Privacy Policy

Who we are

Corporate Surprises is a brand of Distril LLC, a Wyoming limited liability company (Entity ID 2022-001181081), registered at 1021 E Lincolnway, Suite 6007, Cheyenne, WY 82001, United States.

In this policy, "we", "us" and "our" mean Distril LLC. "You" means anyone who visits our site, joins our email list, messages us on Instagram or WhatsApp, or buys something from us.

For questions about this policy or your data, write to adam@corporatesurprises.com.

What we collect

Information you give us

• Your first name and email address, when you ask for the free Intro Edition or join our email list.
• Your name, email, WhatsApp number if you give it, and your answers, when you fill in the form for the free business audit call.
• Your Instagram username and the messages you send us, if you comment on a post or message the account. Instagram gives us your username and profile picture; we do not see your Instagram password or your private account data.
• Your WhatsApp number and messages, if you message us on WhatsApp.
• Order details, if you buy something: your name, email, billing country and what you bought. We never see or store your full card number. Card details go straight to our payment processor.
• Anything you choose to write to us, including replies to our emails.

Information we collect automatically

• Usage data: the pages you visit, when, and where you arrived from.
• Device and connection data: your IP address, browser type, and device type. Our servers and our providers keep short-term logs of this.
• Email engagement: whether an email was delivered, opened, and which links were clicked.
• Cookies and similar technologies, described below.

Why we use it, and our legal basis

What we do	Why we are allowed to
Send you the free guide you asked for	To perform the agreement you entered into when you asked for it
Deliver and support a product you bought	To perform our contract with you
Reply to your fit form and arrange a Review call	To take the steps you asked for before entering a contract
Send you our weekly email	Your consent, which you can withdraw at any time
Reply to your messages	Our legitimate interest in answering people who contact us
Keep the site working and stop bots and fraud	Our legitimate interest in protecting the service
Understand which content and pages work	Our legitimate interest in improving what we publish
Keep tax and accounting records	A legal obligation

If you are in the UK or the EU, "legitimate interest" means we have weighed our reasons against your privacy and believe our use is fair and expected. You can object to it, and we will stop unless we have compelling grounds not to.

Who we share it with

We do not sell your personal information. Our pages do load a Meta pixel, which tells Meta that a browser visited a page of ours and whether an opt-in or purchase followed. Meta can use that to show you our ads, which California law counts as sharing for cross-context behavioural advertising. It only loads if you accept cookies on our site, and your browser tracking protection, an ad blocker, or your Meta ad settings also stop it. We use the following service providers to run the business. Each only receives what it needs to do its job.

Provider	What it does for us
Our own servers	Host this website and its forms, store fit form answers, host the free PDF, and keep short-term access logs
HighLevel (LeadConnector)	Hosts our checkout and course pages, and stores our contact records
Mailgun	Delivers the emails we send you
Kit	Runs our weekly email list
ManyChat	Handles our Instagram messages
Meta (Instagram and WhatsApp)	The platforms where those messages happen, under their own privacy policies
Telegram	Sends Adam a notification with your fit form answers so he can reply
Stripe	Takes payments. Card details go to Stripe, not to us
Cloudflare	Serves and protects the site, and can run an 'are you human' check on our forms
Google Analytics	Counts visits and tells us which pages get used. Google receives your IP address and a cookie identifier
Meta pixel	Tells us which pages a visit reached and whether an opt-in or a purchase followed, so we can measure our posts and ads. Meta receives this under its own privacy policy
Google Fonts	Serves the typefaces on our pages, which means Google receives your IP address when a page loads

We may also share information if the law requires it, to protect our rights or someone's safety, or if the business is sold or reorganised, in which case your information would pass to the new owner under this same policy.

Where your data goes

We are based in the United States and our providers are mostly in the United States. If you are in the UK or the EU, your information will be transferred outside your country. Where that happens, we rely on our providers' standard contractual clauses and equivalent safeguards.

How long we keep it

• Email subscribers: until you unsubscribe or ask us to delete you, and then only what we need to remember not to email you again.
• Fit form answers: as long as they are useful for arranging and running your Review, and deleted on request.
• Customers: for as long as we support the product, and then as long as tax and accounting law requires, which is normally seven years.
• Instagram and WhatsApp conversations: as long as the conversation is useful, and subject to the platform's own retention.
• Server and email logs: a short period, normally weeks, not years.

Cookies and similar technologies

This site sets a small number of cookies it needs to work: a security token that protects our forms, and a session cookie that shows you the result after you send a form. Our checkout pages, hosted by HighLevel, set their own cookies so the forms work and so we can tell whether a page is being used. If our forms run Cloudflare's bot check, Cloudflare sets a cookie as part of it. These are necessary for the site to work properly.

Our emails contain a small tracking pixel and tagged links, which tell us whether the email was opened and which links were clicked. If you would rather we did not know, turn off image loading in your email app, or unsubscribe.

Google Analytics and the Meta pixel also set cookies. They count visits, show us which pages get read, and tell us whether an opt-in or a purchase followed. Neither is needed for the site to work, and blocking them does not stop you getting the free guide or anything you bought. They only load if you accept them in the cookie banner, and you can change your choice at any time with the Cookie settings link at the bottom of every page.

You can block or delete cookies in your browser settings. Parts of the site may stop working if you do.

Your rights

Wherever you live, you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete what we hold;
• stop sending you marketing, which you can also do yourself with the unsubscribe link in every email;
• restrict or object to how we use it;
• receive your data in a portable format.

Write to adam@corporatesurprises.com and we will deal with it. We will not charge you and we will not treat you differently for asking. We may need to check who you are first. We aim to answer within 30 days.

If you are in the UK or the EU, you also have the right to complain to your data protection authority. In the UK that is the Information Commissioner's Office.

If you are in California, you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell your personal information. The Meta pixel described above can count as "sharing" under California law. It only loads if you accept cookies in the banner on our site, and you can change that choice at any time with the Cookie settings link at the bottom of every page. You may use an authorised agent, and we will not discriminate against you for exercising any of these rights.

Security

We use reputable providers, encrypted connections, and access controls on the accounts that hold your data. No system is perfect, and we cannot promise absolute security, but we take it seriously and we will tell you if something happens that affects you.

Children

This is a business audience. Our site and products are not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us their information, write to us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top. If the change is significant, we will say so in an email to our subscribers.

Contact

Distril LLC, trading as Corporate Surprises
1021 E Lincolnway, Suite 6007
Cheyenne, WY 82001, United States
adam@corporatesurprises.com