Who we are
The Anti Skint Club is run by Anti Skint Club Ltd (TBC), a company registered in England and Wales (company number TBC), with its registered office at TBC.
For UK data protection law, we are the controller of the personal data described in this policy. That means we decide how and why it’s used, and we’re responsible for looking after it.
You can contact us about anything privacy-related at privacy@antiskintclub.com (TBC).
This policy covers our website, the club itself (Pods, Personal Mentors, the Planner and Power Tools) and our upcoming iOS and Android app. It works alongside our Terms of Use and Cookie Policy.
What we collect and why
UK data protection law (the UK GDPR and the Data Protection Act 2018) says we need a valid reason — a “lawful basis” — for every way we use your data. Here’s what we collect, what we use it for, our lawful basis and how long we keep it.
What we collect now
| What we collect | Why we use it | Lawful basis | How long we keep it |
|---|---|---|---|
| Waitlist sign-ups: first name, email address and, if you choose to tell us, your age band and which description sounds most like you | To add you to the waitlist, send you the launch updates you asked for, and understand (in total, not individually) who the club is for | Consent (for emails); legitimate interests (for understanding our audience in aggregate) | Until you unsubscribe or ask us to remove you. If you don’t join once the club launches, we’ll delete your details within 12 months of launch |
| Contact and enquiry forms: name, email address, subject and your message | To read and reply to your message and keep a record of the conversation | Legitimate interests (responding to people who contact us) | Up to 2 years after your enquiry is closed |
| Data rights and account deletion requests: name, email address, the request and any information needed to confirm your identity | To deal with your request and show we’ve met our legal duties | Legal obligation | Up to 3 years after the request is completed (ID documents are deleted as soon as you’re verified) |
| Job and mentor applications: name, email address and whatever you tell us about yourself, your experience and why you’re applying | To consider your application and get back to you | Steps at your request before entering a contract; legitimate interests | Up to 6 months after the role is filled, unless you agree we can keep it longer |
| Contest entries and merch waitlist: name, email address and your entry or message | To run the contest (including contacting winners) or tell you when merch is available | Contract (contest rules); consent (merch updates) | Contests: up to 12 months after the contest closes (longer for prize records where needed). Merch: until you unsubscribe or merch launches |
| Technical data: IP address, browser and device type, pages requested and error logs collected by our hosting providers | To deliver the website, keep it secure and fix problems | Legitimate interests (running a safe, working website) | Kept for a short period by our hosting providers (normally no more than 30 days) unless needed to investigate a security issue |
What we’ll collect when the club launches
When accounts, Pods, mentoring and the app go live, we’ll also collect the following. We’ll update this policy before any of it starts.
| What we collect | Why we use it | Lawful basis | How long we keep it |
|---|---|---|---|
| Account details: name, email, sign-in details (passwords are stored securely hashed, never in plain text), confirmation that you’re 18 or over, profile information you add | To create and run your account and provide the club to you | Contract | While your account is open, then deleted within one month of closure (see what we may keep below) |
| Pods: sessions you book and attend, messages and contributions in group chat, and session recordings (which may include your name, voice and image if you take part on camera) | To run live sessions, let members catch up on demand and keep the community safe | Contract; legitimate interests (recordings and community safety) | While you’re a member. Recordings are kept for as long as they’re offered on demand — we’ll tell you before any session is recorded |
| Personal Mentor sessions: bookings, messages, call or chat history and notes your mentor makes. These may include information about your health, wellbeing or other sensitive topics if you choose to share it | To provide mentoring, keep continuity between sessions and keep you safe | Contract; explicit consent for any special category data; safeguarding where the law allows | While you’re a member and up to 12 months after, unless we need to keep a safeguarding record for longer |
| Planner and Power Tools: your goals, tasks and habits, CVs, interview prep, job applications you track and budgeting entries | To provide these tools to you | Contract | While your account is open. You can delete individual items at any time |
| Payments (if we introduce paid features): what you bought, when and how much. Card details are handled by our payment provider — we never see your full card number | To take payment, issue refunds and keep accounts | Contract; legal obligation (tax and accounting records) | 6 years from the end of the financial year the payment was made in, as required by UK law |
| Marketing preferences: whether you’ve agreed to hear from us and how | To send you news and offers only if you’ve said yes, and to respect it when you say no | Consent | Until you withdraw consent. We keep a minimal record of an opt-out so we don’t contact you again |
Where we rely on legitimate interests, we’ve weighed our interests against yours and only go ahead where they don’t override your rights. You can ask us for details of that assessment.
Where we rely on consent, you can withdraw it at any time. That won’t affect anything we did before you withdrew it.
Where we get your data
Most of the data we hold comes straight from you — when you fill in a form, use the club or talk to us.
We may also receive some information from:
- your Personal Mentor or Pod host, who record notes as part of providing the service
- our hosting and technology providers (technical data such as logs)
- a payment provider, if you buy something from us
- someone who refers you to the club (for example, a friend, college or support organisation) — only your name and contact details, and only with your agreement
Sensitive information
Some types of information are especially sensitive and get extra protection under the law (“special category data”) — for example, information about your physical or mental health, ethnicity, religion, sexuality or sex life.
