Privacy and conduct
What we hold, and what you can ask us to do with it.
The short version
We hold what you send us, on our own servers, and we do not sell any of it.
- Your application, your challenge submissions, and the emails we send you.
- Held on a server we run ourselves, not a third party's platform.
- No advertising, no third-party trackers, no data sold or shared for marketing.
- If you do not enrol, your application is deleted after this cohort cycle.
- Ask us to delete it sooner and we will, within 30 days.
What you give us
The application form, and anything you submit during the challenge.
The form asks for your name, email, phone number, city, guild, a link to your work, where you are in your craft, why you are applying now, whether you can give the twelve weeks, and who told you about us. You choose what to write in the open questions.
If you reach the 7-day challenge, we store what you submit: your written reflections, any links you give, any files you upload, and the time each arrived. We also record when a window closed without a submission, because that is part of how we read an application. It is never treated as an error.
We record the moment you ticked the consent box on the form, so we can show what you agreed to and when.
What we collect while you read
A page trail that cannot be traced back to you.
Your browser generates a random identifier and we record which pages it visited. We do not store your IP address, your device, your browser, or where you came from, and there is nothing in our systems that can connect that identifier to your name or your application. It exists so we can see which pages people find useful.
We use no third-party analytics and no advertising tools. Nothing on this site reports your reading to anyone else.
Where it is held
On our own machines, in London, encrypted before it goes anywhere.
The database and the files you upload sit on a server we rent and administer ourselves, in London. We chose to run it rather than use a hosted platform so that the duty of care is ours and the data is not mixed into somebody else's product.
Because that server is in the United Kingdom, your information leaves Nigeria. We are telling you plainly rather than burying it.
Backups run nightly. They are encrypted before they leave the machine, kept for 14 days on the server and 90 days offsite, and the key that opens them is not stored on the server itself.
Who else can see it
Three companies, each doing one job.
- DigitalOcean runs the physical infrastructure our server sits on.
- Netlify serves this website.
- Resend delivers the emails we send you, and therefore handles your email address and the contents of those emails.
Inside The Company, access is limited by role. Reviewers see the applications they are asked to read. Nobody sees more than their work requires, and every change of status is recorded with who made it and when.
How long we keep it
One cohort cycle, unless you enrol.
If you apply and do not take a seat, we delete or anonymise your application and your challenge submissions at the end of this cohort cycle. We do not keep a standing database of everyone who ever applied.
If you enrol, we keep your records for as long as you are part of the programme and its community, because the work you make is yours and the record of your formation is part of it.
What you can ask us to do
See it, correct it, or have it deleted.
You can ask us for a copy of what we hold about you, ask us to correct anything wrong, ask us to delete it, or withdraw the consent you gave on the form. Withdrawing consent means we stop processing your application, which also means we cannot continue considering you for a seat.
Write to us and we will act within 30 days. You do not need to give a reason.
Conduct
The covenant, and the room.
Applying asks nothing of you beyond honesty. If you are offered a seat, you are asked to read and sign a covenant before the programme begins, and you will see it in full before you agree to anything.
The community has its own code of conduct. It is published in the room itself, and you receive it when you are invited in, not before.
Getting in touch