Privacy Notice

Istead Rise Community Association is the data controller for this portal. Last updated 31 August 2026.

What we collect

Members and applicants: name, date of birth, contact details, address, your photo and the ID documents you upload (photographic ID and proof of address), your membership tier, payment history and marketing preference. Ticket buyers: name, email, phone and, where an event asks for them, attendee names. Room hirers: name, contact details and booking history. We also keep a log of actions taken in the portal (who did what, when) and of emails we send you.

Why we use it

To run your membership, tickets and bookings (performance of a contract); to verify identity for membership and door access, keep proper accounts, and protect the Centre (legitimate interests and legal obligations); and to send occasional news only if you opted in (consent, withdrawable any time). Card payments are handled by Stripe — we never see your full card number.

Who we share it with

Our service providers, acting on our instructions: Stripe (payments), Supabase (database and secure document storage), Vercel (hosting) and Amazon Web Services (email sending). Our hosting and database are located in London, United Kingdom. We do not sell your information or share it for advertising. Door-access records are maintained separately on the Centre's entry system by the office.

How long we keep it

Membership records are kept while your membership is active and for up to 6 years after it ends (financial records must be retained for accounting purposes). ID documents are kept only while needed to verify your membership. Ticket and booking records are kept for 6 years for the same reason. You can ask us to delete personal data sooner where we no longer need it.

Your rights

You can ask for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it, by contacting the office at the Centre or through irca.org.uk. If you are unhappy with our answer you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

The portal sets only the cookies needed to keep you signed in. There are no advertising or analytics cookies.