Privacy Notice

1. Who we are

Her Fortitude is a trading name of Shivani, a sole trader, who owns and runs the business. Her Fortitude is the data controller for the personal information described in this notice, which means we decide how and why it is used.

Business address:
61 Bridge Street
Kington
Herefordshire
United Kingdom
HR5 3DJ
Email: shivani@herfortitude.co.uk

We are not required to appoint a Data Protection Officer. Please contact us at the email or postal address above with any question about your data.

2. What we collect

We only collect what we need.

When you join the waitlist: your first name, surname, email address and the goal you choose. If you choose "Other", the words you type to describe your goal. Optionally, how you heard about us and which menopause stage best describes you.
A record of your choices: the date and time you joined, whether you also opted in to hear from us after the waitlist, and whether you agreed to us keeping your menopause stage. Our email platform, Brevo, also records technical details of your sign-up, such as your IP address, as proof of consent.
When you read our emails: standard email analytics, meaning whether and when you open an email and which links you click, along with general technical details such as your email app, device type and approximate location (country or region) based on your IP address.
When you email or message us: your contact details and what you tell us.
When you visit the website: our web host automatically keeps standard server logs, such as your IP address, browser type and the pages you request, for security and to keep the site working.

We collect this information directly from you. Giving it is voluntary, but we need your name, email, goal and consent to add you to the waitlist.

3. How we use it and our lawful basis

What we do	Information used	Lawful basis (UK GDPR)
Waitlist emails (the required tick box): news of new coaching programmes, first access, introductory offers, newsletters and invitations to free live sessions	Name, email, goal, how you heard about us	Your consent, Article 6(1)(a). Marketing emails also follow the Privacy and Electronic Communications Regulations (PECR).
Staying in touch after the waitlist (the optional tick box): other Her Fortitude news, events, services and offers once the waitlist has finished	Name, email, goal	Your separate consent, Article 6(1)(a) and PECR. We only use this if you ticked the optional box.
Email analytics: understand which emails and topics are useful to you, improve what we send, and keep our list healthy (for example, removing addresses that never open our emails)	Email opens and clicks, email app and device type	Your consent, Article 6(1)(a), given when you join the waitlist or opt in to stay in touch, and PECR. The sign-up form tells you about it, and you can stop it at any time (see section 10).
Tailor what we send to your menopause stage	Stage, only if you choose to share it	Your explicit consent, Articles 6(1)(a) and 9(2)(a)
Reply to your messages and questions	Contact details, your message	Our legitimate interest in responding to you, Article 6(1)(f)
Keep the website secure and working, and prevent spam	Server logs	Our legitimate interest in running a secure website, Article 6(1)(f)
Keep a record of your consent and meet our legal duties	Consent record	Legal obligation, Article 6(1)(c): the law requires us to be able to show that you gave consent (Article 7(1))

Your two email choices are separate. Joining the waitlist does not sign you up to anything else. If you leave the optional box unticked, we will only email you about the waitlist and will stop once it has finished. You can withdraw either choice on its own at any time.

We do not use your information for automated decision-making or profiling, we do not sell it, and we do not use it for advertising.

4. Health information

Your menopause stage can be health information, which UK law treats as a special category of data. That is why this question is optional, and why we only store it if you also tick the separate box giving explicit consent. If you choose a stage without ticking that box, we do not keep the stage. Please do not include details of medical conditions or treatment in the "Other" box or anywhere else on the website. If you do, we will delete them.

We never sell or rent your data. We use a small number of trusted service providers who process it only on our instructions and under a data processing agreement:

Brevo (Sendinblue SAS, France), our email platform. The waitlist form sends your details straight to Brevo, which stores them and sends our emails. The form's script also loads from Brevo's servers, which receive your IP address. Brevo may also use some sign-up data on its own behalf to keep its platform secure, for example to detect fraud or hacking; for that part, see Brevo's privacy policy.
GoDaddy, our web host and business email provider, which hosts this website and its server logs, and the emails you send us.
Google Fonts, if this website loads its fonts from Google. In that case your browser connects to Google's servers, which receive your IP address.

We may also share information if the law requires it.

6. International transfers

Brevo stores data in the European Union, which the UK recognises as providing adequate protection. Some of our providers, such as GoDaddy and Google, may process data in the United States. Where that happens, we make sure it is protected by a UK adequacy decision (including the UK Extension to the EU-US Data Privacy Framework) or by approved contract terms such as the UK International Data Transfer Agreement or Addendum.

7. How long we keep it

If you joined the waitlist only: until you unsubscribe, until the waitlist has finished, or 24 months after you joined, whichever comes first. We then delete your details.
If you also opted in to stay in touch: until you unsubscribe, or 24 months after you last contacted us or confirmed you still want to hear from us, whichever comes first.
Consent records: for as long as we email you, and up to 24 months afterwards so we can show you agreed.
Server logs: for the period set by our web host, usually a few weeks, after which they are deleted automatically.
Email analytics: kept with your contact record in Brevo and deleted when your details are deleted.
Emails you send us: up to 24 months after our last exchange.

8. How we protect it

The website only runs over an encrypted HTTPS connection, and the form sends your details to Brevo over an encrypted connection. Waitlist records are stored in our Brevo account, which is protected by a strong password and two-step verification, and only Shivani can access them. We keep our passwords and devices secure.

9. Your rights

Under UK data protection law you have the right to:

ask for a copy of the information we hold about you;
ask us to correct information that is wrong or incomplete;
ask us to delete your information;
ask us to restrict how we use it;
ask for your information in a format you can take elsewhere;
withdraw your consent at any time, for the waitlist, for staying in touch, for us keeping your menopause stage, or all of them, using the unsubscribe link in any email or by emailing us. This does not affect anything we did before you withdrew it.

Your right to object. You can object at any time to us using your information for direct marketing, and we will stop. Where we rely on our legitimate interests (replying to messages and keeping the website secure), you can also object, and we will stop unless we have compelling legitimate grounds that override your interests, or need the information for a legal claim.

To use any of these rights, email shivani@herfortitude.co.uk or write to us at our business address. It is free. We will reply within one month; if a request is complex, we may extend this by up to two further months, and we will tell you if so. We may need to confirm your identity before we act on a request.

10. Cookies and email tracking

This website does not use cookies, website analytics or advertising trackers, so you will not see a cookie banner. Your browser may cache files such as images to make pages load faster; this is not used to track you. If we ever add analytics or other non-essential cookies, we will ask for your consent first and update this notice.

Tracking in our emails

Our emails, sent through Brevo, contain a tiny invisible image (a "tracking pixel") and links that pass through Brevo, so we can see whether an email was opened and which links were clicked. We use this only in summary form to improve our emails and keep our list up to date, never for advertising, and we do not combine it with information from other websites.

If you'd rather not be tracked, you can turn off automatic image loading in your email app, which stops open tracking, or unsubscribe at any time using the link in every email. You can also email us to ask us to stop.

11. Other information

Age: our services and waitlist are for adults aged 18 and over.
Links to other sites: we are not responsible for the privacy practices of websites we link to, such as Instagram or the NHS.
Changes: we will update this notice when our practices change and show the date at the top. If a change affects how we use your data, we will tell you by email.

12. Complaints

If you have any concerns about how we use your personal information, please contact us first at shivani@herfortitude.co.uk so we can resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.