We don’t ask for this information. But conversations with a Personal Mentor can naturally touch on wellbeing, stress or personal circumstances, and you may choose to share things like this. If you do:
- we’ll only record what’s needed to support you, and only with your explicit consent
- access is limited to your mentor and a small number of people who need it (such as our safeguarding lead)
- you can ask to see it, correct it or have it deleted
Safeguarding: if we believe you or someone else is at serious risk of harm, we may need to share relevant information with emergency services or other appropriate organisations without your consent, where the law allows. Where it’s safe and appropriate, we’ll tell you first.
Please don’t share other people’s sensitive information with us unless it’s needed and you have their permission.
Who we share it with
We don’t sell your data or share it with advertisers. We use a small number of trusted companies (called “processors”) to run our services. They can only use your data on our instructions and must keep it secure.
- Convex — database and backend hosting. Stores the information you send us through forms and, later, your account data. (Hosting region to be confirmed.)
- Vercel — website hosting and delivery. Processes technical data such as IP addresses to serve and protect the site.
- Email provider (to be confirmed) — to send waitlist updates, replies and account emails.
- Other providers when features launch — such as video calling for Pods and mentoring, sign-in and payments. We’ll name them here before we start using them.
We may also share information:
- with professional advisers such as lawyers and accountants, under a duty of confidentiality
- with the police, courts, regulators or other authorities where the law requires it
- with emergency services or safeguarding bodies to protect someone’s life or safety
- with a buyer or new owner if our business (or part of it) is sold or reorganised — they would have to respect this policy
Your mentor and other members can see what you choose to share with them (for example, your name and contributions in a Pod).
International transfers
Some of our providers are based in, or use servers in, countries outside the UK — including the United States. When your data is transferred outside the UK, we make sure it’s protected to UK standards. Where applicable, we rely on:
- UK “adequacy regulations”, which confirm that a country (or, for the US, an organisation certified under the UK Extension to the EU-US Data Privacy Framework) protects data properly
- the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses
You can ask us for more details about the safeguards we use.
How long we keep it
We keep personal data only for as long as we need it for the reasons above. The tables in What we collect and why set out our usual retention periods. After that, we delete it securely or anonymise it so it can no longer identify you (for example, to count how many people attended Pods in a year).
We may keep some information for longer if we have to by law, to deal with a complaint or legal claim, or where a safeguarding record needs to be kept. See Delete your account for what happens when you leave.
Keeping it safe
We take sensible steps to protect your data, including:
- encryption when data travels between your device and our services (HTTPS)
- choosing reputable providers with strong security practices
- limiting access to people who need it, and requiring them to keep it confidential
- training our team and mentors on data protection and safeguarding
No system is completely secure, but if something goes wrong we’ll act quickly. If a breach is likely to put you at high risk, we’ll tell you and, where required, the ICO.
Age
The club is for adults aged 18 and over (with a focus on 18 to 24 year olds). We don’t knowingly collect personal data from anyone under 18. If we find out that we have, we’ll delete it unless we need to keep a record for safeguarding reasons.
Marketing
We’ll only send you news, tips and offers by email (or app notification) if you’ve agreed to it. Every email has an unsubscribe link, and you can also change your mind by emailing privacy@antiskintclub.com (TBC).
Even if you unsubscribe from marketing, we may still need to send you important service messages — for example, about your account, a booking or a change to our terms.
We don’t make decisions about you that have legal or similarly significant effects based solely on automated processing.
Your rights
Under UK data protection law you have the right to:
- Access — get a copy of the personal data we hold about you
- Rectification — have inaccurate or incomplete data corrected
- Erasure — ask us to delete your data
- Restriction — ask us to limit how we use your data
- Portability — get data you gave us in a format you can take elsewhere
- Objection — object to us using your data based on legitimate interests, and to direct marketing at any time
- Withdraw consent — wherever we rely on your consent
Some rights only apply in certain situations. To use any of them, go to Request my data, or to close your account and remove your data, go to Delete your account. You can also email privacy@antiskintclub.com (TBC).
It’s usually free, and we’ll respond within one month. We may need to confirm your identity first.
Complaints
If you’re unhappy with how we’ve handled your data, please talk to us first at privacy@antiskintclub.com (TBC) — we’d like the chance to put it right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection:
- Website: ico.org.uk/make-a-complaint (opens in a new tab)
- Helpline: 0303 123 1113
Changes to this policy
We’ll update this policy as the club grows — in particular before accounts, mentoring, the app or payments go live. The “Last updated” date at the top shows when it last changed. If we make important changes, we’ll let you know by email or in the app before they take effect.
Contact us
Privacy questions: privacy@antiskintclub.com (TBC)
Everything else: hello@antiskintclub.com (TBC) or our contact page
Post: Anti Skint Club Ltd (TBC), TBC