We’re a non-profit social enterprise working in London schools. Bring us to your school →
Legal

Privacy policy

How we look after the personal information you share with us.

For Beyond the Cycle to review. This policy is a starting draft written for the website. Please check it reflects how you actually handle personal data, add your registered name and address if you have them, and remove this note.

Beyond the Cycle (“we”, “us”) is a non-profit social enterprise supporting girls and young women with menstrual health conditions. This policy explains what personal information we collect through this website, why, and what your rights are. Last updated: 5 October 2026.

Who we are

Beyond the Cycle is responsible for the personal information collected through this website. You can contact us about anything in this policy at beyondthecycle.uk@gmail.com.

What we collect and why

When you contact us

If you use our contact form, we collect your name, email address, who you are getting in touch as, your organisation (if you give it) and your message. We use this only to reply to you and to deal with your enquiry. Our lawful basis is our legitimate interest in responding to people who contact us.

When you share a story in the Journal

If you share a story, we collect the story and its title, and anything else you choose to give us: your first name, a few words about you, and your email address. We also record that you agreed to us publishing it and when. Your story is not public until our team has reviewed it. We may lightly edit it, for example to remove details that could identify you. Your email address is never shown on the website. Our lawful basis is your consent, which you can withdraw at any time by emailing us, and we will remove your story.

Stories can include information about your health. We only publish what you have chosen to share, and you can share anonymously. If you are under 13, please only share a story if a parent or carer has said it is okay.

When you donate

Donations are processed securely by Zeffy, our donation platform. Zeffy collects the details needed to process your gift, such as your name, email address and payment details, under its own privacy policy. We do not see or store your card details. Zeffy shares your name, email and donation details with us so we can thank you and keep proper records.

Who we share it with

We never sell your personal information. We only share it with the services that help us run Beyond the Cycle, such as our website host, our email provider and Zeffy, and only so they can provide those services. We may also share information if the law requires it.

How long we keep it

We keep messages only for as long as we need them to deal with your enquiry. We keep published stories until you ask us to remove them, and we delete stories we decide not to publish. Donation records are kept for as long as we need them for our accounts and legal obligations.

Cookies and similar technology

This website does not use advertising or analytics cookies. We use your browser’s session storage to remember that you have already seen the welcome envelope, so it only plays once per visit. This is cleared when you close your browser. The donation form on our Donate page is provided by Zeffy and may use cookies that are needed to process your donation securely. Links to Instagram and TikTok take you to those sites, which have their own privacy policies.

Your rights

Under UK data protection law you have the right to ask for a copy of the personal information we hold about you, to ask us to correct or delete it, to object to or restrict how we use it, and to withdraw your consent at any time. To make a request, email us at beyondthecycle.uk@gmail.com.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.