Privacy Policy

The Driven Formula Ltd, trading as Driven to Network

Effective date: 22 July 2026 · Last updated: 22 July 2026

This Privacy Policy explains how The Driven Formula Ltd, trading as Driven to Network ("we", "our" or "us"), collects, uses, stores, shares and protects your personal information.

It applies whenever you interact with our websites at www.driventonetwork.co.uk and www.driventonetwork.com, our forms, our networking events, our newsletters and book downloads, our assessment, our community, or any other platforms or services we operate.

1. Who we are

The Driven Formula Ltd is the data controller responsible for your personal information.

• Registered company name: The Driven Formula Ltd
• Trading as: Driven to Network
• Company number: 16278312
• Registered office: 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE
• VAT number: GB 489 9789 76
• ICO registration number: ZC209184

We run in-person business networking events and the surrounding services that support them, including event bookings, a book download and newsletter, the "Driven Business Assessment", and an application process for people who want to host a networking area.

Data protection contact: Nikki Butlin, nikki@thedrivenformula.co.uk. We are not required to appoint a Data Protection Officer. For any data protection query, please contact us at that address.

Our services are aimed at business owners, founders and professionals. For information about your use of our websites and events more generally, please also see our Terms and Conditions.

2. The information we collect

Information you give us directly

• Event bookings: your name, email address, the number of tickets, any add-ons you select, and your payment (see Section 5 for how payment is handled).
• Contact form: your name, email address, the topic of your enquiry and your message.
• Book download and newsletter sign-up: your email address, together with an explicit marketing opt-in and the date and time your consent was recorded, if you choose to tick the marketing box.
• Physical book orders: your name, email and delivery address. These are collected and held by our payment provider (Stripe). We may access your delivery details via Stripe solely to fulfil your order and post the book to you; we do not store your delivery address in our own systems.
• Host applications: the details you enter on our "host an area" form when you apply to run a networking area.
• Admin and partner accounts: if you run the platform or host an area for us, we hold your name, email address and role.
• Event logistics: any dietary or access requirements you choose to tell us, used only to help us run the event and deleted after the event.
• Anything else you choose to tell us when you contact us or interact with our forms and events.

Information collected through third-party tools

• Assessment ("The Driven Business Assessment"): this quiz is embedded from ScoreApp. Your answers and any contact details you give are collected on ScoreApp's own platform under their privacy policy, and shared with us as the assessment results. We receive these results and may use them to give you tailored follow-up content and to improve our events, as described in Section 3.

Information we collect automatically

• First-party usage data: a lightweight analytics table records events such as page views, event views and "book" clicks against a region or event. It does not store your name or email address.
• Website analytics: device and usage data, and your IP address, collected via Google Analytics (GA4) cookies. This only loads after you accept our cookie banner (see Section 11).
• Server logs: our hosting provider processes standard server request logs and IP addresses transiently at the edge in order to serve the website.
• Bot-protection and rate-limiting signals: where enabled, technical and interaction signals used to detect bots (Cloudflare Turnstile on the host application form) and short-lived counters used to rate-limit our booking, newsletter and application forms (Upstash Redis).

Information we collect from other sources

We do not buy contact lists or collect your details through cold outreach. We only hold personal data that you give us directly, that is generated when you use our sites and services as described above, or that comes to us through the third-party tools named in this policy (for example, your assessment results from ScoreApp).

3. How we use your information and our lawful basis

We only use your personal data where the law allows. The lawful basis we rely on depends on the purpose:

Where we rely on legitimate interests, our interest is in operating, promoting, securing and improving our events and services, and we have assessed that this does not override your rights. You can ask us for more detail on this assessment, and you can object at any time (see Section 8).

4. Marketing and consent

• We only send you marketing emails if you have explicitly opted in by ticking the marketing box when you download our book or sign up to our newsletter. We record the date and time of your consent.
• We make clear, at the point you opt in, what you are signing up to receive.
• Downloading the book does not by itself sign you up to marketing. Marketing is only sent if you separately tick the opt-in box.
• We never silently downgrade or re-subscribe existing subscribers.
• You can unsubscribe at any time via the link in any marketing email, or by contacting us at nikki@thedrivenformula.co.uk.
• Withdrawing consent is as easy as giving it and does not affect any processing carried out before you withdrew.
• We may also send you service-related emails (for example booking confirmations or important updates about an event) where these are necessary to operate our events and services. These are not marketing and are sent on the basis of our contract with you or our legitimate interests.

5. Sharing your information

We do not sell your personal data. We share it only in the following ways:

Service providers (processors) who process data on our behalf under a written contract. They may only use your data on our instructions. Our main processors are:

Our community runs on Skool, which is an external link rather than something embedded in our site. If you join, your membership and any community payments are handled entirely on Skool under their own privacy policy. We may be able to see your profile and posts within that platform as part of community administration, but Skool itself is responsible for your account and any payments.

Other disclosures. We may also share your data with third parties where required by law, or to establish, exercise or defend legal claims.

We put data processing agreements in place with all of our processors, requiring them to keep your data secure and to act only on our instructions.

6. International data transfers

Some of our processing takes place outside the UK.

