Privacy Policy

Last updated: 1 October 2026

This Privacy Policy explains how Treasury Unlocked (“we”, “us”, “our”) collects and uses your personal information when you visit treasuryunlocked.com (the “Website”), use our tools, buy our products or contact us. It also explains your rights and how to use them.

Treasury Unlocked is the “controller” of your personal information, which means we decide how and why it is used. Our contact details are shown in the Website footer, and you can email us about this policy or your information at info@treasuryunlocked.com.

1. The information we collect

We collect information you give us, information created when you use our products, and some information collected automatically when you visit the Website.

  • Contact details: your name and email address when you contact us, create an account, buy a product, use a tool or sign up to our newsletter.

  • Messages: anything you write to us by email or through our contact form.

  • Purchase information: what you bought, the price, the date and your billing details. Your card details are handled by Squarespace Payments and its payment partners. We never see or store your full card details.

  • Account and learning information: your login details, the products in your account, your course progress and which lessons you have completed.

  • Tool registration details: when you register to use a tool, such as the Corporate Treasury Health Check, we collect the details you give at registration, such as your name and email address. Your answers and results are processed automatically by the tool to produce your report, which is shown to you on screen. We don't see, access or store your answers or results.

  • Marketing preferences: whether you have agreed to receive our newsletter, and whether you open our emails or click on links in them.

  • Technical and usage information: your IP address, browser and device type, the pages you visit, what you click on, how you found the Website and how you move around it. This is collected through cookies and similar technologies (see section 8).

We don't ask for sensitive information, such as health information, political opinions or religious beliefs. Please don't send us any.

Please don't give us personal information about other people, for example in a message or a tool. If you do, you are responsible for making sure you are allowed to share it.

You don't have to give us any information. But if you don't give us what we need to provide a product or tool, such as your email address, we won't be able to provide it to you.

2. How and why we use your information

Many data protection laws, such as the UK GDPR, the EU GDPR and similar laws in other countries, require us to have a lawful reason, called a “lawful basis”, for each way we use your information. Here is what we do and why. The same uses apply wherever you live.

  • To provide products you buy, including setting up your account, giving you access, taking payment, sending order confirmations and dealing with cancellations. Lawful basis: performing our contract with you.

  • To provide our tools and show you your results, including the Health Check report. Lawful basis: performing our contract with you, or our legitimate interest in providing the tools you request.

  • To reply to your messages and complaints. Lawful basis: our legitimate interest in answering enquiries and resolving problems.

  • To send you important service emails, such as changes to a product you bought or to our terms. Lawful basis: performing our contract with you.

  • To send you our newsletter and marketing emails, including news, offers, promotions and launches of our products, only if you have agreed. Lawful basis: your consent, which you can withdraw at any time using the unsubscribe link in any email.

  • To email customers about similar products of ours, if you have bought from us and didn't opt out when you bought. You can opt out at any time using the unsubscribe link in any email. Lawful basis: our legitimate interest in telling customers about products similar to those they have bought.

  • To understand how the Website is used and improve it. Lawful basis: your consent for non-essential cookies, and our legitimate interest in improving our products.

  • To keep records for tax and accounting, and to meet our legal obligations. Lawful basis: legal obligation.

  • To protect our business, for example to prevent account sharing, fraud or misuse, and to deal with legal claims. Lawful basis: our legitimate interest in protecting our business and content.

3. Tool results and automated scoring

Our tools, such as the Health Check, work on predetermined rules. Each answer is linked to a set score and to standard comments and recommendations written in advance, and your results are put together automatically from them.

This scoring only produces a report for your own information. It is not used to make any decision about you that has legal or similarly significant effects, such as whether you can buy a product.

Your answers are used only to produce your results automatically. We don't see your answers or results, we don't sell them, and we don't use them for benchmarking.

4. Who we share your information with

We never sell your personal information. Our only service provider is Squarespace, which runs our website, products, payments and emails, together with the partners it uses to provide them. For most purposes it uses your information only on our behalf. For payments, fraud prevention and the security of its platform, Squarespace also uses some information under its own privacy policy.

  • Squarespace: website hosting, forms, accounts, course and tool delivery, emails and analytics.

  • Squarespace Payments: processing payments. Squarespace Payments uses Stripe to process payments and Sift to help detect fraud. Squarespace's own privacy policy and payment terms explain how they handle your information.

  • Font providers: our website displays fonts through Squarespace from Google Fonts and Adobe Fonts. When a page loads, your browser may send your IP address and device information to them.

  • Professional advisers, such as an accountant or lawyer, where needed.

