Privacy Policy

Last updated: 8 August 2026

1. Introduction

The Everyday Female Athlete ("The EFA", "we", "our" or "us") is committed to protecting your privacy and handling your personal data responsibly, transparently and securely.

This Privacy Policy explains how we collect, use, store, share and protect your personal data when you:

  • Visit our website

  • Create or use an EFA learner account

  • Contact us

  • Subscribe to our newsletter

  • Download resources

  • Join a waitlist

  • Purchase courses, workshops or digital resources

  • Enrol on or participate in an EFA course or programme

  • Access learning through our online learning platform

  • Participate in live or recorded webinars, workshops, teaching sessions or events

  • Complete assessments, learning activities or feedback

  • Communicate with us

  • Otherwise interact with The Everyday Female Athlete

We process personal data in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR") where applicable, and other relevant UK data protection legislation.

For information about the cookies and similar technologies used on our website and digital platforms and how you can manage your preferences, please see our Cookie Policy.

2. Who We Are

The Everyday Female Athlete is a trading name of The Blonde Collective Ltd, a private limited company registered in England and Wales.

Company number: 16407204
Registered office: Nightingale House, 46–48 East Street, Epsom, KT17 1HQ
Email: hello@everydayfemaleathlete.com

For the purposes of UK data protection legislation, The Blonde Collective Ltd is the data controller responsible for personal data collected and processed by The Everyday Female Athlete.

3. Scope

This Privacy Policy applies to personal data collected through our website, online learning platform, digital services, educational services and other interactions with individuals.

This may include information collected through:

  • Our website

  • Thinkific, our online learning platform

  • Contact and enquiry forms

  • Newsletter subscriptions

  • Downloadable educational resources

  • Course registrations and enrolments

  • Waitlists

  • Educational events, workshops and webinars

  • Live and recorded teaching sessions

  • Customer and learner support

  • Learner accounts

  • Assessments and learning activities

  • Surveys and feedback

  • Email correspondence

  • Other interactions with The Everyday Female Athlete

This Privacy Policy does not apply to third-party websites that you choose to access through links from our website or services. Those websites operate under their own privacy policies.

4. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

Identity information

This may include:

  • Name

  • Title

  • Date of birth, where required

  • Profession

  • Organisation

  • Professional qualifications or experience where relevant to course eligibility or certification

Contact information

This may include:

  • Email address

  • Telephone number

  • Postal address

  • Billing address

Education and learner information

This may include:

  • Learner account details and identifiers

  • Course and programme enrolments

  • Attendance at live teaching sessions

  • Learning progress

  • Lessons and modules accessed or completed

  • Quiz and assessment activity

  • Assessment submissions

  • Assessment outcomes

  • Workbook or learning activity submissions where applicable

  • Certificates issued

  • Certification and CPD records, where applicable

  • Questions, feedback or contributions made through the learning platform

  • Learner support history

  • Course completion information

Where EFA uses Thinkific to deliver education, Thinkific may process information necessary to provide and administer your learner account and learning experience on our behalf.

Live teaching, webinars and recordings

Where you participate in an EFA live teaching session, workshop, webinar, Q&A or similar event, we may process information including:

  • Your name and registration details

  • Attendance

  • Questions or contributions you make

  • Chat messages

  • Feedback

  • Your image or voice where you choose to participate using video or audio

Some sessions may be recorded for educational purposes and made available to authorised EFA learners.

Where a session is being recorded, we will take reasonable steps to inform participants before or when recording begins.

If you do not wish your image or voice to appear in a recording, you may be able to participate using your camera and microphone settings or submit questions through another available method, depending on the format of the session.

Transaction information

This may include:

  • Purchases

  • Order history

  • Payment confirmations and status

  • Invoices

  • Refunds

  • Subscription or payment-plan information

Payment-card information is processed securely by authorised payment providers. The Everyday Female Athlete does not normally receive or store complete payment-card details.

Technical and usage information

This may include:

  • IP address

  • Browser type and version

  • Device type and identifiers

  • Operating system

  • Website and learning-platform usage information

  • Pages, lessons or areas accessed

  • Date and time of access

  • Referring website

  • Cookie and similar technology identifiers

  • Approximate geographic location

  • Diagnostic and performance information

Marketing information

This may include:

  • Newsletter subscriptions

  • Marketing preferences

  • Waitlist registrations

  • Event registrations

  • Resource downloads

  • Marketing consent records

  • Email engagement information where supported by our communications platform

Communications

We may retain records of:

  • Emails

  • Contact enquiries

  • Customer or learner support requests

  • Feedback

  • Testimonials provided with permission

  • Social media messages

  • Complaints and appeals

  • Other correspondence

Special category personal data

In limited circumstances, you may voluntarily provide information concerning your health, disability or accessibility requirements when requesting a reasonable adjustment or support to participate in an EFA course, programme or event.