• Supabase (database and storage) and Vercel (hosting) process data in the EU.
• Stripe is a global payment processor. While our Stripe account is UK-based, Stripe routes and stores card and transaction data across its infrastructure, primarily in the United States (with EU processing too).
• Other tools named in Section 5 (for example Google Analytics, Mailchimp and Resend) may also process data in the United States.

Where your data is transferred outside the UK, we rely on an appropriate safeguard, such as:

• transfer to a country covered by UK "adequacy" regulations (including, where applicable, the UK Extension to the EU–US Data Privacy Framework); or
• the UK International Data Transfer Agreement (IDTA) / Addendum to the EU Standard Contractual Clauses; or
• another lawful transfer mechanism that meets the UK data protection test.

Stripe's transfers are governed by Stripe's Data Processing Agreement (stripe.com/legal/dpa) and its sub-processor list (stripe.com/legal/service-providers), and rely on Standard Contractual Clauses.

You can request details of the safeguards we use by contacting us at nikki@thedrivenformula.co.uk.

7. How long we keep your data (retention)

We keep your personal data for as long as necessary for the purposes set out in this policy, and no longer:

• Event bookings and order records: kept for the duration of the event relationship and then for as long as we are required to keep financial records by law, generally six years from the end of the relevant accounting period, to meet UK tax and accounting obligations.
• Marketing contacts: we keep your contact details and consent record until you unsubscribe or ask us to delete them. If you unsubscribe, we stop marketing to you and retain only what we need to honour your opt-out.
• Contact-form enquiries: kept for as long as needed to deal with your enquiry and any follow-up, then deleted when no longer required (typically up to 24 months).
• Host applications: kept for as long as needed to assess and, if relevant, act on your application; unsuccessful applications are deleted when no longer required. If you are appointed as a host, your details become part of our admin and partner account records and are retained as described above.
• Admin and partner accounts: kept for as long as the account is active and for a reasonable period afterwards.
• First-party analytics data: kept in aggregate / non-identifying form and does not identify individuals.
• Records we must keep by law (e.g. accounting): kept for the period required by law.

You can ask us to delete your data at any time (see Section 8), subject to any legal obligation we have to keep it.

8. Your rights

Under UK data protection law you have the right to:

• Be informed about how we use your data (this policy)
• Access the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your data
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests, and to object to direct marketing at any time
• Data portability: receive certain data in a portable format
• Withdraw consent at any time, where we rely on consent
• Rights relating to automated decision-making and profiling (see Section 12)

To exercise any of these rights, contact us at nikki@thedrivenformula.co.uk. We will respond within one month. This period may be extended by up to two further months for complex requests, and we will tell you if so.

9. Complaints

If you have a concern about how we handle your personal data, please contact us first at nikki@thedrivenformula.co.uk so we can try to resolve it.

If you remain dissatisfied, you have the right to complain to the UK's data protection regulator:

• Information Commissioner's Office (ICO)
• Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline: 0303 123 1113
• Website: ico.org.uk

10. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These include:

• Card details never touch our servers. All card payments are taken on Stripe's hosted checkout.
• Database access is locked down with row-level security, so region partners can only see the data for their own area.
• Our forms are rate-limited and use a honeypot, with an optional additional bot check (Cloudflare Turnstile).
• Security headers and a Content-Security-Policy are enforced across the site.
• Access is restricted to authorised staff and partners, and marketing is explicit opt-in with a stored consent timestamp.
• Personal data is encrypted in transit and, where supported by our providers, at rest.
• We have a process for detecting, managing and, where required, notifying data breaches in line with UK GDPR.

No system is completely secure, but we work to protect your information and to meet our legal obligations.

11. Cookies and tracking

We use cookies and similar technologies on our websites. They fall into these categories:

• Strictly necessary: required for the site to function, including our login-session cookies (for admins and area partners) and the cookie-consent preference itself. These do not require consent.
• Analytics: Google Analytics cookies, set only after you accept them via our cookie banner.
• Payments: Stripe sets cookies during checkout for fraud prevention.
• Bot protection: Cloudflare Turnstile on the host application form, where enabled.

We only set non-essential cookies (analytics) with your consent, which we collect via our cookie banner when you first visit. You can change or withdraw your cookie preferences at any time using the cookie settings option on our site. You can also control or delete cookies through your browser settings — most browsers let you block or remove cookies via their help or privacy pages — although blocking some cookies may affect how parts of the site work.

12. Automated decision-making and profiling

We do not make decisions about you based solely on automated processing that would produce legal or similarly significant effects on you. Our assessment gives you a result based on the answers you provide, but this is guidance for you rather than an automated decision about you. Any profiling is for self-assessment and business development only and is not used for decisions that have legal or similarly significant effects on you. You can object to any profiling for direct marketing at any time.

13. Children

Our events, online services and marketing are aimed at adults in business, and children are not our audience. We do not knowingly offer our services to children, and we do not knowingly collect personal data from children under 18. If you believe a child has given us personal data, please contact us at nikki@thedrivenformula.co.uk and we will remove it.

14. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, and we will note the "Last updated" date above. Where changes are significant, we will take reasonable steps to notify you.

15. Contact us

For any question about this policy or your personal data:

• Email: nikki@thedrivenformula.co.uk
• Post: The Driven Formula Ltd, 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE