This policy explains what personal data Her Frontier collects, how we use it, and what rights you have. We aim to keep it short and honest.
The data controller is Olly Kovalieva, operating as Her Frontier, Lisbon, Portugal. Contact: olly@herfrontier.ai.
01What we collect
- Account data — name and email address when you join our community or newsletter.
- Payment data — processed by Stripe. We never see or store your full card number. Stripe shares with us the last 4 digits, card brand, billing country, and a charge reference.
- Community activity — messages, questions, and content you post in the community, including reactions and attendance in live sessions.
- Technical data — basic server logs (IP address, timestamp, user agent) kept for up to 30 days for security and debugging.
We don't collect special-category data (health, political opinions, sexuality, etc.). Please don't share those in community channels unless you're deliberately choosing to do so.
02Why we use it & legal basis
- Providing the service — delivering your membership, invoices, access to content and events. Legal basis: contract.
- Communications — sending you operational emails (receipts, event reminders, account notices). Legal basis: contract.
- Marketing emails — newsletter, new programming. Legal basis: consent (opt-in) or legitimate interest for existing members. You can unsubscribe from each message.
- Security & fraud prevention — server logs, anti-abuse checks. Legal basis: legitimate interest.
- Legal compliance — tax records, accounting. Legal basis: legal obligation.
03Who we share with
We use a small number of processors to run Her Frontier. Each is contractually bound to handle your data on our instructions:
- Stripe — payment processing. Privacy policy.
- Website hosting — serving herfrontier.ai (static pages, no user data stored server-side).
- Community platform — hosting our private group chat (we'll disclose the specific platform as soon as it's chosen; currently in setup).
We don't sell personal data. We don't share it for other companies' marketing.
04Data transfers
Some of our processors (including Stripe) are based in the United States or process data outside the EU/EEA. These transfers rely on EU Standard Contractual Clauses or equivalent safeguards as provided by each processor.
05How long we keep it
- Account data — while you're a member, plus up to 24 months after cancellation for re-activation convenience.
- Payment records — 7 years for tax/accounting compliance (required by Portuguese law).
- Community content — remains in the community archive unless you request removal.
- Server logs — up to 30 days.
06Your rights
Under GDPR and similar laws, you have the right to:
- Access a copy of the data we hold about you.
- Correct data that's wrong.
- Delete your data (subject to legal retention requirements like tax records).
- Port your data to another service.
- Object to processing based on legitimate interest.
- Withdraw consent at any time for consent-based processing.
- Lodge a complaint with your data protection authority — in Portugal, CNPD.
To exercise any of these, email olly@herfrontier.ai. We'll respond within 30 days.
07Cookies
We currently use no tracking cookies on herfrontier.ai. If we add analytics in the future, we'll update this policy and, where required, ask for your consent.
Stripe-hosted checkout pages use their own cookies governed by Stripe's privacy policy.
08Children
Her Frontier is not directed at children. We don't knowingly collect data from anyone under 18. If you believe we have, please contact us and we'll delete it.
09Changes
We'll post updates to this policy here with a new "Last updated" date and notify members by email of any material changes.