Privacy Policy

Last updated: 28 July 2026

1. Who we are

The data controller responsible for the personal information described in this Privacy Policy is:

Carl Hughes trading as CABBS Group
167-169 Great Portland Street
5th Floor
London
W1W 5PF
United Kingdom

Privacy, administrative and contractual enquiries
info@cabbsgroup.com

Operational and delivery enquiries
carl@cabbsgroup.com

References to “CABBS Group”, “we”, “us” or “our” mean Carl Hughes trading as CABBS Group.

2. Scope of this Privacy Policy

This Privacy Policy explains how we collect, use, store, share and protect personal information when you:

  • visit or use cabbsgroup.com;
  • contact CABBS Group or submit an enquiry;
  • purchase or use a CABBS Academy course, training programme, consultancy service or digital product;
  • request a free sample or subscribe to a CABBS Group football newsletter or digital publication;
  • purchase or manage a recurring subscription;
  • attend a live or online event;
  • submit a CV, employment information or recruitment enquiry; or
  • otherwise interact with CABBS Group.

Our football newsletters and digital publications include The Scottish Top-Flight Report and any current or future football newsletter or digital publication supplied by CABBS Group.

3. Personal information we may collect

Depending on how you interact with us, we may collect:

  • Identity and contact information, such as your name, email address, telephone number, postal address, company name and job title;
  • Order and subscription information, such as products purchased, subscription plan, billing frequency, order number, renewal date, cancellation status, transaction reference and customer account details;
  • Payment-related information, such as billing address, payment status and limited payment identifiers supplied by a payment provider. We do not normally receive or store your full card number;
  • Course and training information, such as enrolment, access permissions, lesson progress, attendance, submitted work and support history;
  • Newsletter and email information, such as the publication requested, subscription status, list membership, tags, preferences, delivery status, unsubscribe status and, where tracking is enabled, email opens, link clicks and download activity;
  • Enquiry, complaint and support information, including messages, attachments, call notes and records of how an issue was handled;
  • Recruitment information, such as CVs, work history, qualifications, skills, availability, references and information supplied for employment or candidate-matching purposes;
  • Website and technical information, such as IP address, browser type, device information, login activity, cookie identifiers, security logs and website usage data;
  • Marketing preferences, including consent records, the date and method of consent, opt-outs, objections and suppression-list records; and
  • Other information you choose to provide when communicating with us.

4. How we collect personal information

We may collect personal information:

  • directly from you through checkout, account registration, forms, email, telephone, surveys, event bookings, course activity or document uploads;
  • automatically when you use our website, emails or online services, through cookies, logs and similar technologies;
  • from payment processors, email-delivery platforms, website platforms and other providers involved in completing your request or order;
  • from a business, employer, client or authorised representative acting on your behalf; or
  • from public or professional sources where lawful and relevant, particularly in a business or recruitment context.

Where we obtain information from another source, we will provide additional privacy information where the law requires it.

5. Why we use personal information and our lawful bases

5.1 Orders, subscriptions and service delivery

We use personal information to process orders, create accounts, manage subscriptions, collect authorised payments, deliver newsletters and digital content, provide courses or services, send renewal and account information, and deal with cancellations.

Lawful basis: performance of a contract, or taking steps at your request before entering into a contract.

5.2 Enquiries, support and complaints

We use personal information to answer enquiries, resolve access or delivery problems, investigate complaints, keep service records and protect our legal position.

Lawful basis: contract, steps before a contract, legal obligation and our legitimate interests in providing support, administering the business and establishing, exercising or defending legal claims.

5.3 Free samples and requested information

We use the contact details supplied to deliver a requested free sample or information and to record that the request was completed.

Lawful basis: taking steps at your request, consent where requested, and our legitimate interests in responding to requests and promoting relevant CABBS Group products in a lawful and proportionate way.

5.4 Marketing and promotional communications

We may send marketing about CABBS Group products, courses, services, newsletters and digital publications where you have consented or where the limited existing-customer soft opt-in applies.

Lawful basis: consent or legitimate interests where permitted, together with compliance with the Privacy and Electronic Communications Regulations.

5.5 Website operation, security and improvement

We use technical information to operate the website, maintain shopping-basket and login functions, prevent fraud, investigate misuse, protect accounts, diagnose faults and improve performance.

