Last updated: 5 August 2026
Please read this privacy policy carefully. It explains who we are, what personal information we collect about you, how and why we collect, store, use and share it, your rights over your personal information, and how to contact us, or the supervisory authority, if you have a question or complaint.
We've written this in plain English on purpose. If anything is unclear, email us and we'll explain.
We are She Empire Ltd, a company registered in England & Wales. We help female founders start or reshape their business so it has strong foundations, the kind that let them scale and build the business they actually want. We run this support through our group programme and through The Empire Hub, our client management platform that helps business owners keep everything in one place.
We collect, use and are responsible for certain personal information about you. When we do so, we are regulated under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, where the EU General Data Protection Regulation applies to visitors from the European Economic Area (EEA), under that regulation too. We are responsible as the controller of that personal information for the purposes of those laws.
This privacy policy applies to:
What we collect depends on how you interact with us. It can include:
We only ask for the information we need for the purpose we state when we ask for it. Please only provide the information requested.
Our website and services are aimed at business owners and female founders. They are not intended for use by children, and we do not knowingly collect or use personal information relating to children.
We do not intend to collect special category data (such as health information) and we ask that you don't include it in free-text form answers. If you do include it, we'll treat it with additional care as required by law, or delete it where it isn't needed.
Directly from you, when you:
Automatically, when you browse our website: our server and analytics tools receive and record information from your browser, such as your IP address, device and browser type, the pages you visit and your activity on those pages. Some of this is collected via cookies and similar technologies (see below). This can happen even if you never fill in a form or buy anything.
Whenever we use your personal information, we must have a lawful basis for doing so. The lawful bases we rely on, split by purpose, are:
| What we use your information for | Lawful basis |
|---|---|
| Responding to enquiries and processing applications | Legitimate interests (running and promoting our business) and, where you go on to buy, contract (steps taken at your request before entering a contract) |
| Providing our services, running our group programme and delivering what you've bought | Contract |
| Taking payment and keeping accounting records | Contract and legal obligation (tax and accounting law) |
| Sending you marketing emails | Consent (you can withdraw it at any time, see 'Marketing' below) |
| Understanding how our website is used, and improving our website, content and services | Legitimate interests (improving our business) and, for non-essential cookies and tracking, consent |
| Advertising and measuring ad performance (for example via the Meta Pixel) | Consent (via cookie preferences) |
| Notifying you of changes to our services or policies that affect you | Legitimate interests and, in some cases, legal obligation |
| Complying with legal or regulatory requirements | Legal obligation |
Where we rely on legitimate interests, we've considered the balance between those interests and your rights, and we don't use your information where your rights override our interests.
We never sell your personal information, and we don't share it with third parties for their own marketing.
We do share personal data with trusted service providers ("processors") who help us run our business. Depending on how you interact with us, these include:
These providers only receive the data they need to provide their service, and are required to protect it and use it only on our instructions. Where appropriate, we have data processing agreements in place with them.
We may also share personal information:
We use AI tools, currently Anthropic's Claude, to help us build and code our sales pages and other web pages. Where this involves information relating to you or your business (such as your page copy, business information or brand assets), that information may be processed by the AI tool as part of the work.
We've set these tools up so that:
If your project or programme involves AI-assisted work with your materials, we'll tell you beforehand and ask for your additional consent first. We never use AI tools to make automated decisions about you.
Some of the service providers listed above are based in, or store data in, countries outside the UK and EEA, most commonly the United States (for example Stripe, Zoom, Anthropic, Meta, and the infrastructure behind The Empire Hub).
Where your information is transferred outside the UK or EEA, we make sure a valid transfer safeguard is in place, such as:
If you'd like more information about these safeguards, contact us using the details below.
We keep personal information only as long as we need it for the purpose we collected it for, including to meet legal, accounting or reporting requirements. As a guide:
| Type of information | How long we keep it |
|---|---|
| Enquiries and applications that don't lead to working together | Up to 12 months from last contact, then deleted |
| Member records, contracts and programme files | 6 years after the end of the tax year our work together ends (in case of legal or tax queries) |
| Financial and transaction records | 6 years after the end of the relevant tax year (HMRC requirement) |
| Marketing list details | Until you unsubscribe, or after a prolonged period of inactivity |
| Website analytics data | Per the retention settings of the analytics tool (kept as short as practical) |
If you ask us to delete your data, we will do so securely unless we're legally required to keep it, in which case we'll tell you why and for how long.
Cookies are small text files stored on your device when a website loads in your browser. They help websites function properly, stay secure, and understand how visitors use them.
Our website uses:
You can change your cookie preferences at any time via the cookie settings on our website, which lets you revisit the consent banner and change or withdraw your consent.
You can also block or delete cookies through your browser settings:
If you use another browser, check its official support pages.
We'd love to send you useful emails about our services, resources, news and offers, but only if you want them.
We'll only send you marketing emails where you've actively opted in (for example by ticking a consent box on a form or signing up for a resource). Ticking that box gives us your consent to email you for the purposes described at the point of sign-up.
You can unsubscribe at any time by:
Unsubscribing won't affect emails we need to send you about services you've bought (like booking confirmations or programme updates).
Under the UK GDPR you have a number of important rights, free of charge. In summary, you have the right to:
For more detail on these rights, see the guidance from the UK Information Commissioner's Office (ICO) on individuals' rights under the UK GDPR: ico.org.uk/for-the-public/
To exercise any of these rights, email us at [email protected] and:
We'll respond within one month.
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. Access to your personal information is limited to those with a genuine need to know it, and the tools we use are protected by strong passwords and two-factor authentication where available.
We also have procedures in place to deal with any suspected data security breach. We'll notify you and the ICO of a suspected breach where we're legally required to do so.
We hope we can resolve any query or concern you have about how we use your information, please contact us first at [email protected].
You also have the right to lodge a complaint with a supervisory authority. In the UK, that's the Information Commissioner's Office (ICO):
If you're in the EEA, you can complain to the supervisory authority in the country where you live, work, or where the alleged infringement took place.
This privacy policy was last updated on 5 August 2026.
We may change it from time to time, for example when we add a new tool or service. When we make significant changes, we'll update the date at the top and, where appropriate, let you know via our website or by email.
If you have any questions about this privacy policy or the information we hold about you, email us at [email protected].
If you'd like this privacy policy in another format (for example larger print), please contact us using the details above and we'll do our best to help.