Legal
Privacy Policy
We keep this short and plain. Here is what data we collect, why we collect it, who we share it with, and what rights you have over it.
Last updated: July 2025
Who is responsible for your data
SBIN (Stroud Business & Innovation Network) is the data controller for personal data collected through this platform. We are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. To contact us about your data: info@sbin.co.uk.
What data we collect
Account data
When you sign up: your name, email address, and password (stored as a secure hash - we never see it in plain text).
Profile data
Information you choose to add to your profile: photo, headline, bio, business name and URL, location, skills, what you offer and what you need, social links.
Payment data
If you purchase an Annual Membership or pay for an event, Stripe processes your card details directly. We store only a Stripe customer ID and subscription status - never your card number or CVV.
Usage data
Content you create on the platform: collaboration board posts, event registrations, connection requests, event notes. This is stored to provide the service.
Communications
If you contact us by email or through the contact form, we retain those messages to respond to your enquiry.
Analytics
With your consent, we use Google Analytics (GA4) to collect anonymised aggregate data about how the site is used. See our Cookie Policy for details.
Why we collect it (lawful basis)
| Purpose | Lawful basis |
|---|---|
| Providing your account and membership | Contract |
| Processing event and membership payments | Contract |
| Sending transactional emails (receipts, confirmations) | Contract |
| Displaying your profile to other members | Contract / Legitimate interest |
| Responding to support and contact enquiries | Legitimate interest |
| Sending platform update emails to members | Legitimate interest |
| Analytics (aggregated, anonymised) | Consent |
We do not use your data for automated decision-making or profiling that has a legal or significant effect on you.
Who we share your data with
We do not sell your data. We share it only with the third-party services required to operate the platform:
Each of these providers is bound by their own data processing agreements and privacy policies. We may also disclose data where required by law or to protect the rights and safety of our members.
How long we keep your data
We keep your account and profile data for as long as your account is active. If you delete your account, your personal data is removed from active systems within 30 days. Some data may be retained in backups for up to 90 days after that, after which it is permanently deleted.
Payment records are retained for 7 years to comply with UK financial and tax regulations. Contact information from enquiries is kept for up to 2 years.
Your rights
Under UK GDPR you have the following rights. To exercise any of them, email info@sbin.co.uk and we will respond within 30 days.
- AccessRequest a copy of the personal data we hold about you.
- RectificationAsk us to correct inaccurate or incomplete data.
- ErasureAsk us to delete your personal data ("right to be forgotten").
- RestrictionAsk us to pause processing of your data in certain circumstances.
- PortabilityReceive your data in a structured, machine-readable format.
- ObjectionObject to processing based on legitimate interest, including direct marketing.
- Withdraw consentWithdraw analytics consent at any time via cookie settings.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.
Cookies
For full details on how we use cookies, see our Cookie Policy.
Changes to this policy
We may update this policy as the platform evolves. When we make material changes we will notify members by email and update the date above.
Contact
Data protection questions and requests: info@sbin.co.uk. Or use the contact form.