We may also share information if the law requires it, to protect our rights, or if the business is sold or transferred, in which case the new owner will continue to use your information in line with this policy.

Where Squarespace or its partners use information under their own privacy policies, for example for payments, fraud prevention or platform security, they are responsible for that use, not us.

5. Where your information is processed

We are based in the United Kingdom. Squarespace is based in, and may store data in, the United States and other countries. This means your information may be processed in countries other than the one where you live, which may have different data protection laws. Wherever it is processed, we protect your information as described in this policy.

When information is transferred out of the UK or the European Economic Area, we rely on safeguards recognised by data protection law, such as adequacy decisions (including the UK Extension to the EU–US Data Privacy Framework) or standard contractual clauses. You can contact us for more information about these safeguards.

6. How long we keep your information

  • Customer and purchase records: 6 years after the end of the tax year of the purchase, because tax law requires us to keep business records.

  • Newsletter details: until you unsubscribe. After that, we keep only your email address on a suppression list so we don't email you again.

  • Cookies: for the periods Squarespace sets for each cookie (see section 8).

  • All other information, including your account and learning progress, tool registration details, and messages and complaints: only for as long as we need it for the reason we collected it, for example while your account is open or until a query is resolved. We review the information we hold regularly and delete it once it is no longer needed. We don't keep your tool answers or results.

When we delete information, we either erase it or make it anonymous. You can ask us to delete your information sooner (see section 7). We will do so unless we need to keep it by law.

7. Your rights

Depending on where you live, for example in the UK, the European Economic Area, Switzerland, Canada, Australia or some US states, you may have the right to:

  • ask for a copy of the personal information we hold about you;

  • ask us to correct information that is wrong or incomplete;

  • ask us to delete your information;

  • ask us to limit how we use your information;

  • object to us using your information on the basis of our legitimate interests;

  • ask us to send your information to you or another organisation in a commonly used format;

  • withdraw your consent at any time, where we rely on it, for example by unsubscribing from our newsletter.

To use any of these rights, email info@treasuryunlocked.com. We may need to confirm your identity first. We will reply within one month, and there is usually no charge. We will respond to requests as required by the data protection law that applies to you, and we won't treat you differently for using your rights.

We don't sell your personal information, and we don't share it for targeted or cross-site advertising.

If you are unhappy with how we have used your information, please contact us first so we can try to put it right. You can also complain to the data protection authority in your country.

8. Cookies

Our website runs on Squarespace, which sets cookies and similar technologies on our behalf. There are two main types:

  • Necessary cookies, which make the Website work, for example to keep you logged in to your account, remember what is in your basket, complete checkout and keep the site secure. These are always on, because the Website can't work without them.

  • Analytics and performance cookies, which help us understand how visitors use the Website, for example how many people visit, where they come from and which pages they view. These are only set if you accept them in our cookie banner.

Some content from other services, such as embedded videos, may set its own cookies, and only does so with your consent where the law requires it.

You can change your choice at any time using the “Cookie Preferences” link in the Website footer. You can also block or delete cookies in your browser settings, although parts of the Website, such as logging in and checkout, may then stop working.

For a full list of the cookies Squarespace uses, what each one does and how long it lasts, see Squarespace's guide: https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses

9. Keeping your information secure

We use a reputable service provider and take reasonable steps to protect your information, including secure connections, strong passwords and limited access. No website or email system is completely secure, so please keep your own login details private and tell us straight away if you think your account has been misused.

As far as the law allows, we are not responsible for unauthorised access to your information that happens despite the reasonable steps we have taken, or that results from you sharing your login details.

If a security breach affecting your information is likely to put your rights at high risk, we will tell you without undue delay, and report it to the relevant data protection authority where the law requires.

10. Children

You must be at least 18 years old, or the age of legal adulthood where you live if that is higher, to buy a product or create an account. Our products are designed for adults and are not intended for anyone under 18. A parent or guardian may not buy a product or create an account for someone under 18 (see section 1 of our Terms of Service).

We don't knowingly collect information from anyone under 18. If you think someone under 18 has given us their information, please contact us and we will delete it.

11. Links to other websites

The Website may link to other websites and platforms, such as LinkedIn or Udemy. We are not responsible for how they handle your information. Please read their own privacy policies.

12. Our responsibility

This policy explains how we handle your personal information. It does not create any contractual rights or obligations beyond those in our Terms of Service and those required by law. As far as the law allows, our liability to you is limited as set out in section 13 of our Terms of Service.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make a significant change, we will tell you by email or by a notice on the Website.