PRIVACY POLICY

Effective Date: 1 JULY 2024

The ElevateHER Company Limited (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit or interact with our website {RICHWOMANREVOLUTION.COM} (“Site”).

We comply with:

The Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”)

The Kenya Data Protection Act 2019 (“DPA”)

The European Union General Data Protection Regulation (GDPR) (where applicable)

By using this Site, you agree to the terms of this Privacy Policy.

1. Age of Consent

By using this Site, you confirm that you are at least 18 years old. We do not knowingly collect or store information from anyone under the age of 18. If you believe a minor has provided personal data to us, please email {email address} and we will delete it promptly.

2. What Personal Data We Collect

We may collect the following types of personal information:

Identity Data: Name, email address, phone number, and postal address.

Financial Data: Payment details (processed securely by third-party payment providers).

Account Data: Username and password (if you create an account).

Technical Data: IP address, browser type, device information, time zone, and Site usage data.

Marketing Data: Your communication preferences and responses to surveys or promotions.

We never sell your personal information.

3. How We Collect and Use Your Information
(a) Information You Provide Directly

We collect information when you:

Subscribe to newsletters or download resources

Make a purchase or book a consultation

Contact us through forms or email

Participate in surveys or promotional campaigns

We use this information to:

Deliver requested products and services

Send updates, offers, and marketing materials (you may unsubscribe at any time)

Respond to inquiries and provide customer support

Comply with our legal obligations

Improve our Site and services

(b) Information Collected Automatically

When you visit our Site, we automatically collect non-identifiable data through analytics tools (e.g., Google Analytics). This may include your IP address, browsing behavior, location, and time spent on pages. This helps us improve our user experience and content relevance.

(c) Cookies

Cookies are small files stored on your device to remember preferences and improve functionality.

We use the following types of cookies:

Essential cookies: Enable core Site functionality (e.g., login sessions).

Analytics cookies: Measure Site traffic and user interaction.

Functional cookies: Store user preferences for improved experience.

Advertising cookies: Track ad performance and personalize promotions.

You can disable cookies through your browser settings, but this may limit certain Site features.

4. Third-Party Service Providers

We use trusted third parties to help us operate our business. These include:

Email Service Provider: {e.g., ConvertKit / Mailerlite} – for newsletters and email campaigns.

Payment Processor: {e.g., Stripe / PayPal} – to process payments securely.

Scheduling Software: {e.g., Calendly} – for booking consultations.

Analytics Provider: Google Analytics – for Site performance tracking.

These vendors process personal data in accordance with their own privacy policies and only as necessary to perform contracted services.

5. Legal Basis for Processing (GDPR)

For EU residents, we rely on the following legal bases to process your personal data:

Consent: When you subscribe to newsletters or marketing communications.

Contractual necessity: When processing is required to fulfill a purchase or provide services.

Legal obligation: When we must comply with applicable laws or regulations.

Legitimate interest: When processing is necessary for our business operations, provided your rights are not overridden.

6. Data Retention

We keep personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal, accounting, or reporting obligations.
When data is no longer needed, we securely delete or anonymize it.

7. Data Security

We use industry-standard security measures to safeguard your data, including:

SSL encryption

Regular malware scans

Password protection and limited data access

While we take reasonable precautions, no system is completely secure. You use the Site at your own risk. In case of a data breach, we will notify affected users and relevant authorities as required by law.

8. International Data Transfers

Because we operate globally, your data may be transferred and processed outside your home country, including in Hong Kong, Kenya, and the European Union.
We ensure that all transfers comply with applicable data protection laws and that adequate safeguards (such as Standard Contractual Clauses under GDPR) are in place.

9. Disclosure of Data

We may disclose your personal data:

To comply with legal obligations or court orders

To protect our rights, users, or property

To service providers assisting in our operations

In connection with business transfers, mergers, or acquisitions

10. Your Data Rights
Under the Hong Kong PDPO and Kenya’s DPA 2019, you have the right to:

Request access to your personal data

Request correction or deletion of inaccurate data

Withdraw consent for processing

Object to direct marketing communications

Under the GDPR (for EU residents), you also have the right to:

Restrict processing of your data

Receive and transfer your data (data portability)

Request erasure (“right to be forgotten”)

Lodge a complaint with your local Data Protection Authority

You can exercise these rights by contacting us at {email address}. We will respond within 30 days.

11. Your Consent and Choices

By providing your personal data, you consent to its collection and use as described in this Policy.
You may withdraw your consent at any time, unsubscribe from our communications, or request deletion of your data by emailing us at {email address}.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal or operational changes. The “Effective Date” will indicate the latest revision. Continued use of the Site after changes constitutes acceptance of the updated Policy.

13. Contact Information

Data Controller:
The ElevateHER Company Limited
Registered in Hong Kong SAR
Operating from Nairobi, Kenya

Email: {email address}
Mailing Address: {insert address}
Attention: Data Protection Officer

If you have questions or concerns regarding this Privacy Policy, please contact us directly.

EFFECTIVE DATE: 1 JULY 2024