Privacy

Last Update - 09th September 2024

At The After Circle, we are committed to respecting and protecting your privacy. This Privacy Policy outlines how we collect, use, and share your personal information when you access or interact with our platform, which is dedicated to storytelling, journaling, and personal healing through experiences related to psychedelics. By using The After Circle (the "Platform"), you consent to the practices described in this policy.

1. Information We Collect

We collect different types of personal information based on your interaction with our Platform, including:

Account Information: When you sign up as a member, we collect your email address, username (which can be anonymous), and any profile information you provide.
Story Submissions: If you choose to submit stories or respond to prompts, we collect the content of your submissions, which may include personal experiences, as well as any metadata associated with them.
Device Information: We collect technical data from your device, including IP address, browser type, time zone, and cookies. This helps us improve the Platform's functionality and user experience.
Payment Information: If you choose a paid membership tier, we collect necessary payment details (such as billing information), processed by secure third-party services.

2. Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal information:

Consent: We process personal data related to your stories, experiences, and sensitive information only with your explicit consent.
Contract: We process personal data necessary to fulfill contractual obligations, such as providing membership services.
Legitimate Interests: We process data to improve our services, maintain platform security, and communicate updates with you, where this does not infringe on your rights.
Legal Obligation: We may process data to comply with legal obligations, such as for financial records and tax purposes.

3. How We Use Your Information

We use your personal information to:

Enable access to the Platform’s features, including membership-based content.
Manage and display user-generated content, including stories and artwork, in accordance with our terms of use.
Communicate with you about updates, workshops, journaling sessions, and events relevant to the platform.
Ensure the security of the Platform and monitor for any suspicious activity or potential breaches.

Analytics and Performance: We may use aggregated device information to analyze how users interact with the Platform, measure performance, and improve our services.

4. Sharing Your Information

We value your privacy and handle your information responsibly. Your personal information is shared only under the following conditions:

Service Providers: We use third-party providers (such as payment processors, automation platforms, and analytics services) who help us operate the Platform. These providers have access to your information only to perform tasks on our behalf and are bound by strict security and privacy obligations under Data Processing Agreements (DPAs).
Legal Compliance: We may share your information if required to do so by law, or if necessary to protect our rights or respond to legal processes.
Consent: We will share your information with third parties if you explicitly consent to such sharing.

We do not sell or rent your personal information to third parties.

5. Special Category Data

As part of your engagement with The After Circle, you may submit sensitive data related to your personal healing journey, such as experiences with psychedelics. This data falls under the special category of data under UK GDPR.

We will process this sensitive data only with your explicit consent and ensure additional protective measures are in place, including encryption and limited access, to safeguard your data.

6. Third-Party Services

At The After Circle, we use a range of trusted third-party service providers to help manage various aspects of our platform, including data storage, automation, and analytics. These providers are selected to ensure that your data is handled securely and in compliance with data protection laws.

We use Data Storage and Management applications to securely store and manage user data, including content submissions, membership information, and other platform-related data. These platforms allow us to efficiently organize and manage your information while maintaining high standards of security and privacy.
We use Automation and Integration applications to automate processes on our platform, enhancing functionality and improving the overall user experience.
We us Google Analytics to gather anonymized and aggregated data about user interactions on our platform. This helps us analyze how visitors engage with the site and allows us to make informed decisions to improve our services.

Data Processing Agreements and Internal Security Policies

To ensure that your data is protected when working with these third-party providers, we have Data Processing Agreements (DPAs) in place with each of them. These agreements outline strict obligations for the providers to maintain high security standards and ensure that any data processed on our behalf is handled in full compliance with applicable privacy laws.

Additionally, we enforce strict internal security policies that control who within The After Circle has access to these third-party tools. Access is granted only to authorized personnel, and all access is closely monitored to safeguard your personal data and maintain privacy.

7. International Data Transfers

If you are accessing the Platform from outside the UK or the European Economic Area (EEA), your data may be transferred to countries where different data protection laws apply. We take necessary steps to ensure that your data is protected through:

Adequacy decisions (for countries recognized as providing an adequate level of protection).
Standard Contractual Clauses (SCCs) approved by the European Commission and UK GDPR authorities.

By using the Platform, you consent to such cross-border data transfers under these protections.

8. Cookies and Tracking Technologies

Cookies and similar tracking technologies help us operate the Platform more effectively. These technologies allow us to:

Remember user preferences and personalize your experience.
Track and analyze website traffic and usage patterns.

You can disable cookies through your browser settings, though doing so may affect the functionality of the Platform.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to fulfill the purposes outlined in this policy. You may request the deletion of your data at any time, subject to certain exceptions such as legal requirements or legitimate interests.

10. Your Rights Under UK GDPR

As a user, you have specific rights under UK GDPR:

Right to Access: You have the right to request access to the personal data we hold about you.
Right to Rectification: You may request that we correct or update any inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): You can request that we delete your data when it is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing: You may request that we limit the processing of your data under certain circumstances.
Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
Right to Object: You have the right to object to the processing of your data, including for direct marketing purposes.

If you wish to exercise any of these rights, please contact us at [Insert Contact Email].

11. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Website: https://ico.org.uk/
Phone: 0303 123 1113

12. Children’s Privacy

The Platform is not intended for users under the age of 18, and we do not knowingly collect personal information from individuals under this age. If we discover that a user under 18 has provided personal information, we will take steps to delete such information.

13. Security Measures

We take appropriate security measures, including encryption and administrative safeguards, to protect your personal data from unauthorized access, disclosure, or alteration. While we strive to protect your information, no transmission over the internet is completely secure. By using the Platform, you acknowledge the inherent risks of online data sharing.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. We will notify you of any significant changes through our website or by email. The most recent version will always be available on our Platform.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:

The After Circle
hello@theaftercircle.com
71-75, Shelton Street, Covent Garden, London, WC2H 9JQ

‍