AllBright Everywoman (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.
This policy explains how we collect, use, and protect your personal data when you use our website: allbrighteverywoman.com.
1. Who we are
This website is operated by Everywoman Limited, registered in England & Wales (Company No. 3798319), registered office: 72 Welbeck Street, London, W1G 0AY.
We act as the data controller for the purposes of applicable data protection law.
2. What data we collect
We may collect and process the following categories of personal data:
- Identity data (e.g. name, job title)
- Contact data (e.g. email address, telephone number)
- Account data (e.g. login details, membership information)
- Transaction data (e.g. event bookings, payments)
- Technical data (e.g. IP address, browser type, device information)
- Usage data (e.g. how you use our website)
- Marketing and communications preferences
3. How we collect your data
We collect data when you:
- Register for an account or membership
- Book events or services
- Complete forms (including embedded Salesforce / Account Engagement forms)
- Subscribe to communications
- Interact with our website (including via analytics tools such as Matomo)
We may also collect personal data through business interactions, event participation or direct engagement with our team.
4. Lawful basis for processing
We process your personal data under the following lawful bases:
- Contract – to provide services you request, including memberships, event bookings and related services
- Legitimate interests – including:
- improving and optimising our website and services
- understanding user engagement
- supporting business operations, including managing client relationships, developing services and business development activities
We rely on legitimate interests only where the processing is proportionate and does not override your rights and freedoms.
- Consent – for marketing communications where required and for certain cookies
- Legal obligation – where required to comply with applicable laws
5. How we use your data
We use your data to:
- Provide and manage memberships and services
- Process bookings and payments
- Communicate with you
- Improve website functionality and user experience
- Send marketing communications where permitted, including communications about our services, events and partnerships, based on your preferences or our legitimate interests where applicable
When you do not provide personal data required to deliver services, we may be unable to provide those services.
Where appropriate, we may contact individuals at organisations in relation to our services, events and partnerships, in line with applicable data protection and marketing laws.
6. Third-party services
We use trusted third-party providers, including:
- Salesforce / Account Engagement (forms and CRM)
- Matomo (analytics)
These providers process personal data on our behalf as data processors, under contractual obligations to process personal data only on our instructions and to protect it appropriately.
7. Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
Retention periods are determined based on the nature of the data, legal obligations, and business needs. For example:
- Account and membership data: duration of relationship plus a defined period after the end of the relationship in line with legal and business requirements
- Transaction data: retained in line with legal and financial obligations
- Marketing data: until you withdraw consent or object to receiving communications
8. Your rights
Under data protection law, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request transfer of your data
- Withdraw consent at any time
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise your rights, please contact us at: contact@allbrighteverywoman.com
9. Data security
We implement appropriate technical and organisational measures to protect your personal data.
10. International transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses or transfers to countries deemed to provide adequate protection.
11. Cookies
We use cookies and similar technologies. Please see our Cookie Policy for further details.
12. Changes to this policy
We may update this policy from time to time. Please check back periodically.
Last updated: 27 March 2026