Skip to content
EUC Collective

Privacy policy

Draft — not final. This page hasn't had a solicitor review yet. It reflects our intent accurately, but treat it as a working draft until membership actually opens and real member/payment data is collected.

Who we are

EUC Collective is operated as a solo consultancy. For UK GDPR purposes, the operator is the data controller. Contact: euc-gdpr@syswow64.co.uk.

What we collect, and why

DataWhyLegal basis
Account detailsTo provide the membership itselfContract
Billing detailsProcessed by Stripe to take paymentContract
Intake conversation contentTo capture the problem you're raising for a human to work onContract / legitimate interest in running the service

Retention

Intake conversations may contain operationally sensitive detail — once a conversation is filed as a backlog item, the structured summary is kept, and the raw conversation transcript is deleted on a defined schedule rather than kept indefinitely. We'll publish the exact retention window here before the intake channel launches.

Third-party sub-processors

We use managed services rather than running our own infrastructure. As of this page, that includes:

  • Vercel — hosting
  • Neon — database
  • Clerk — authentication and account management
  • Stripe — payment processing
  • Anthropic — the intake assistant (see the AI disclosure page)

This list is kept current for supplier security reviews; ask if you need it in a particular format for a procurement process.

Your rights

Under UK GDPR you can ask to access, correct, export, or delete your data, and object to or restrict some processing. Self-serve account export and deletion are coming to the account settings area; until then, email euc-gdpr@syswow64.co.uk.

Complaints

You can complain to the UK Information Commissioner's Office (ico.org.uk) at any time — we'd appreciate the chance to sort things out directly first.