Because EFA provides education relating to women's health, some course discussions, questions or learning activities may involve health-related subject matter. We ask learners not to provide unnecessary personal health information about themselves or identifiable information about clients or other third parties.

Where case studies or client examples are used within learning activities, learners should anonymise personal information unless there is an appropriate lawful basis for sharing it and EFA has specifically requested otherwise.

We will only process special category personal data where we have both an appropriate lawful basis under Article 6 of the UK GDPR and an applicable condition for processing under Article 9.

We ask that you do not provide sensitive personal data unless it is reasonably necessary for your enquiry, participation or use of our services.

5. How We Collect Your Personal Data

We may collect personal data in the following ways.

Directly from you

For example, when you:

  • Complete a form

  • Subscribe to communications

  • Download a resource

  • Register for an event

  • Join a waitlist

  • Purchase an educational product or service

  • Create a learner account

  • Enrol on or participate in a course or programme

  • Complete a quiz or assessment

  • Submit coursework or another learning activity

  • Attend or contribute to a live session

  • Request support or a reasonable adjustment

  • Make a complaint or appeal

  • Communicate with us

Automatically

When you use our website or learning platform, cookies and other storage or access technologies may collect technical and usage information.

From service providers and other third parties

We may receive relevant information from providers supporting our:

  • Website

  • Online learning platform

  • Payment processing

  • Email communications

  • Marketing systems

  • Analytics

  • Events, video conferencing and webinars

  • Customer or learner support

  • Certification or accreditation processes

Through your relationship with us

We may generate records including:

  • Course progress

  • Assessment results

  • Certificates

  • Attendance

  • Purchase history

  • Support history

  • Account activity

  • Learning-platform activity

  • Communications

We seek to collect only personal data that is reasonably necessary for the purposes described in this Privacy Policy.

Information required to provide our services

Where we need certain personal data to enter into or perform a contract with you, we will identify that information when it is requested.

If you do not provide information that is required, we may be unable to process a purchase, create or administer a learner account, enrol you on a course, provide an educational service, issue certification or fulfil your request.

6. How We Use Your Personal Data

We may use your personal data to:

  • Provide and administer courses, programmes, educational resources and services

  • Create and manage learner accounts

  • Provide and manage access to our online learning platform

  • Administer assessments and learner progression

  • Maintain educational and certification records

  • Record and monitor course participation and completion

  • Process purchases, payments and refunds

  • Deliver digital resources and educational content

  • Deliver live teaching, webinars, workshops and events

  • Make recordings available to authorised learners where applicable

  • Verify identity where appropriate

  • Respond to enquiries

  • Provide customer and learner support

  • Manage complaints, appeals and reasonable-adjustment requests

  • Send service-related updates and learner account notifications

  • Send marketing communications where permitted

  • Manage marketing preferences

  • Personalise relevant communications

  • Maintain and improve our website, learning platform, education and services

  • Understand how our educational products and services are used

  • Authenticate accounts and maintain security

  • Prevent fraud, misuse and security incidents

  • Maintain business and financial records

  • Meet legal, regulatory, safeguarding, accreditation, certification and contractual obligations

  • Establish, exercise or defend legal claims

We will normally use personal data only for the purpose for which it was collected or for another compatible purpose permitted by law.

We do not sell personal data.

7. Lawful Bases for Processing

The lawful basis we rely upon depends on how you interact with The Everyday Female Athlete and why we process your personal data.

More than one lawful basis may apply in some circumstances.

Performance of a contract

We may process personal data where necessary to enter into or perform a contract with you, including:

  • Processing purchases

  • Creating and administering learner accounts

  • Providing course and programme access

  • Delivering educational services

  • Providing live and recorded teaching

  • Administering assessments

  • Managing learner progression

  • Issuing certificates

  • Providing customer and learner support

Legitimate interests

We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

  • Operating and improving our services

  • Developing and improving educational content

  • Understanding learner engagement and course performance

  • Responding to enquiries

  • Maintaining website, learning-platform and information security

  • Preventing fraud and misuse

  • Understanding website and service performance

  • Managing our business

  • Maintaining appropriate records

  • Protecting our legal rights

Before relying on legitimate interests, we consider and balance our interests against the potential impact on individuals.