Lawful basis: our legitimate interests in operating a secure and effective website, contract where necessary for a customer service, legal obligation where applicable, and consent for non-essential cookies where required.

5.6 Payments, tax and business records

We use order, payment and transaction records for accounting, tax, fraud prevention, reconciliation and legal compliance.

Lawful basis: contract, legal obligation and our legitimate interests in accurate business administration and fraud prevention.

5.7 Courses, training, consultancy and recruitment

We use course, training, consultancy and recruitment information to provide the requested service, assess suitability, manage participation, match candidates where agreed and maintain appropriate records.

Lawful basis: contract, steps before a contract, legal obligation, legitimate interests and consent where required.

6. Football newsletters, free samples and AWeber

CABBS Group uses email-delivery and subscriber-management services, including AWeber, to manage free-sample requests, football-newsletter subscribers, automated email sequences and subscriber preferences.

Information processed may include your name, email address, sign-up source, subscription or sample requested, tags, workflow status, delivery results, unsubscribe status and, where tracking is enabled, email opens, link clicks and PDF-download activity.

We use this information to:

  • deliver requested samples and paid publications;
  • confirm that essential emails and download links are working;
  • manage monthly and annual subscribers;
  • apply subscriber preferences and unsubscribe requests;
  • avoid sending duplicate or irrelevant messages;
  • measure the performance of our emails and customer journey; and
  • maintain evidence of consent, opt-out and delivery activity where necessary.

Lawful basis: contract for paid-publication delivery and subscription administration; taking steps at your request before entering into a contract for requested free samples; legal obligation where records must be retained; our legitimate interests in administering the service, preventing duplicate messages and confirming delivery, where those interests do not override your rights; and consent where required for promotional marketing or tracking.

Unsubscribing from promotional marketing does not cancel a paid subscription and does not prevent essential service messages such as publication delivery, order confirmations, renewal information, cancellation confirmations or important account notices.

7. Marketing choices and the right to object

Marketing consent must be a positive and separate choice. We do not treat silence or a pre-ticked box as consent. Where we rely on the existing-customer soft opt-in, the legal conditions must be met and an opt-out must be available when details are collected and in each later marketing message.

You may unsubscribe through the link in a marketing email or contact info@cabbsgroup.com.

You have an absolute right to object to the use of your personal information for direct marketing at any time. Once you object or unsubscribe, we will stop the affected marketing. We may retain a limited suppression record so that your preference continues to be respected.

8. Payments

Payments may be processed by third-party payment providers, including Stripe, PayPal or WooCommerce-supported payment services. These providers process payment information under their own privacy notices and security arrangements.

CABBS Group does not normally receive or store full card details. We may receive limited information such as the card type, last digits, payment status, transaction reference and fraud or verification result.

9. Courses, accounts and LearnDash

Where you purchase or access training, we may use WordPress, WooCommerce and LearnDash to manage customer accounts, enrolment, lesson access, progress, completion records, downloads and support.

Some information is required to create the account and perform the contract. Without it, we may be unable to provide the purchased course or service.

10. Recruitment, CVs and sensitive information

Where you submit a CV or employment information, we may use it to respond to your enquiry, assess suitability, provide recruitment or candidate-matching services and, where agreed, share relevant information with a prospective employer or client.

We will explain intended sharing and seek consent where required. CVs should not include unnecessary sensitive information.

If you voluntarily provide special-category information, such as health, disability, racial or ethnic origin, religious belief, trade-union membership or sexual orientation, or information about criminal convictions, we will process it only where a valid legal condition applies and with appropriate safeguards.

11. Cookies, analytics and website technologies

Our website may use cookies and similar technologies for:

  • essential login, security and shopping-basket functions;
  • remembering user choices;
  • website performance and fault diagnosis;
  • analytics and service improvement; and
  • other functions clearly described through available cookie controls.

Essential cookies may operate because they are necessary for the website or service. We will seek consent before using non-essential cookies where the law requires it. You may also manage cookies through your browser, although blocking essential cookies may prevent parts of the website from working.

