The Unlimited Co.
Last updated: 10 December 2025
This Privacy Policy is a first draft prepared to reflect how The Unlimited Co. operates. It is not legal advice. Have it reviewed by a qualified solicitor or data protection adviser before publishing, and confirm your lawful bases and data processor list are accurate.
1. Who we are
This policy explains how PITUATO TECH LTD trading as The Unlimited Co. (“we”, “us”, “our”) collects and uses your personal data when you visit gettheunlimited.com, contact us, or subscribe to our services. For the purposes of the UK General Data Protection Regulation and the EU General Data Protection Regulation (together, “GDPR”), we are the data controller of your personal data. Registered office: 71-75 Shelton Street, London, WC2H 9JQ Company number: 16327665 Data protection contact: [PRIVACY CONTACT NAME / ROLE], privacy@gettheunlimited.com
2. The data we collect
We collect and process the following categories of personal data:
Information you give us. Your name, email address, business name, billing details and any information you include when you complete a form, book a call, submit a request or correspond with us.
Payment information. When you subscribe, payment is processed by Stripe. We do not store your full card details on our systems. We receive limited information such as your name, billing country and confirmation of payment.
Booking information. When you book a call through Calendly, we receive the details you provide, such as your name, email and any notes, along with the scheduled time.
Technical and usage data. When you visit our website we collect information such as your IP address, browser type, device, pages viewed and how you arrived, gathered through cookies and analytics tools described below.
Request content. Materials, briefs, files and instructions you submit to your request board so we can deliver your work.
3. How we use your data and our lawful bases
We use your personal data for the following purposes, relying on the lawful bases shown.
- To provide and manage your subscription and deliver your requests. Lawful basis: performance of a contract.
- To take payment and manage renewals through Stripe. Lawful basis: performance of a contract.
- To respond to enquiries and schedule calls. Lawful basis: legitimate interests, being able to respond to people who contact us, or performance of a contract where you are a customer.
- To send service communications about your account, requests and subscription. Lawful basis: performance of a contract.
- To send marketing emails where you have agreed to receive them. Lawful basis: consent, which you may withdraw at any time.
- To understand and improve how our website performs. Lawful basis: consent for non-essential cookies and analytics, and legitimate interests in running our business.
- To meet legal, accounting and tax obligations. Lawful basis: legal obligation.
- To protect our business and enforce our terms. Lawful basis: legitimate interests.
4. Cookies
Our website uses cookies and similar technologies. Essential cookies are needed for the site to function. Non-essential cookies, including analytics, are only set where you have given consent through our cookie banner.
You can manage or withdraw cookie consent at any time through the cookie settings on our website, and control cookies through your browser settings. Blocking some cookies may affect how the site works.
[CONFIRM AND LIST: the specific cookies set, their purpose and duration, following a cookie audit.]
5. Analytics
We use Google Analytics, provided by Google, to understand how visitors use our website, such as which pages are viewed and how people navigate the site. This helps us improve the site and our services.
Google Analytics sets cookies and processes usage data, which may include a truncated or full IP address depending on configuration. We set analytics only where you have consented. Google processes this data as described in its own privacy documentation. Where this involves transfers outside the UK or EEA, appropriate safeguards apply as set out in section 8.
[CONFIRM: whether IP anonymisation is enabled and whether any other analytics tools are used.]
6. Third parties who process data for us
We share personal data with trusted providers who process it on our behalf, only as needed to run our business:
- Stripe for payment processing.
- Calendly for scheduling calls.
- Google (Google Analytics) for website analytics.
- [EMAIL / CRM PROVIDER] for email communications and customer records.
- [HOSTING PROVIDER] for website and file hosting.
- [REQUEST BOARD TOOL, e.g. Trello] for managing and delivering your requests.
Each provider processes your data under its own terms and applicable data protection obligations. We do not sell your personal data to anyone.
We may also disclose personal data where required by law, regulation or legal process.
7. Email communications
If you are a customer, we send service emails about your account, requests and subscription. These are necessary to provide the service and are not marketing.
We send marketing emails only where you have consented. Every marketing email includes an unsubscribe link, and you can opt out at any time without affecting the service emails you receive as a customer.
8. International transfers
Some of our providers, including Stripe, Calendly and Google, are based outside the UK and European Economic Area, or process data there. Where your personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as UK adequacy regulations, adequacy decisions, or standard contractual clauses, so your data receives an equivalent level of protection.
9. Data retention
We keep personal data only for as long as necessary for the purposes it was collected.
- Account and subscription records are kept for the life of your subscription and for [RETENTION PERIOD, e.g. 6 years] afterwards to meet accounting and legal requirements.
- Request content and files are kept for the duration of your subscription and for [RETENTION PERIOD] after it ends, after which they may be deleted.
- Enquiry and call booking data is kept for [RETENTION PERIOD] where you do not become a customer.
- Marketing contact data is kept until you unsubscribe or withdraw consent.
When data is no longer needed, we delete or anonymise it.
10. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate or incomplete data
- Ask us to delete your data in certain circumstances
- Restrict or object to our processing in certain circumstances
- Data portability, to receive your data in a portable format
- Withdraw consent at any time where we rely on consent
- Object to direct marketing at any time
To exercise any of these rights, contact us using the details below. We will respond within the time limits set by law, normally one month. You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner’s Office at ico.org.uk.
11. Data security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. No transmission over the internet is completely secure, but we work to protect your data and hold it through reputable providers.
12. Children
Our services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18.
13. Changes to this policy
We may update this policy from time to time. The current version is always available on our website, with the date it was last updated shown at the top.
14. Contact
For any questions about this policy or your personal data: The Unlimited Co. PITUATO TECH LTD 71-75 Shelton Street, London, WC2H 9JQ Email: privacy@gettheunlimited.com