Legal obligation

We may process personal data where necessary to comply with legal or regulatory requirements, including:

  • Data protection requirements

  • Financial and tax obligations

  • Consumer protection requirements

  • Accreditation or certification requirements where legally or contractually applicable

  • Court orders or lawful regulatory requests

Consent

We may rely on consent for purposes including:

  • Certain marketing communications

  • Non-essential cookies and similar technologies

  • Certain uses of photographs, video, testimonials or promotional materials

  • Certain processing of special category personal data where consent is the appropriate legal basis

You may withdraw consent at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.

Special category personal data

Where we process special category personal data, we identify both an appropriate Article 6 lawful basis and an applicable Article 9 condition under the UK GDPR.

8. How We Share Personal Data

We only share personal data where reasonably necessary and where there is an appropriate basis for doing so.

Online learning platform: Thinkific

The EFA uses Thinkific to host and deliver online education and administer learner accounts.

Thinkific may process personal data on our behalf where necessary to provide services including:

  • Learner account creation and administration

  • Course enrolment and access

  • Hosting and delivery of educational content

  • Recording learner progress and activity

  • Course administration

  • Assessments and learning activities

  • Learner communications and notifications where enabled

  • Platform analytics, security and technical support

The relevant Thinkific contracting entity is Thinkific Labs Inc., based in British Columbia, Canada.

For personal data processed by Thinkific on EFA's behalf through the learning platform, EFA acts as the data controller and Thinkific acts as a data processor, subject to Thinkific's applicable contractual and data-processing terms.

Thinkific may use authorised sub-processors in providing its services.

Other service providers

We may also use providers supporting:

  • Website hosting and management

  • Payment processing

  • Email communications and marketing

  • Customer relationship management

  • Website and service analytics

  • Cloud storage

  • Video conferencing, webinars and live teaching

  • Technical and administrative services

  • Accounting and business administration

Providers receive only the personal data reasonably necessary to perform the relevant services.

Depending on the service and circumstances, a provider may act as our data processor or as an independent data controller.

Accreditation and certification partners

Where necessary, limited personal data may be shared with accreditation, certification or awarding organisations for administration, verification, quality assurance or related purposes.

Where this applies, we will only share information that is reasonably necessary for the relevant purpose.

Professional advisers

We may share personal data with accountants, solicitors, insurers and other professional advisers where necessary.

Legal and regulatory authorities

We may disclose personal data where required to:

  • Comply with applicable law

  • Respond to lawful requests

  • Protect our legal rights

  • Prevent fraud or unlawful activity

  • Protect the rights or safety of individuals

Business transfers

If The Blonde Collective Ltd or relevant business assets are sold, reorganised or transferred, personal data may form part of that transaction, subject to applicable data protection requirements.

With your agreement

We may share personal data where you have asked or authorised us to do so.

9. International Transfers

Some of our service providers operate internationally and may process, store or make personal data accessible outside the United Kingdom.

This includes our online learning platform provider, Thinkific Labs Inc., which is based in Canada, and may also include Thinkific's authorised sub-processors and other technology providers.

Where the use of a service provider involves a restricted transfer of personal data outside the United Kingdom, we take steps to ensure that an appropriate transfer mechanism or safeguard permitted by UK data protection law is in place.

Depending on the destination and circumstances, this may include:

  • UK adequacy regulations

  • The UK International Data Transfer Agreement

  • The UK Addendum to the European Commission's Standard Contractual Clauses

  • Standard contractual protections used by our service providers

  • Another lawful transfer mechanism permitted under UK data protection law

Thinkific's Data Processing Addendum provides for relevant international transfers of UK personal data through appropriate safeguards, including use of the UK Addendum to the Standard Contractual Clauses where applicable.

Where required, we will also consider whether additional safeguards are appropriate.

You may contact hello@everydayfemaleathlete.com if you would like further information about safeguards applying to an international transfer of your personal data.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, regulatory, contractual, accreditation and operational requirements.