12. Who we may share personal information with

We may share personal information only where reasonably necessary with:

  • website, hosting and technical-service providers, including IONOS, WordPress, WooCommerce and LearnDash;
  • email-delivery and subscriber-management providers, including AWeber;
  • payment processors, including Stripe and PayPal where used;
  • analytics, security, backup, fraud-prevention and support providers;
  • professional advisers such as accountants, insurers, lawyers and consultants;
  • prospective employers or clients in a recruitment context, where you have been informed and the sharing is lawful;
  • government departments, regulators, courts, law-enforcement bodies or tax authorities where required or permitted by law; and
  • a purchaser, successor or professional adviser involved in a lawful business sale, restructuring or transfer.

Service providers acting for us are expected to process personal information only for authorised purposes and to protect it appropriately. We do not sell personal information to advertisers.

13. International transfers

Some service providers may process personal information outside the United Kingdom. Where a restricted international transfer takes place, we will use an applicable legal mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard.

You may contact info@cabbsgroup.com for further information about the safeguards relevant to your data.

14. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose collected, including service delivery, accounting, tax, security, dispute resolution and legal claims.

Our general retention approach is:

  • Order, payment and tax records: retained for the period required by tax and accounting law. As a self-employed business, relevant records are generally retained for at least five years after the 31 January tax-return deadline for the relevant tax year, and longer where required;
  • Contracts, subscriptions and customer records: retained during the relationship and normally for up to six years afterwards where needed for legal claims, accounting or dispute resolution;
  • Course and training records: retained while access or support remains active and afterwards for a period based on contractual, legal and business needs;
  • Marketing and subscriber records: retained while you remain subscribed or until a periodic review shows they are no longer needed. Consent and opt-out evidence may be retained for compliance purposes;
  • Suppression records: limited information may be retained for as long as necessary to ensure that an unsubscribe or objection continues to be respected;
  • Enquiries, complaints and support records: retained for as long as reasonably necessary to resolve the matter and protect legal rights;
  • Recruitment and CV records: retained for the recruitment or matching purpose explained to you. Unsuccessful-candidate information will not be kept longer than necessary unless you agree to a longer talent-pool period; and
  • Technical and security logs: retained for a limited period based on security, investigation and operational needs.

We may retain information for longer where required by law, where a dispute or investigation is active, or where deletion would conflict with a legal obligation. Information may be anonymised so that it can no longer identify you.

15. Your data-protection rights

Depending on the circumstances and lawful basis, you may have the right to:

  • ask whether we hold personal information about you and obtain a copy;
  • correct inaccurate or incomplete information;
  • ask for information to be deleted;
  • restrict how information is used;
  • object to processing based on legitimate interests;
  • object at any time to direct marketing;
  • receive certain information in a portable format and have it transferred where applicable;
  • withdraw consent at any time where processing is based on consent; and
  • challenge certain decisions made solely by automated means where applicable.

Some rights are subject to legal conditions and exemptions. Withdrawing consent does not make earlier lawful processing invalid.

To exercise a right, email info@cabbsgroup.com. We may request reasonable proof of identity or authority before disclosing or changing information. We will respond without undue delay and normally within one month, although the law permits more time for certain complex or multiple requests.

16. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, passwords, secure payment processing, backups, software updates, encryption where available and limiting access to people who need the information.

No online system can be guaranteed completely secure. You are responsible for keeping account credentials confidential and for informing us promptly of suspected misuse.

17. Children

Our commercial products and subscriptions are intended for people who are at least 18 years old. We do not knowingly invite children to purchase products or create paid subscriptions.

Where a young person lawfully uses educational content through a parent, guardian, school or other authorised arrangement, we will handle personal information in a way appropriate to the circumstances and applicable law.

18. Links to other websites

Our website, emails or publications may contain links to third-party websites. Those organisations are responsible for their own privacy practices. You should review their privacy information before providing personal data.

19. Complaints and the Information Commissioner

Please send privacy concerns first to info@cabbsgroup.com so that we can investigate and try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

20. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, suppliers, products or business procedures. The latest version will be published on this page with an updated date.

Where a change materially affects existing customers or subscribers, we will provide additional notice where required.

21. Contact summary

Privacy, administrative and contractual enquiries
info@cabbsgroup.com

Operational and delivery enquiries
carl@cabbsgroup.com

Postal address
Carl Hughes trading as CABBS Group
167-169 Great Portland Street
5th Floor
London
W1W 5PF
United Kingdom

Scroll to Top