, entered on Stripe’s own page, to process payment.

PostHog

Product analytics. Receives an account identifier, the event name, and a fixed list of non-personal details — which level, which plan, the amount and currency. No name, email, phone number or assessment answers.

IdentityIQ — nothing is exchanged

We show an optional link to IdentityIQ, a separate company that sells credit monitoring. You click the link and sign up directly with them, on their website, under their terms.

The link contains nothing but our referral code. We send IdentityIQ nothing about you and receive nothing about you back. We may earn a commission if you sign up, and we say so on the page.

We do not sell your information

We do not sell it, and we do not share it for advertising that follows you across other websites. It goes only to the providers listed above, for the purposes listed.

Who can see it

Course PDFs are held in private storage and can only be opened through a temporary link that expires. Nothing is publicly reachable by guessing a web address.

• You can see only your own information
• Course content is available only for the levels you bought
• Contact records and assessment answers cannot be read by any logged-in customer at all. The database refuses the request outright, for every customer account, without exception. Only our own server processes can read them, and only to send your plan and update our customer system
• These limits are built into the database rather than only into the website, so a fault in the website cannot expose one customer’s records to another

How long we keep it, and asking us to delete it

We keep your information for as long as we need it to provide the product and to meet our legal, tax and accounting obligations. We are setting defined retention periods with our attorney and will publish them here once they are settled.

You can ask us to delete your information by writing to info@thegwopblueprint.com. We handle these requests by hand, so allow us a reasonable period to respond.

Some records we must keep even after a deletion request — payment records for tax purposes, and our internal log of staff actions on accounts. We will tell you what we have kept and why.

Your choices

Text messages: reply STOP to any message to opt out, or HELP for assistance. Consent is not a condition of purchase.

Marketing emails: use the unsubscribe link in any email.

Access and correction: write to info@thegwopblueprint.com and we will tell you what we hold about you, or correct it.

Children

GWOP University is intended for adults. We do not knowingly collect information from anyone under 18.

Changes to this policy

If we change this policy we will post the change here and update the date above.