Legal
Privacy Policy
Last updated 22 April 2026. How we collect, use, and protect your personal data. Your privacy matters to us, and we are committed to handling your information with care and transparency.
Information We Collect
In this policy, "Sister Squad", "we", "us", and "our" refer to Sister Squad, operated by Emma Weafer.
When you interact with Sister Squad, whether by visiting our website, signing up for a programme, purchasing a membership, or getting in touch, we may collect certain personal information. This includes your name, email address, billing information (processed securely via our payment provider), and any details you voluntarily share through forms or direct correspondence.
We may also collect non-personally identifiable data automatically, such as your browser type, device information, pages visited, and time spent on site. Where required, this data is collected only after you have allowed analytics cookies, and helps us understand how our website is used and improve the experience for everyone.
How We Use Your Information
The information we collect is used to provide, maintain, and improve our services. Specifically, we use your data to:
- Process your membership or purchase and manage your account
- Deliver programme content, updates, and any materials included in your subscription
- Send transactional emails, such as payment confirmations and account notifications
- Respond to enquiries and provide customer support
- Send marketing emails or newsletters, where you have given your consent to receive them
- Analyse website usage to improve performance, content, and user experience
- Comply with our legal obligations
We will never use your data in ways that are not described in this policy, and we will never sell your personal information to third parties.
Sharing Your Information
We do not sell, rent, or trade your personal data. We may share information with carefully selected third-party service providers who assist us in operating our business, for example, our payment processor, email platform, or website hosting provider. These providers are only granted access to the information necessary to perform their specific function and are contractually required to handle your data securely and in accordance with applicable law.
We may also disclose your information where required to do so by law, or to protect the rights, safety, or property of Sister Squad or others.
Cookies
Our website uses cookies, small text files stored on your device, to keep the site working, remember your cookie preferences, understand website performance, and, where enabled, support relevant marketing. Essential cookies are necessary for the site to function correctly and cannot be disabled through our cookie banner.
Analytics cookies help us understand visitor behaviour so we can improve the site over time. Sister Squad uses PostHog for optional website analytics, and may use Google Analytics through Google Tag Manager where analytics consent has been granted. Marketing cookies, such as Meta Pixel where enabled through Google Tag Manager, are used only where you have granted marketing consent.
You can accept, reject, or change non-essential cookie preferences using the cookie banner or the Cookie Settings link in the footer. You can also control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of parts of our website.
Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes outlined in this policy, or as required by law. If you cancel your membership, we will retain basic account and transaction records for a period of up to seven years for legal and financial compliance purposes, after which your data will be securely deleted.
Your Rights (GDPR)
If you are located in the United Kingdom or European Economic Area, you have the following rights in relation to your personal data under the UK GDPR and applicable data protection legislation:
- The right to access the personal data we hold about you
- The right to request correction of any inaccurate or incomplete data
- The right to request erasure of your data (the "right to be forgotten")
- The right to object to or restrict certain types of processing
- The right to data portability, which means receiving your data in a structured, machine-readable format
- The right to withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us via our contact page. We will respond to all legitimate requests within 30 days.
Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. Payments are handled by our third-party payment processor using industry-standard encryption; we do not store card details on our own servers.
While we take every reasonable precaution, no method of data transmission or storage is entirely infallible. We cannot guarantee absolute security, and you share information with us at your own risk.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page with a revised date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your data, please get in touch via our contact page. We take all privacy matters seriously and will respond as quickly as possible.