Privacy policy

Last updated 19 September 2026

This policy explains what personal data Six18 Labs collects, why, and what rights you have over it.

Who is responsible for your data

Six18 Labs Ltd, registered in Cyprus under number HE 496501, is the controller of your personal data. Contact us about anything in this policy at hello@six18labs.com.

What we collect

Contact details: your name and email address.
Community data: your Discord username and ID, your level and exam results, and what you post in the community, including your trade journal.
Purchase data: what you bought, when, the amount, your billing country and VAT details. Our payment provider handles your card details; we only see limited payment information, such as the card brand and last four digits.
Messages: anything you send us by email or by Discord message.
Waitlist data: if you join the waitlist, your email address, your Discord username and message if you give them, the plan you're interested in, and when you signed up.
Mentoring sign-ups: if you sign up for ongoing mentoring, the email address you give us, the Discord account your personal link belongs to, and a record that you accepted our terms and privacy policy and asked for mentoring to start immediately, with the wording you agreed to and the time you did it.
Membership records: we keep a record of the membership messages we send you on Discord, whether they could be delivered, and changes to your paid role.

This website doesn't use advertising or analytics cookies, and it doesn't load fonts, scripts or other content from third parties. Our hosting provider, Cloudflare, processes basic technical data, such as IP addresses, to deliver the site and protect it from abuse. Our payment provider's payment pages use their own cookies, covered by its own privacy policy.

Why we use it

To provide the programme you bought, including access, feedback and support. Legal basis: performing our contract with you.
To tell you when places open on the plan you joined the waitlist for. Legal basis: taking steps you asked for before entering a contract. We won't use waitlist data for other marketing unless you've agreed.
To take payments and keep accounting and tax records. Legal basis: our legal obligations.
To keep a record of what you agreed to when you signed up, including your request for mentoring to start immediately. Legal basis: performing our contract with you, and our legal obligations under consumer law.
To invoice your community access and manage your paid role, including reminders on Discord and removing the paid role if we don't receive your billing details. Legal basis: performing our contract with you and our legal obligations.
To keep the community safe and prevent fraud or misuse. Legal basis: our legitimate interests.
To send you news or offers, only if you've agreed. You can unsubscribe at any time.

Who we share it with

We don't sell your data. We share it only with the providers who help us run the programme, and only as far as they need it:

Our payment provider, which processes payments through the payment links we send you.
Discord, where the community is hosted and where we send membership messages.
Cloudflare, which hosts this website on its global network and stores waitlist sign-ups and billing details.
Our email provider, for sending and receiving email.
Our accountants and advisers, and public authorities where the law requires it.

Some of these providers process data outside the European Economic Area, for example in the United States. Where they do, the transfer is protected by an EU adequacy decision, such as the EU–US Data Privacy Framework, or by the European Commission's standard contractual clauses.

How long we keep it

We keep your account and community data while you're a member and for up to 12 months afterwards, unless you ask us to delete it sooner. We keep waitlist entries for up to 12 months after you last signed up, or until you ask us to remove you. We keep purchase and invoicing records, including billing details and mentoring sign-ups, for as long as Cypriot tax and accounting law requires. We keep records of membership messages and paid-role changes for up to 12 months.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or transfer it to you in a portable format. You can also object to processing based on our legitimate interests, and withdraw consent at any time. Email hello@six18labs.com and we'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the data protection authority where you live.

Changes to this policy

We'll post any changes on this page and update the date at the top. If a change is significant, we'll also let members know by email or in the community.