Legal

Privacy Notice

Last updated: May 12, 2026

1. Who we are

Her Structured Empire ("we", "us", "our") is the data controller for the personal data collected through this service. If you have any questions about this notice, contact us at hello@herstructuredempire.com.

2. Personal data we collect

We collect the following categories of personal data:
  • Account data — name, email address, login credentials.
  • Customer support data — messages and information you send us.
  • Content data — the documents and brand information you create in the studio.
  • Usage data — pages visited, features used, device identifiers, IP address, browser type.
  • Marketing data — preferences for receiving emails from us (where applicable).

3. How we use your data

We use your personal data to:
  • Create and manage your account (legal basis: performance of a contract).
  • Provide and improve the service (legal basis: legitimate interests).
  • Provide customer support (legal basis: performance of a contract).
  • Detect and prevent fraud and abuse (legal basis: legitimate interests).
  • Send service-related communications (legal basis: performance of a contract).
  • Send marketing communications, where you have opted in (legal basis: consent).
  • Comply with legal obligations (legal basis: legal obligation).

4. Who we share your data with

We share personal data with the following categories of recipients:
  • Our payment provider, Paddle — Paddle.com Market Limited acts as our Merchant of Record, handling sale of the product, subscription management, payments, tax compliance, invoicing, and refunds.
  • Service providers and subprocessors — including hosting and database infrastructure, authentication, analytics, and AI providers used to power document generation.
  • Professional advisers — legal, accounting and similar advisers, where necessary.
  • Authorities — where required by law or to protect our legal rights.

5. Data retention

We keep personal data only for as long as needed to provide the service and for reasonable legal, accounting and security purposes. When data is no longer required, we delete or anonymise it.

6. International transfers

Some of our service providers are based outside your country. Where data leaves the UK/EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) to protect it.

7. Your rights

Depending on where you live, you may have the right to: access your personal data; correct inaccurate data; request deletion; restrict or object to processing; receive a portable copy; withdraw consent; and complain to your local data protection authority. To exercise these rights, email us — we will respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular review of our security practices. No system is perfectly secure, but we take this responsibility seriously.

9. Cookies

We use a small number of cookies and similar technologies. Essential cookies are required for the service to work (for example, to keep you signed in). Analytics cookies help us understand how the service is used so we can improve it. You can manage cookie preferences through your browser settings.

10. Changes

We may update this notice from time to time. The "Last updated" date at the top will reflect the latest version. Material changes will be communicated to you in advance.