Privacy Policy

Last updated: 31 March 2026

This Privacy Policy explains how Model Mastery ("we", "us", "our"), operated by Oscar Crook, collects, uses, stores, and protects your personal data when you visit oscarcrook.com or use any of our services.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

Model Mastery / Oscar Crook
Email: support@oscarcrook.com
Website: oscarcrook.com

2. What Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly

• Full name
• Email address
• Phone number
• Application form answers (including experience level, investment capacity, and free-text responses)
• Payment and billing information (processed by Stripe; we do not store full card details)

Information collected automatically

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on site
• Referral source and UTM parameters
• Cookies and similar tracking technologies (see Section 9)

3. Why We Collect Your Data

We process your personal data for the following purposes and under the following legal bases:

4. Third-Party Services

We share personal data with the following third-party services, each of which processes data in accordance with their own privacy policies:

• Whop — Payment processing and membership management
• Stripe — Secure payment processing
• Meta (Facebook/Instagram) — Advertising, Meta Pixel tracking, and Conversions API for ad performance measurement
• Klaviyo — Email marketing automation
• Discord — Community access and communication
• Skool — Course delivery platform
• Calendly — Call booking and scheduling

We do not sell your personal data to any third party.

5. International Data Transfers

Some of our third-party service providers (including Stripe, Meta, Discord, and Skool) are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

6. Data Retention

• Financial and transactional records: Retained for 6 years to comply with UK tax and accounting obligations (HMRC requirements).
• Application data: Retained for the duration of your relationship with us and for up to 2 years thereafter, unless you request earlier deletion.
• Marketing data: Retained until you unsubscribe or request deletion.
• Non-financial personal data: Deleted upon your request, subject to any overriding legal obligations.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you.
• Right to rectification — Request correction of inaccurate or incomplete data.
• Right to erasure — Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Right to data portability — Request your data in a structured, machine-readable format.
• Right to restrict processing — Request that we limit how we use your data.
• Right to object — Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@oscarcrook.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), secure payment processing through Stripe, and restricted access to personal data on a need-to-know basis.

No method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

9. Cookies & Meta Pixel

Our website uses cookies and similar tracking technologies to improve your experience and measure advertising effectiveness.

Cookies we use

• Essential cookies — Required for the site to function (e.g., session management).
• Analytics cookies — Help us understand how visitors interact with the site.
• Advertising cookies — Used by Meta Pixel to track conversions, build audiences, and optimise ad delivery.

Meta Pixel

We use the Meta Pixel (Facebook Pixel) and the Meta Conversions API to:

• Track actions you take on our website (page views, form submissions, button clicks)
• Measure the effectiveness of our advertising campaigns
• Create custom audiences for retargeting
• Optimise ad delivery to people most likely to take action

Meta may use this data in accordance with the Meta Privacy Policy. Data sent via the Conversions API is hashed (SHA-256) before transmission.

You can opt out of interest-based advertising through your Meta account settings or via the Your Online Choices tool.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Model Mastery / Oscar Crook
Email: support@oscarcrook.com
Website: oscarcrook.com