Girl FrAIday™

Privacy Notice

Last updated 7 July 2026

1. Introduction

This privacy notice provides you with details of how we collect and process your personal data through your use of our site girlfraiday.com. By providing us with your data, you warrant to us that you are over 13 years of age.

ContinUnity Ltd is the data controller and we are responsible for your personal data (referred to as "we", "us" or "our" in this privacy notice).

Contact details

Full name of legal entity: ContinUnity Ltd (trading as Girl FrAIday™), registered in England and Wales under company number 16111651.
Email address: hello@continunity.com
Postal address: 86-90 Paul Street, London EC2A 4NE
ICO registration number: ZC192563

It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information changes by emailing us at hello@continunity.com.

2. What data we collect, why, and on what ground

Personal data means any information capable of identifying an individual. It does not include anonymised data. We may process the following categories of personal data about you:

Communication Data

Any communication you send us, whether through a form on our website, by email, or through social media. We process this to communicate with you, for record keeping, and for the establishment, pursuance or defence of legal claims. Our lawful ground is our legitimate interests, namely to reply to communications sent to us, to keep records, and to establish, pursue or defend legal claims.

Customer Data

Data relating to any purchase of our services, such as your name, billing details, email address, phone number, and the answers you give during onboarding. We process this to supply the services you have purchased and to keep records of those transactions. Our lawful ground is the performance of a contract between you and us, and taking steps at your request to enter into such a contract.

User Data

Data about how you use our website and online services. We process this to operate our website, ensure its security, maintain back-ups, and administer our business. Our lawful ground is our legitimate interests, namely to properly administer our website and our business.

Technical Data

Limited technical data such as your IP address and details about your browser, collected by our hosting and security providers to keep the site running and secure. We do not use analytics tracking or advertising cookies. Our lawful ground is our legitimate interests, namely to administer and protect our website and business.

Marketing Data

Your preferences in receiving marketing from us and your communication preferences. Our lawful ground is either your consent or our legitimate interests, namely to develop our services, grow our business, and decide our marketing strategy.

Required processing

Where we need to collect personal data by law, or under the terms of a contract with you, and you do not provide that data when requested, we may not be able to perform the contract. If that happens, we will notify you at the time.

Sensitive data, criminal conviction data and automated decision-making

We do not collect any sensitive data (such as data about your health, race, religious beliefs, sexual orientation or political opinions) through this website, and we do not collect information about criminal convictions and offences.

We do not carry out any solely automated decision-making that produces a legal or similarly significant effect on you. We may use automated processes to help us run our business efficiently, for example to improve our services or manage administrative tasks, but these do not materially affect your rights or access to services, and human oversight is applied where appropriate.

3. How we collect your personal data

We collect data that you provide directly to us (for example by filling in forms on our site or by emailing us), and limited technical data automatically as you use our site (see our Cookie Policy). We may also receive limited data from providers of technical and payment services who help us deliver our services.

4. Marketing communications

Our lawful ground for sending you marketing communications is either your consent or our legitimate interests, namely to grow our business. Under the Privacy and Electronic Communications Regulations (PECR), we may send you marketing if you have bought from us or asked us about our services, and you have not opted out. You can ask us to stop sending you marketing at any time by following the opt-out link in any marketing message, or by emailing hello@continunity.com. We will never share your personal details with any third party for their own marketing purposes.

5. Disclosures of your personal data

We may share your personal data with:

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only allow them to process your personal data for specified purposes and in accordance with our instructions.

How we use AI

This section explains how we process personal data when using AI tools, and supplements the rest of this notice. A fuller standalone version is set out in our How We Use AI disclosure.

AI tools in use

AI refers to a broad category of technologies designed to emulate human thinking and tackle complex tasks. We use AI to support our business operations (including administration, scheduling, communication and data analysis) and in the delivery of the Girl FrAIday™ service, where your Girl FrAIday™ uses AI to help you think, plan, draft, organise and carry out tasks that you approve. These tools may process personal data to improve efficiency, enhance accuracy and optimise service delivery.

What data is processed, and why

In using AI tools, we may process your contact details (such as name, email address and telephone number), professional and business information (such as job title and employer details), financial information (such as payment and billing details), and other data you provide through correspondence, forms or uploaded documents. We process this data to improve the quality and speed of our processes and to deliver our services more effectively.

Lawful basis

Our lawful basis is our legitimate interests in enhancing our service delivery and business efficiency, and the performance of our contract with you. If we ever needed to process special category (sensitive) data, we would ensure we did so in a compliant way, which may include obtaining your explicit consent.

How we protect your data when using AI

Data processed through our AI tools is protected by appropriate encryption and security measures. Any external AI providers we work with act as our data processors under agreements or terms designed to ensure compliance with UK GDPR, and, where the configuration is within our control, we use settings intended to prevent your data being used to train their models. We do not make solely automated decisions that have a legal or similarly significant effect on you without your explicit consent or appropriate safeguards in place.

Third-party AI providers

We use Anthropic (Claude), OpenAI (ChatGPT), Hermes and GitHub, hosted on Hostinger, as data processors. We have agreements or terms in place with them to protect the privacy of your personal data. For details of their privacy standards, please refer to their own privacy policies.

Limitations and your choices

AI is not infallible. We make no warranty as to the accuracy, completeness or suitability of AI outputs, and you should satisfy yourself before relying on them. You can ask us how AI is used in your case, and, where any solely automated decision would have a legal or similarly significant effect on you, you may object in accordance with your rights set out below.

6. International transfers

Some of our service providers are based outside the United Kingdom, which means your data may be transferred outside the UK. Where we do this, we ensure appropriate safeguards are in place to give your data a similar level of protection. In particular, we may transfer data to countries the UK has approved as providing an adequate level of protection; to US-based providers that participate in the UK-US Data Bridge (the UK Extension to the EU-US Data Privacy Framework); or under specific contracts approved by the ICO, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

7. Data security

We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed or accessed without authorisation. We allow access to your personal data only to those who have a business need to know it, and they may only process it on our instructions and must keep it confidential. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to.

8. Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements. For tax purposes, the law requires us to keep basic information about our customers for six years after they stop being customers. In some circumstances we may anonymise your data for research or statistical purposes, in which case we may use it indefinitely without further notice to you.

9. Your legal rights

Under data protection laws you have the right to request access to, correction, erasure, restriction or transfer of your personal data, to object to processing, and (where the lawful ground is consent) to withdraw consent. You can find out more about these rights at the ICO website. To exercise any of these rights, please email hello@continunity.com. You will not usually have to pay a fee. We may need to confirm your identity before responding. We try to respond to all legitimate requests within one month.

10. How to complain

If you have a complaint about how we handle your personal data, we ask that you contact us first, at hello@continunity.com, so that we can try to resolve it. We will acknowledge your complaint within 30 days and keep you informed of our progress. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

11. Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

12. Cookies

You can set your browser to refuse all or some browser cookies. If you disable or refuse cookies, some parts of this website may not function properly. For more information about the cookies we use, please see our Cookie Policy.