Privacy Policy

This privacy policy explains what personal data SampleBusinessPlans.net collects when you use our website and the Business Plan Generator, why we collect it and what rights you have over it. We’ve kept it as plain as we can.

Last updated: November 2026.

1. Who this privacy policy covers

This policy applies to anyone who visits SampleBusinessPlans.net, creates an account, buys a plan or add-on, or contacts us. “We”, “us” and “our” mean SampleBusinessPlans.net, which decides how and why your personal data is used. In data protection terms, that makes us the controller.

We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 for users in the UK, and the EU General Data Protection Regulation (EU GDPR) for users in the European Economic Area.

2. The personal data we collect

Account details

When you create an account: your name, email address and password (stored as a secure hash, so we can’t read it). You may also add a business name.

Questionnaire answers and generated plans

To write your plan, the generator asks about your business: what you sell, your market, your prices and costs, your funding needs, and your background and experience. We store your answers and the plans generated from them in your account.

Much of this is business information, but some of it is personal, such as your work history or the amount of your own money you’re investing. Please only include what your plan needs. There’s no need to share health details or other sensitive information unless it’s directly relevant to your business.

Orders and payments

Orders are handled through our online shop system (WooCommerce) and paid through PayPal. We keep a record of each order: what you bought, the price, the date, your name, email address and billing details, and the PayPal transaction reference.

PayPal processes the payment itself. If you pay by card through PayPal, the card details go to PayPal, not to us. We never see or store your full card number.

Support messages

If you contact us, we keep your message, your email address and our reply, so we can help you and keep track of the conversation.

Cookies and technical data

Like most websites, ours uses cookies and similar technologies. Some are essential: they keep you logged in, remember what’s in your basket and protect the site. Others, such as analytics cookies that help us understand how people use the site, are optional. When you first visit, a consent banner lets you accept or reject optional cookies, and we only set them if you agree. You can change your choice at any time through the cookie banner or your browser settings.

Our servers also record basic technical data such as your IP address, browser type and the pages you visit, mainly for security and to fix problems.

3. How we use your data and our legal bases

Data protection law says we need a lawful reason, or “legal basis”, for each use of your data. Here’s how that works for us.

What we do	Data used	Legal basis
Create and run your account	Account details	Contract: we need it to provide the service you signed up for
Generate your business plan	Questionnaire answers, generated plans	Contract
Take payment and deliver your plan and add-ons	Order and payment records	Contract
Keep financial and tax records	Order records	Legal obligation
Answer your questions and handle refunds	Support messages, order records	Contract and legitimate interests (helping customers)
Keep the site secure and prevent fraud or misuse	Technical data, account and order records	Legitimate interests (protecting our users and service)
Understand site usage through analytics	Optional cookie data	Consent, which you can withdraw at any time
Send marketing emails, if we do	Email address	Consent, or where the law otherwise allows; you can unsubscribe at any time

Each use listed in this privacy policy has one of these bases. Where we rely on legitimate interests, we’ve weighed our interests against yours and only go ahead where your rights don’t outweigh them. You can object at any time (see section 8).

4. How your questionnaire answers are processed

To turn your answers into a written plan, we send them to trusted AI processing providers. These providers act as our processors: they handle the data on our instructions, under written contracts, only for the purpose of generating your plan. They’re not allowed to use your data for their own purposes.

We send only what’s needed to write the plan. Your payment details are never sent to these providers.

What this privacy policy means for your business idea

Your business idea and plan are yours. We don’t publish them, sell them or share them with lenders, investors or anyone else. They’re used to provide your plan and support, and kept in your account until you ask us to delete them or close your account.

5. Who we share your data with

We don’t sell your personal data. We share it only with:

• PayPal, to process payments. PayPal acts as an independent controller for payment data and has its own privacy notice.
• Service providers who help us run the site, such as hosting, email delivery, analytics (only with your consent) and the AI processing providers described above. They act on our instructions under contract.
• Professional advisers such as accountants or lawyers, where needed.
• Authorities, where the law requires it, or to protect our rights, our users or the public.
• A future owner of the service, if it’s ever transferred, who would have to protect your data in line with this policy.

6. International transfers

Some of our service providers are based outside the UK or the European Economic Area, or store data there. When your data is transferred abroad, we make sure it’s protected by one of the safeguards data protection law allows. These include transfers to countries with an adequacy decision or UK adequacy regulations, or contracts containing the standard data protection clauses approved for this purpose, such as the EU standard contractual clauses or the UK International Data Transfer Agreement or Addendum.

You can contact us for more information about the safeguards that apply to a particular transfer. If the way we transfer data changes, we’ll update this privacy policy.

7. How long we keep your data

• Account details: for as long as your account is open.
• Questionnaire answers and generated plans: until you delete them or close your account, after which we delete them.
• Order records: for as long as tax and accounting laws require us to keep them, even if you close your account.
• Support messages: for as long as needed to deal with your request and any follow-up, such as a refund.
• Cookie data: for the period shown in the cookie banner, or until you clear your cookies.

8. Your rights

This part of the privacy policy matters most, so we’ve kept it short. Under UK GDPR and EU GDPR you have the right to:

• Access the personal data we hold about you and get a copy.
• Correct data that’s wrong or incomplete.
• Delete your data, where there’s no good reason for us to keep it.
• Restrict how we use your data in certain situations.
• Move data you’ve given us to another service (data portability).
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent where we rely on it, such as for optional cookies, without affecting anything we did before.

To use any of these rights, send a message through our contact page. We may ask you to confirm your identity first. We’ll respond within one month, as the law requires, and tell you if we need longer for a complex request.

Complaints

If you’re unhappy with how we’ve handled your data, please tell us first so we can try to fix it. You also have the right to complain to a data protection authority. In the UK, that’s the Information Commissioner’s Office (ICO). In the EU, it’s the authority in the country where you live or work; the European Commission’s data protection pages explain how to find yours.

9. How we protect your data

We use technical and organisational measures to protect your data, including encrypted (HTTPS) connections to the site, hashed passwords, limited access for the people and providers who need it, and contracts with our processors. No system is perfectly secure, so if we ever have a data breach that’s likely to affect your rights, we’ll tell you and the relevant authority as the law requires.

10. Children

The service is for adults starting or running a business. It’s not aimed at anyone under 18, and our terms and conditions require account holders to be at least 18. If you believe a child has given us personal data, contact us and we’ll delete it.

11. Changes to this privacy policy

We may update this privacy policy when our service or the law changes. We’ll update the date at the top of the page, and if a change is important we’ll tell you by email or with a notice on the site.

Related policies and contact

For the rules on buying and using our plans and add-ons, see our terms and conditions and refund policy. For what a plan and each add-on include, see pricing. Any questions about this privacy policy or your data can go through our contact page, and we’ll reply within one business day.

Privacy Policy FAQs