Privacy Notice
Last updated 9 July 2026
This page is maintained by Women4Business Ltd to explain how we handle personal data on https://www.women4business.com. We are the data controller for the personal data we collect about you.
1. Controller details
- Controller: Women4Business Ltd (company number 17294070)
- Registered office: 20 Wenlock Road, London, N1 7GU, United Kingdom
- Privacy contact: hello@women4business.com
- ICO registration: ICO:00014576583
2. What we collect
| Category | Examples |
|---|---|
| Account data | Name, email, password hash, display name, profile photo |
| Verification data | Photo ID document (stored privately), AI name-match result, Stripe Identity outcome |
| Listing data | Products, property listings, directory entries, prices, photos |
| Transactional data | Stripe payment IDs, Connect account ID, subscription status, payout records |
| Communications | Community posts, comments, dispute messages, support emails |
| Technical data | IP address, device, browser, timestamps, session tokens, error logs |
| Reporting data | Reports you submit about other members, and reports submitted about you |
3. Why we use it (legal bases)
- Contract (UK GDPR Art. 6(1)(b)) — to operate your account, process payments and provide platform features.
- Legitimate interests (Art. 6(1)(f)) — fraud prevention, platform safety, dispute handling, service improvement and security monitoring.
- Legal obligation (Art. 6(1)(c)) — tax, accounting, anti-money-laundering, and responses to lawful requests.
- Consent (Art. 6(1)(a)) — marketing emails and non-essential cookies; you can withdraw at any time.
- Special category basis — your photo ID may contain biometric facial data; we process it for substantial public interest (safeguarding a single-sex community) under DPA 2018 Schedule 1 Part 2.
4. Who we share with
- Stripe Payments Europe Ltd — payment processing, Connect payouts and Stripe Identity verification.
- Supabase / Lovable Cloud — secure hosting of database, authentication and storage.
- Email/transactional providers — to send verification, receipts and account notices.
- Professional advisers — accountants, lawyers, insurers under confidentiality.
- Law enforcement / regulators — where legally required.
We do not sell your personal data.
5. International transfers
Some processors operate outside the UK. Where we transfer personal data outside the UK, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or an adequacy decision.
6. Retention
- Account & profile: while your account is open, then up to 12 months after closure.
- Photo ID documents: for the lifetime of your account (used for ad-hoc checks and dispute investigations); deleted within 30 days of account deletion unless we have a legal duty to retain.
- Transactional records: 6 years (UK tax law).
- Dispute and safeguarding records: 6 years from resolution.
- Marketing preferences: until you withdraw consent.
7. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent. To exercise any right, email hello@women4business.com. We will respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).
8. Security
We use TLS in transit, encryption at rest, row-level security in our database, private storage buckets for ID documents accessible only to admins via short-lived signed URLs, and strict role-based access controls.
9. Children
The platform is not directed to under-18s. We do not knowingly collect data from children.
10. Changes
We will notify you of material changes by email or in-app at least 14 days in advance.