Privacy Notice

Oct 27, 2026 · Last Updated: Nov 04, 2026

1. Who we are

Empowering.Cloud Ltd ("we", "us"), company number 13789379, registered office 78 York Street, London, W1H 1DP, is the controller of the personal data described in this notice, except as set out in section 6. Contact: support@empowering.cloud.

This notice covers our websites (empowering.cloud and changepilot.cloud), the ChangePilot service, our marketing, and our webinars and events.

2. Visiting our websites

Data	Why we use it	Lawful basis	Kept for
Technical and log data (IP address, device, pages visited)	Run, secure and improve the websites	Legitimate interests	12 months
Cookie data	Analytics and embedded content	Consent	See our Cookie Notice
Enquiry details (name, email, company, message)	Respond to you	Legitimate interests	2 years after last contact

Some pages include embedded third-party services, which may receive your device data. See our Cookie Notice.

3. Newsletters, marketing and sales

Data	Why we use it	Lawful basis	Kept for
Contact details (name, email, company, job title) and how you interact with our emails	Send newsletters and marketing, manage sales and partner conversations	Consent (marketing to individuals); legitimate interests (business contacts)	Until you unsubscribe, or 3 years with no engagement

You can unsubscribe at any time using the link in our emails or by contacting us.

4. Webinars, events and sponsors

When you register for a webinar or event, we use your name, work email, company, job title and form answers to run the event and send joining details and recordings. We rely on legitimate interests and keep registration records for 2 years.

Sponsored events. When you register for a sponsored event, we share your name, work email, company and job title with the sponsor named on the registration page, so they can contact you about related products and services. We rely on legitimate interests: funding free content for the Microsoft 365 community and connecting attendees with relevant vendors. We only share business contact details.

To stop us sharing your details, email support@empowering.cloud before the event. You can opt out of a sponsor's messages at any time. Once shared, the sponsor is responsible for your data under its own privacy notice.

ChangePilot data is never shared with Sponsors.

5. Using ChangePilot

Data	Why we use it	Lawful basis	Kept for
Account details (name, work email, organisation, job title)	Run your account and send service messages	Contract; legitimate interests (contacts)	Life of the account + 30 days
Sign-in data	Authenticate you and manage organisation membership	Contract	Life of the account
Billing data	Provide your plan and bill your organisation	Contract; legal obligation	6 years after the end of the tax year
Content you create in the Service	Provide the Service	Contract	Life of the account + 30 days
Email delivery and engagement data	Deliver alerts and digests, and see which are useful	Legitimate interests	12 months
Usage data (features used, device, approximate location)	Improve the product and fix errors	Legitimate interests	12 months, then aggregated
Support conversations	Answer your questions and keep a support history	Contract; legitimate interests	3 years after last contact
Security logs and vulnerability reports	Keep the Service secure	Legitimate interests; legal obligation	12 months (logs); 3 years (reports)

We need your account details to provide ChangePilot. Without them, we cannot provide the Service. Everything else you give us is optional.

6. Customer data

Where we process data on a customer's behalf in ChangePilot, including connected Microsoft 365 tenant data, we act as processor under our Data Processing Agreement with that customer. Please contact your organisation about that data.

We do not sell personal data. We share it with service providers acting on our behalf (hosting, authentication, billing, email delivery, analytics, support, CRM and collaboration providers), event sponsors as described in section 4, professional advisers, authorities where required by law, and any buyer or successor of our business.

We also receive personal data from our authentication, billing and CRM providers, and business contact details from sponsors, partners and customers.

8. International transfers

Some recipients are outside the UK. Where we transfer personal data outside the UK, we use safeguards recognised under UK law, such as adequacy regulations or approved contract clauses. Contact us for details.

9. Your rights

You have the right to access, correct, erase or restrict your personal data, to object to its use (including for direct marketing, at any time), to data portability, and to withdraw consent at any time. To use these rights, contact support@empowering.cloud.

You can also complain to the Information Commissioner's Office at ico.org.uk.

10. Cookies and changes

Our websites use cookies and similar technologies. We only use non-essential cookies with your consent. See our Cookie Notice.

We may update this notice. The current version is always on this page.

Version 2.0 · Last Updated: 04 Nov, 2026