Privacy Policy

1Who we are

HerWay is an AI-powered workplace confidence training platform developed by a team of four mentees — Nimah, Chloé, Yena, and Aelita — as part of the Women@Dior × UNESCO Dream for Change Challenge 2026, occupational category.

For the purposes of data protection law, HerWay acts as the data controller for the personal information collected through this website and waitlist.

2What data we collect

We only collect data that you voluntarily provide when joining our waitlist. This includes:

• Full name — to personalise our communications with you
• Email address — to contact you about early access and product updates
• Career stage — to better understand our user base and tailor the product
• Practice preferences — to prioritise which features to build first
• Consent records — to document that you have agreed to our data processing terms

We do not collect any sensitive personal data (health information, financial data, identity documents, etc.) through this platform.

3Why we collect it — legal basis

Under the GDPR (Article 6), we process your personal data on the following legal bases:

• Consent (Art. 6(1)(a)) — you explicitly tick the consent checkbox when submitting the waitlist form. You can withdraw this consent at any time.
• Legitimate interest (Art. 6(1)(f)) — to understand who our audience is and improve the product before launch, in a way that does not override your rights.

4How we use your data

We use the data you provide exclusively for the following purposes:

• Sending you early access information when HerWay launches
• Sharing occasional product updates, if you opted in to our newsletter
• Understanding aggregate trends about our waitlist (e.g. "most users are early-career") to guide product development — this analysis is never tied to you personally
• Responding to any questions or requests you send us

We will never use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5Who we share it with

We do not sell, rent, or trade your personal data to any third party, ever.

Your data is stored in Google Forms / Google Sheets, operated by Google LLC. Google acts as a data processor on our behalf and stores data on servers within the EU or in countries that provide an adequate level of protection under GDPR. Google's privacy policy is available at policies.google.com/privacy.

Outside of Google's infrastructure, we do not share your data with any other organisation, partner, or individual — including Women@Dior, LVMH, or UNESCO — without your explicit prior consent.

6How long we keep it

We retain your waitlist data for a maximum of 24 months from the date of submission, or until you request deletion — whichever comes first.

If HerWay launches and you become a user, a separate retention policy will apply to your account data, and you will be informed at that time.

If HerWay does not launch, all waitlist data will be securely deleted within 30 days of that decision being made.

7Your rights (GDPR / RGPD)

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access — you can request a copy of all data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure ("right to be forgotten") — you can ask us to delete your data entirely
• Right to restriction — you can ask us to limit how we use your data
• Right to data portability — you can ask for your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interest
• Right to withdraw consent — at any time, without affecting prior processing

If you are based in France or the EU and believe your rights have not been respected, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at cnil.fr.

8Cookies & tracking

The HerWay website is a static site hosted on GitHub Pages. We do not use:

• Analytics cookies (Google Analytics, Hotjar, etc.)
• Advertising or retargeting cookies
• Third-party tracking scripts
• Session storage beyond what your browser handles natively

The only external resource loaded is Google Fonts (for typography), which may set a short-lived browser cache entry but does not track users across sites.

9Data security

We take reasonable technical and organisational measures to protect your data:

• Data is transmitted over HTTPS (encrypted in transit)
• Waitlist responses are stored in a Google Sheets document accessible only to the HerWay team
• We do not store passwords or financial information
• Access to the Google Sheets is restricted to named team members only

While we do our best to protect your data, no method of transmission over the internet is 100% secure. If you become aware of any security issue, please contact us immediately at herway.dfc@gmail.com.

10Contact & complaints

For any question, request, or complaint regarding this Privacy Policy or the way we handle your data, please reach out to us directly:

This policy may be updated from time to time. The date at the top of this page will always reflect the most recent version. We will notify waitlist members by email of any significant changes.