Privacy Policy

Who we are

MENFEM LIMITED (“MenFem”, “we”) operates menfem.com and is the data controller for the personal data described in this policy. MENFEM LIMITED is registered in England and Wales under company number 15729915. Registered office: 12 Webb Close, London, England, W10 5QB.

For anything in this policy, contact [email protected].

What we collect

MenFem is a research, media, and marketplace platform. Most content is public and readable without an account. When you do use the product, we collect:

• Account & profile — your email address, username, and any profile details you add. Sign-in is by magic-link email; we do not use or store account passwords.
• Payments & payouts — payments for Pro membership, Exchange purchases, tickets, and services are processed by Stripe. We never see or store full card numbers; Stripe handles them. We keep records of your orders, subscriptions, invoices, and (for sellers) payout history.
• Marketplace activity — listings you create, orders you place, the shipping address you provide for physical goods, dispute records and messages, and reviews.
• Content you submit — comments, reviews, uploads, and anything you post to public surfaces.
• Newsletter — your email address, collected with double opt-in, with an unsubscribe link in every issue.
• Usage & devices — error reports via Sentry (session replays are sampled with text and inputs masked), so we can fix what breaks. We do not run a product-analytics service.
• Security logs — IP address, browser user-agent, and sign-in events, kept to protect accounts.

Why we use it

Under UK data protection law we rely on: contract (running your account, fulfilling orders and subscriptions), legitimate interests (securing the platform, understanding usage, improving the product), consent (the newsletter and marketing email), and legal obligation (tax and financial record-keeping).

Business contacts at companies we follow

MenFem follows a small roster of startups: we test their products, tell them privately what we find, and review them. To the team at each one: We do the work first. Then you get a page, a film and a call. If you work at one of them, we may hold your name, your role, your work email address and a note of where we got it. We keep an address only if your company publishes it on its own website, or we got it first-hand — you wrote to us, we met, or someone introduced us. We never buy, guess, or look up addresses from other sources.

We also keep a short record of our dealings with your company: the date and subject line of emails sent and received (never the message itself), calls and meetings, and what we found and passed on. We rely on our legitimate interests in running that working relationship. This record is private to MenFem, and nothing in it that identifies you is ever published.

We review a business contact after 12 months without any contact and delete what we no longer need. You can object, or ask us to correct or delete your details, at any time by emailing [email protected]. We then stop contacting you and keep only a one-way fingerprint of your address, so that it is never added again. Every monthly note we send says how to opt out, and replying “stop” is enough.

Comments, ideas and “I’d use this” on company pages

Comments and ideas. Signed-in readers with a username can post a comment or an idea on the page of a startup we follow. Every post is held for review and appears only after we approve it. Your username shows publicly with your post; your email address never does. If you are listed as a member of the company, your posts on its page carry a “from the company” badge.

You can delete your own posts at any time from the company page, and they come off the page. We keep a private note of why a post was not approved, and delete rejected posts after 12 months. If we take your idea up, we copy its text (never your username) into our private notes and may pass it to the company; that copy stays if you later delete the post. We tell you in your notifications when it is passed on and when it ships, and while your post stays published the public “fixed” line may credit you by username. Each post has a Report link. Please report security problems to us privately, never in a post.

“I’d use this.” On a startup's page you can tell us you would use its product. We record your account, the exact wording you agreed to and when, and, if you add one, a short note in your own words about how you would use it. That is your consent for us to email you and ask whether you would like an introduction to the company's team — not the introduction itself. Nothing about you goes to the company unless you reply yes. If you do, we tell the founder your first name and how you would use it; your email address reaches them only in the introduction itself, once the founder has agreed too. Nobody pays or is paid for an introduction, and there is no public count.

You can withdraw at any time on the same page. Withdrawing clears your note at once; we keep only the wording version and the dates you agreed and withdrew, as the record of your consent.

Health readouts

The health check at /health runs in your browser and sends us nothing about your answers. If you are signed in and tick the consent box, we save your readout. Health information is special category data under UK GDPR, so we store it only on your explicit consent, encrypt your answers with AES-256 at rest, never use it for marketing and never share it. You can delete every saved readout in one click from the readout page; they are also deleted on request or when you delete your account.

Who processes it for us

We use a small set of processors to run the platform: Stripe (payments and payouts), Cloudflare (file storage and CDN), Resend (email delivery), Sentry (error monitoring), EasyPost (shipping labels for physical orders), and Hetzner (hosting). Films we host ourselves, startup review walkthroughs among them, are served by Mux, which also measures how they play (start-up time, buffering, errors). Embedded video from elsewhere is served by YouTube. Each processes data only to provide its service to us.

Some of these providers process data in the United States. Where data leaves the UK, we rely on the safeguards recognised by UK law, such as the UK Addendum to standard contractual clauses or an adequacy decision.

How long we keep it

We retain account data while your account is active. Financial records (orders, invoices, payouts) are retained as required by UK tax law, up to six years. Security logs are kept only as long as needed for their purpose. When you delete your account, we remove your personal data except the financial records we are legally required to keep — the deletion flow spells out exactly what is retained.

Your rights

You have the rights UK GDPR gives you: access to your data, rectification, erasure, restriction, objection, and data portability. You can delete your account yourself at menfem.com/my-account/delete, and you can request a copy of your data by emailing [email protected]. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We set essential cookies to keep you signed in and the site working. We do not set analytics or advertising cookies.

Our video player measures how a film plays without setting any cookie.

Embedded content and links

Pages may embed content from YouTube and X, and link to third-party sites. Those services have their own privacy policies; embedded content behaves as if you visited them directly.

Changes to this policy

When we change this policy we update it here with a new “last updated” date. Material changes to how we handle your data will be flagged on the site or by email.

Contact

Email: [email protected]
Website: menfem.com