Privacy Policy

---

Effective Date: 11.12.24

At Sista Circle, your privacy is our priority. This policy explains how we collect, use, store, and protect your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and related laws.

1. Information We Collect

We may collect the following types of personal information:

Personal Details: Name, email address, phone number, and other information you provide when signing up.

Account Information: Details related to your free or paid membership, including login credentials.

Payment Information (for Paid Subscriptions): Securely processed by third-party payment processors. We do not store your payment information.

Usage Data: IP address, device information, browser type, pages visited, time spent on the site, and other activity.

Communication Data: Messages, posts, or other content shared in our community space.

Consent Records: Your explicit consent to terms and policies.

2. Legal Basis for Processing Your Data (Under GDPR)

We process your personal data only when we have a lawful basis to do so. This includes:

Consent: When you agree to receive communications or participate in our community.

Contractual Obligations: To provide membership services (free or paid) or process transactions.

Legal Compliance: To comply with legal obligations, such as tax or reporting requirements.

Legitimate Interests: For improving our services, preventing fraud, and securing our platform.

3. Your Rights (Under GDPR)

Under the GDPR, you have the following rights regarding your personal data:

1. Right to Access: You can request a copy of the personal data we hold about you.

2. Right to Rectification: You can request corrections to any inaccurate or incomplete data.

3. Right to Erasure (Right to Be Forgotten): You can request that we delete your personal data in certain circumstances.

4. Right to Restrict Processing: You can ask us to limit the processing of your data under certain conditions.

5. Right to Data Portability: You can request your data in a portable format to transfer it to another service.

6. Right to Object: You can object to data processing for legitimate interests, direct marketing, or automated decision-making.

7. Right to Withdraw Consent: If you’ve provided consent, you can withdraw it at any time.

To exercise these rights, contact us at sistacirclehub@gmail.com. We will respond within one month as required under GDPR.

4. Data Retention

We will retain your personal data:

For as long as necessary to provide membership services.

As required to comply with legal, tax, and accounting obligations.

Until you request deletion or withdraw consent (where applicable).

5. Data Transfers Outside the UK

If your personal data is transferred outside the UK (e.g., to cloud providers or third-party services in other countries), we ensure it is protected through one of the following measures:

Adequacy Decisions: Transferring only to countries deemed to have adequate data protection laws by the UK.

Standard Contractual Clauses (SCCs): Using legally approved contracts that ensure your data is secure.

6. How We Protect Your Data

We use industry-standard measures to safeguard your personal information:

Encryption: Data is encrypted during storage and transmission.

Access Controls: Only authorized personnel have access to your data.

Monitoring: Our systems are monitored to detect unauthorized access.

However, no method of transmission over the internet is completely secure, so we encourage you to use strong passwords and report any suspicious activity.

7. Cookies and Tracking (Consent Under GDPR)

We use cookies to improve your experience and provide personalized services. Upon your first visit, we request your explicit consent to use cookies.

Necessary Cookies: Required for site functionality (cannot be disabled).

Analytics Cookies: To analyze site usage and improve performance.

Marketing Cookies: To deliver targeted ads or content (optional).

You can manage your cookie preferences at any time through the cookie settings on our website.

8. Third-Party Processors

We may share your personal data with trusted third-party service providers who process it on our behalf, such as:

Payment processors (e.g., Stripe or PayPal).

Analytics tools (e.g., Google Analytics) to analyze usage trends.

Email marketing platforms (e.g., Mailchimp) to send updates.

We ensure all third-party processors comply with GDPR and have adequate safeguards in place.

9. Reporting Data Breaches

In the unlikely event of a data breach, we will:

1. Notify affected individuals within 72 hours if their data is at risk.

2. Inform the UK Information Commissioner’s Office (ICO) as required by law.

10. Contact Information

If you have questions about this privacy policy or how your data is handled, please contact us:

Sista Circle

Email: sistacirclehub@gmail.com

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe we are not handling your data in accordance with GDPR. For more information, visit www.ico.org.uk.