Friend of a Friend

Friend of a Friend is a private membership community for women working in marketing and creative professions across Europe. This Privacy Policy applies to all personal data collected through our website, membership application, and community platforms.

Data Controller

Jessica Lauretti
VAT: ESZ1429494A
Madrid, Spain

Website: www.friendofafriend.community
Contact: hello@friendofafriend.community

Information We Collect

When you apply for membership

• Name
• Email
• Location (city and country)
• LinkedIn URL
• Years of Experience
• Current Title
• Current Company (Optional)
• Bio
• Employment Type (Full-Time Employee, Freelance/Contractor/Fractional/Consultant/Advisor/Solopreneur, Startup Founder)
• Why are you interested in joining Friend of a Friend?
• How did you hear about FOF?
• Member Referral (Optional)
• What are you looking to gain from joining?
• What can you offer the community?

When you become a paying member

• Billing name and email
• Subscription plan (monthly or annual)
• Payment history and renewal dates

Note: all card and payment data is processed directly by Stripe. Friend of a Friend does not store or have access to your card details.

When you use our community platforms

• Slack profile information and messages
• Event attendance and participation records
• Communications with the founding team

When you subscribe to our newsletter

• Email address
• Subscription preferences and engagement data

How We Use Your Information

We process your personal data for the following purposes and on the following legal bases:

We will never:

• Sell your data to third parties
• Share your data without your consent except as described in this policy
• Use your data for purposes you have not agreed to
• Send you marketing communications without your explicit opt-in

Third Party Processors

We share data with the following third party processors who act on our behalf. All processors are required to handle your data securely and in accordance with GDPR.

For processors located outside the EU, we ensure appropriate safeguards are in place including Standard Contractual Clauses or adequacy decisions where applicable.

How Long We Keep Your Information

We retain your personal data for the following periods:

• Membership application data: retained for the duration of your membership, plus 12 months after membership ends in case of reapplication
• Active membership data: retained for the duration of your membership
• Payment and billing records: retained for 6 years to comply with Spanish tax and accounting obligations
• Newsletter subscriber data: retained until you unsubscribe, then deleted within 30 days
• Community communications (Slack): messages older than 90 days are hidden from view within the workspace but are retained by Slack on their servers in accordance with Slack's own privacy policy and data retention practices. For full details see slack.com/trust/privacy/privacy-policy.

When data is no longer required we delete or anonymise it securely.

How We Store Your Information

Your data is stored on industry-standard secure platforms. We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to member data is limited to the founding team.

Your Rights Under GDPR

As a resident of the EU or UK you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data where there is no legitimate reason for us to continue processing it
• Right to restriction — request that we restrict processing of your data in certain circumstances
• Right to data portability — request your data in a structured, commonly used, machine-readable format. Please note that data held within Slack is subject to Slack's own export functionality. On our current plan we have limited ability to export individual message data — for data held by Slack directly, you may also wish to submit a request to Slack at slack.com/trust/privacy/privacy-policy.
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@friendofafriend.community. We will respond within 30 days.

If you are not satisfied with our response you have the right to lodge a complaint with your national data protection authority. In Spain this is the Agencia Española de Protección de Datos (AEPD) at aepd.es.

Community Privacy

Friend of a Friend is a private, high-trust space. By joining you agree to respect the privacy of other members and to not share conversations, member information, or content from our community platforms outside the community without the explicit consent of the person involved.

Breach of member privacy may result in removal from the community without refund.

Cookies

Our website uses only essential cookies required for the site to function. We do not use tracking, analytics, or advertising cookies. No cookie consent banner is required.

When you complete a payment through Stripe, Stripe may set its own functional cookies as part of the checkout process. These are essential to the transaction and are governed by Stripe's own privacy policy at stripe.com/privacy.

Changes to This Policy

We may update this policy from time to time. Where changes are material we will notify members by email at least 14 days before they take effect. Continued membership after that date constitutes acceptance of the updated policy. The current version is always available at www.friendofafriend.community/privacy.

Contact

Questions about this policy or how we handle your data: hello@friendofafriend.community

Jessica Lauretti
VAT: ESZ1429494A
Madrid, Spain