When determining retention periods, we consider:

  • The purpose of processing

  • The nature and sensitivity of the personal data

  • Contractual requirements

  • Tax and accounting requirements

  • Accreditation or certification requirements

  • Learner-record and certification-verification requirements

  • Complaints, disputes and legal claims

  • Our legitimate business requirements

Indicative periods may include:

  • General enquiries: up to 24 months

  • Marketing records: until consent is withdrawn, an objection is received or the information is no longer required

  • Learner and certification records: for the period reasonably required to administer and verify the relevant education or certification and meet applicable accreditation requirements

  • Learner-platform information: for as long as reasonably necessary to provide the learner account, education or associated services and meet our contractual, certification or record-keeping requirements

  • Live teaching recordings: for as long as reasonably required to provide the relevant course or learning resource, subject to the nature and purpose of the recording

  • Financial and transaction records: for the period required by applicable tax and accounting legislation

  • Website and learning-platform analytics: according to applicable platform settings, consent choices and configured retention periods

  • Complaints and appeals: for a period appropriate to the matter and any applicable legal, contractual or regulatory requirements

When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of where reasonably practicable and subject to our service providers' applicable deletion processes.

11. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, destruction, alteration, disclosure or access.

Measures may include:

  • Secure website and learning-platform hosting

  • Encryption where appropriate

  • Password protection

  • Access controls

  • Multi-factor authentication where available

  • Secure payment providers

  • Platform and software updates

  • Service-provider due diligence

  • Appropriate contractual and data-processing safeguards

  • Confidentiality requirements

No internet transmission or electronic storage system can be guaranteed to be completely secure.

If a personal data breach occurs, we will assess and respond to it in accordance with applicable law, including notifying the Information Commissioner's Office ("ICO") and affected individuals where legally required.

12. Your Privacy Rights

Depending on the circumstances, you may have the right to:

  • Be informed about how your personal data is used

  • Request access to your personal data

  • Ask us to correct inaccurate or incomplete personal data

  • Request erasure in certain circumstances

  • Request restriction of processing in certain circumstances

  • Receive certain personal data in a portable format

  • Object to certain processing

  • Withdraw consent where processing relies upon consent

  • Raise concerns regarding certain automated decision-making

These rights are not absolute and their application depends on the circumstances and lawful basis for processing.

We do not currently use solely automated decision-making that produces legal or similarly significant effects concerning individuals.

To exercise a privacy right, email hello@everydayfemaleathlete.com.

We may need to verify your identity before responding.

We will respond without undue delay and normally within one month, subject to any extension permitted by applicable law.

Your right to object

Where we process your personal data on the basis of our legitimate interests, you may have the right to object to that processing.

You have an absolute right to object to the use of your personal data for direct marketing.

You may exercise this right by emailing hello@everydayfemaleathlete.com or, for email marketing, by using the unsubscribe facility provided.

13. Marketing Communications

We may send marketing communications where:

  • You have provided consent

  • Applicable law otherwise permits us to do so

Marketing consent is separate from the creation of a learner account, acceptance of our Terms of Use or Privacy Policy, and the delivery of a course or service.

You can unsubscribe from marketing communications at any time by:

Service, transactional and administrative communications are not marketing communications and may still be sent where necessary to manage an account, purchase, enrolment, course, certification or other service.

14. Cookies and Similar Technologies

Our website and online learning services may use cookies and other storage or access technologies.

Where required by law, non-essential technologies will not be used until the necessary consent has been obtained.

Cookies used on the EFA website and cookies or similar technologies used through third-party services or our online learning platform may differ.

For information about the technologies we use and how to manage your preferences, please read our Cookie Policy and any cookie controls presented on the relevant website or platform.

15. Children's Privacy

Our educational services are primarily intended for adults aged 18 or over and are not directed at children.

We do not knowingly collect children's personal data through the ordinary operation of our website and educational services.

If you believe a child has provided personal data to us without appropriate authority, please contact us.

16. Complaints

If you have concerns about how we use your personal data, please contact us first:

hello@everydayfemaleathlete.com

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Further information about your rights and how to contact the ICO is available from the Information Commissioner's Office.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, regulatory guidance, technology, our learning platforms, service providers, educational services or processing activities.

The current version will be published with an updated revision date.

Where a change materially affects how we process personal data, we may provide additional notice where appropriate.

18. Contact Us

For privacy enquiries or requests:

The Everyday Female Athlete
A trading name of The Blonde Collective Ltd

Email: hello@everydayfemaleathlete.com
Company number: 16407204
Registered office: Nightingale House, 46–48 East Street, Epsom, KT17 1HQ





Cookie Policy