Privacy

• Application details: name, contact details and what you tell us about your business, so a real person can assess whether the membership is a fit.
• Account details: email address and password, or the sign-in method you use.
• Payment details: handled entirely by Stripe. We receive confirmation that you have paid and the plan you are on; we do not receive or store your card number.
• What you do inside the membership once features that involve it are live - covered in full in Online safety & moderation.
• Ordinary technical logs any web service keeps: IP address, browser and pages visited, kept briefly and used for security and fault-finding, not for tracking you across other sites.

• To assess your application and decide whether to admit you - our legitimate interest in running a vetted membership.
• To provide the membership you have paid for, and to take payment - necessary to perform our contract with you.
• To email you about your account, your renewal, and material changes to these terms - necessary to perform that contract, and in the limited case of marketing you have separately opted into, your consent.
• To meet our own legal obligations, including the online safety duties described in Online safety & moderation, and tax and accounting records.

We do not sell personal data. It is shared only where running the service actually requires it:

• Stripe, to process payment. Stripe's own privacy notice governs what they do with your card details.
• Resend, our email provider, to send account and transactional email.
• A regulator or law enforcement body, where we are legally required to respond to them, or where Online safety & moderation requires a report.
• A professional adviser (our accountant, our solicitor) bound to keep it confidential, where needed to run the business.

• A declined application is kept for a short period in case you reapply, then deleted.
• An active member's account details are kept for as long as the membership is active, plus the period our accounting and tax obligations require afterwards.
• Technical logs are kept briefly and cleared on a rolling basis.

Under UK data protection law you can ask us to: tell you what we hold about you, correct it if it is wrong, delete it where we are not required to keep it, or provide it to you in a portable form. Email [email protected] and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. We would rather you raised it with us first so we can put it right.

We use only what is needed to keep you signed in and to remember basic preferences. We do not run third-party advertising trackers. If that changes, this clause changes with it before the tracker does.

Questions about this notice, or about your own data specifically, go to [email protected].