Privacy notice

1. Who we are

Upgrading Women Limited is responsible for the personal information described in this notice.

Our address is 3 Ballina Mews, Southampton SO16 4LN, United Kingdom.

For privacy enquiries or to exercise your data protection rights, email rebecca@upgradingwomen.com.

This notice covers rebeccaleppard.com and the personal information we use to respond to enquiries, arrange bookings and deliver our services. External websites and platforms linked from this website have their own privacy notices.

2. Information we collect and where it comes from

Depending on your relationship with us, we may use:

• Your name, email address and other contact details.
• Your business, role and information you choose to share about your work or enquiry.
• Booking and event-registration details.
• Correspondence, agreed service requirements and information needed to manage our client relationship.
• Invoice, payment and accounting records.
• Technical information processed to deliver and secure the website, such as IP addresses, browser and device information, requested pages and request times.

You may provide information directly by contacting us, during a booking or event registration, or while working with us. We may also receive booking and registration information from the platforms you use to book our services or events.

The website does not currently have a direct contact form, newsletter signup form or payment form. A link to an external booking platform does not mean that this website stores payment-card details.

You do not have to provide optional information. However, we may be unable to respond to an enquiry, arrange a booking or deliver a service without the necessary contact and service details.

3. Why we use information and our lawful bases

Enquiries and prospective services

We use information to respond to you and discuss your requirements. Where you ask us to take steps towards entering a contract, we rely on that basis. For other ordinary enquiries, we rely on our legitimate interests in communicating with people who contact our business.

Delivering services

We use information to arrange and provide agreed services, communicate with you and manage our client relationship. We rely on contract where applicable, and our legitimate interests in administering business relationships where the contract is with an organisation rather than you personally.

Invoices and business records

We use information for invoicing, payments, accounting and related administration. We rely on legal obligation where records are legally required, and legitimate interests for justified business administration or longer retention.

Website operation and security

We and our hosting providers process technical information to deliver the website, maintain its reliability, investigate faults and protect it against abuse. We rely on our legitimate interests in operating a secure website, subject to your rights and interests.

We do not sell your personal information.

4. Who may access information

Rebecca and authorised employees of Upgrading Women Limited may access personal information where needed for their work. This includes employees based in Indonesia who are directly employed by the same legal entity. Their employment contracts include confidentiality clauses.

Our operational providers include:

• Google Workspace, including Gmail and Google Sheets, for communications and business records.
• Notion, for customer relationship management records.
• Lovable and its hosting and security infrastructure, including Cloudflare, for website delivery, reliability and security.

We also link to TidyCal for bookings and Luma for events. These are external platforms, not forms embedded in this website. Their own privacy notices explain their processing. We use booking and registration information made available to us to arrange and deliver the relevant services or events.

We may disclose information where required by law or where necessary to establish, exercise or defend legal rights.

5. Access and processing outside the UK

Our employees in Indonesia may access personal information for their work within Upgrading Women Limited.

Some of our service providers may process information outside the UK, including in the United States. The arrangements depend on the provider and the service being used.

[Before publication: confirm the international-transfer arrangements applicable to our provider accounts, identify the adequacy decision or contractual safeguards relied upon where required, and explain how people can obtain information about those safeguards.]

For questions about overseas processing, contact rebecca@upgradingwomen.com.

6. How long we keep information

Our business retention policy is:

• Ordinary enquiries, discovery-call and client contact records: three years after the last meaningful contact or the end of the relationship.
• Accounting records: ten years after the applicable accounting period ends. This is our chosen business retention policy, not a statement that every accounting record must legally be kept for ten years.

A legal obligation, dispute or other justified need may require us to keep particular records longer.

Technical and security information held by hosting providers is retained under their applicable policies and arrangements. Relevant criteria include the time needed to operate and secure the service, investigate incidents and meet legal obligations. We do not promise a fixed deletion period for provider logs that we have not verified.

7. Cookies, technical storage and fonts

Visitor analytics

Lovable Visitor analytics is currently disabled for this website.

After it was disabled on 28 October 2026, checks of the live founder-brand and privacy pages found that the previously observed analytics scripts and their associated requests were no longer loading.

Disabling analytics does not necessarily delete cookies already stored in your browser. An existing session-id cookie may remain until it expires or you remove it. The inspected version of the previous analytics script used a 30-minute cookie duration, refreshed when it sent an event.

Security and website delivery

Cloudflare may set a __cf_bm cookie to help distinguish legitimate visitors from automated traffic and protect the website. Cloudflare states that this cookie expires after 30 minutes of continuous inactivity. Cloudflare cookie documentation

Technical cookies or storage may also be used by the hosting platform to deliver the website. The site’s navigation framework uses session storage to restore scroll position.

Disabling Visitor analytics does not disable hosting security, operational logs or all technical storage.

Google Fonts

We use Google Fonts to display the website’s typography. When your browser requests these fonts, Google receives your IP address and technical request information, including browser information and the referring page.

Google states that its Fonts API does not set cookies or use this information to create end-user profiles or for targeted advertising. Google Fonts privacy information

Your browser settings

You can use your browser settings to view, block or delete cookies. Blocking technical cookies may affect how parts of the website work.

8. Your rights

Depending on the circumstances, you may have the right to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request deletion.
• Restrict how information is used.
• Receive certain information in a portable format.
• Object to processing based on legitimate interests.

You have the right to object to the use of your personal information for direct marketing at any time.

Where processing relies on consent, you can withdraw that consent. This does not affect the lawfulness of processing before withdrawal.

To exercise your rights, email rebecca@upgradingwomen.com. We may need to verify your identity before acting on a request.

We normally respond within one month, subject to the extensions and exceptions allowed by law. Rights depend on the circumstances, so a request does not always require us to delete every record.

9. Complaints

Please contact us if you have a concern about how we handle your information.

You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk, or to another relevant supervisory authority where applicable. You do not have to contact us before approaching the ICO.

10. External links and changes

This website links to other websites and platforms. Their own privacy notices apply to their services.

We may update this notice when our activities, providers or website change. The latest version and its update date will appear on this page.