Privacy Notice

1. Who we are

Global HER is a social initiative operated by HER Venture HUB ("we", "us", "the controller"). We act as the data controller for the personal data described below. Questions or requests can be sent to we@herventurehub.com.

2. What data we collect

• Contact details: full name, email, venture name, country.
• Diagnostic answers: the intake responses you submit to generate your Market Readiness Level (MRL) score.
• Consent records: the date and scope of the consent you gave (privacy consent is required; marketing consent is optional).
• Technical metadata: approximate timestamp of submission, and — if enabled — a hashed reference for fraud and spam prevention. No advertising cookies, no third-party trackers.

3. Why we process your data (lawful basis)

• Deliver the MRL diagnostic and follow up on your request — legal basis: performance of a service you requested (Art. 6(1)(b) GDPR).
• Contact you about the Acceleration Program based on your score — legal basis: your explicit consent (Art. 6(1)(a) GDPR), given when you tick the consent box.
• Send occasional updates about programs, cohorts and opportunities — only if you opt in to marketing. Legal basis: consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.
• Meet our legal obligations and secure our platform — legal basis: legal obligation and legitimate interest (Art. 6(1)(c) and 6(1)(f) GDPR).

4. Who can see your data

Your data is visible to the Global HER program team on a need-to-know basis. We do not sell your data and we do not share it with third parties for their own marketing. We only rely on vetted subprocessors that are contractually bound to protect your data:

• Hosting & database: our infrastructure provider (EU/US regions with Standard Contractual Clauses where applicable).
• Email delivery: transactional email provider used solely to send you diagnostic results and follow-up messages you requested.

5. How long we keep your data

We retain diagnostic submissions and contact data for up to 24 months from your last interaction, so we can follow up meaningfully and support you across program cycles. Marketing preferences are retained until you withdraw consent. After the retention period we delete or fully anonymise your data.

6. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Withdraw consent at any time (without affecting past processing).
• Data portability — receive your data in a machine-readable format.
• Lodge a complaint with your national data protection authority.

To exercise any of these rights, email we@herventurehub.com. We respond within 30 days.

7. Security

Data is transmitted over TLS and stored in an access-controlled database with row-level security. Access is limited to team members who need it to serve you.

8. Cookies

We use only strictly necessary cookies required for the platform to function (session, security). We do not use advertising or cross-site tracking cookies.

9. Changes to this notice

We will post material changes on this page and update the "last updated" date above. If changes affect how we process your data under consent, we will ask for renewed consent.