Who we are
This privacy policy describes how House of Clio Ltd collects, uses, and protects your personal data. House of Clio Ltd is being incorporated in England and Wales. Company number will appear on incorporation. Registered office address will be updated upon incorporation. We are the data controller for the personal data we hold about you. Contact us at privacy@thehouseofclio.com for any privacy-related question.
What data we collect
We collect only what we need to compose the room and to operate the House. This includes your name, email address, city, and the free-text answers you provide in the Introduce Yourself form. When you book a gathering, we also collect payment information through our secure payment provider (Stripe). We do not store your full card details on our servers. For journeys and travel experiences, we additionally collect passport details, dietary requirements, and emergency contact information.
How we use your data
We use your personal data to compose the room around you, to communicate with you about gatherings you are attending, to process payments, to share guest portraits with other confirmed attendees before each gathering, and to send you essential communications about the House. We do not send marketing emails unless you explicitly opt in.
Legal basis for processing
Our lawful basis for processing your personal data under UK GDPR is: contract (to fulfil our obligations when you book a gathering), legitimate interest (to operate the House and protect the quality of the room), and consent (for any marketing communications you have explicitly opted into).
Who we share your data with
Your guest portrait is shared only with confirmed attendees of the specific gathering you are attending, and only for the purpose of composition. We do not sell, trade, or share your data with third parties for marketing purposes. We use the following processors: Stripe (payments), Resend (email delivery), Supabase (database), and Vercel (website hosting). Each processor is bound by its own data protection agreement.
International transfers
Some of our processors (including Stripe, Vercel, and Supabase) may store or process data outside the United Kingdom. Where personal data leaves the UK, we ensure that appropriate safeguards are in place, including standard contractual clauses approved by the UK Information Commissioner.
How long we keep your data
We keep your data for as long as you are an active participant and for a reasonable period afterwards to support our accounting and legal obligations. If you request deletion, we will remove your data within 30 days unless legal obligations require us to retain it (for example, booking and payment records for tax purposes).
Your rights under UK GDPR
You have the right to access your personal data, to request correction of inaccurate data, to request deletion of your data, to object to processing, to restrict processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, write to privacy@thehouseofclio.com. We will respond within 1 calendar month.
Cookies
We use essential cookies required for the website to function, and privacy-respecting analytics to understand how the site is used. We do not use advertising cookies. We do not retarget. We do not track you across other sites. You can decline analytics cookies in your browser settings.
Security
We take reasonable technical and organisational measures to protect your personal data against loss, unauthorised access, or misuse. All payment processing is handled by Stripe, a PCI-DSS Level 1 certified provider. Our website uses HTTPS encryption. Database access is restricted to authorised personnel only.
Complaints
If you have a complaint about how we handle your personal data, please write to privacy@thehouseofclio.com and we will respond within 14 days. You also have the right to lodge a complaint with the Office of the Information Commissioner at ico.org.uk.
Changes to this policy
We may update this privacy policy from time to time. Changes take effect when published on this page. We will notify you of material changes by email where possible.
A Personal Note
I built the House because people deserve a space where they can be honest without worrying about where that honesty ends up. Your data is part of that promise. If you ever feel it has been broken, I want to hear about it personally.
Gigi
privacy@thehouseofclio.com