Legal
Privacy Policy
Last updated: 16 April 2026
This Privacy Policy explains how The Threshold Collective Ltd (TTC, we, us, our), operator of the Elite CrowdMakers brand and Platform at https://elitecrowdmakers.com, collects and uses personal data. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data controller
The Threshold Collective Ltd is the data controller for personal data processed in connection with the Platform. You can contact us at hello@elitecrowdmakers.com.
2. What we collect
- Profile data: name, email address, display name, company, role, bio, location, website, LinkedIn, avatar.
- Content data: posts, comments, reactions, direct messages, event RSVPs, and files you upload.
- Account and usage data: membership tier, login timestamps, session cookies, IP address, device and browser metadata, actions taken on the Platform.
- Payment data: billing status and subscription identifiers. Card numbers are collected and stored by Stripe. We do not store full card details.
- Support data: messages you send to us through email or in-app contact forms.
3. Lawful bases for processing
We process personal data under the following lawful bases:
- Contract: to provide the Platform and the membership services you have signed up for.
- Legitimate interests: to secure the Platform, prevent abuse, improve features, and perform analytics on aggregate usage. We balance these interests against your rights and freedoms.
- Consent: for optional analytics cookies and for marketing emails unrelated to your subscription. You can withdraw consent at any time.
- Legal obligation: to meet tax, accounting, and regulatory requirements.
4. How we use your data
- Creating and operating your account and membership.
- Processing payments and managing subscriptions via Stripe.
- Displaying your profile and content to other members of the community.
- Sending transactional emails (payment receipts, account notices, moderation notices).
- Keeping the Platform secure and investigating misuse.
- Improving the Platform through aggregated analytics.
5. Subprocessors and sharing
We share personal data with trusted subprocessors who act on our instructions under written contracts. Current subprocessors include:
- Supabase, for database hosting and authentication,
- Vercel, for platform hosting and content delivery,
- Stripe, for payment processing and card storage,
- A transactional email provider, for sending account and notification emails.
We do not sell personal data. We may share data where required by law, to enforce our Terms, or with your explicit consent.
6. International transfers
Some of our subprocessors are based outside the United Kingdom. Where personal data is transferred outside the UK or EEA, we rely on the UK International Data Transfer Agreement, the Addendum to the EU Standard Contractual Clauses (SCCs), or adequacy decisions where available, together with additional technical safeguards.
7. Data retention
We retain personal data only for as long as necessary for the purposes set out in this Policy. Account data is kept for the duration of your membership. If you close your account, your profile is soft-deleted and scrubbed of personal identifiers within 7 days, and hard-deleted from primary databases within 30 days. Backups are rotated out within 90 days. Tax and billing records are retained for 6 years to comply with UK tax law.
8. Your rights under UK GDPR
You have the right to:
- request access to personal data we hold about you,
- request correction of inaccurate data,
- request erasure (the right to be forgotten),
- restrict or object to processing,
- request data portability, and
- withdraw consent where we rely on it.
You can exercise access and erasure directly from your settings page (Export my data and Delete my account). For other requests, email hello@elitecrowdmakers.com and we will respond within one month.
9. Complaints to the ICO
If you believe your personal data has been mishandled, you can complain to the UK Information Commissioner's Office (ICO) at https://ico.org.uk, by calling 0303 123 1113, or by writing to the ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would appreciate the chance to address your concerns first.
10. Security
Personal data is encrypted in transit and at rest, access is role-restricted through row-level security policies, and payment card data is handled only by Stripe. We review security practices regularly and maintain an incident response process.
11. Children
The Platform is not directed at children under 18 and we do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified via the Platform or by email. The Last updated date at the top of this page indicates when it was last revised.
13. Contact
For questions or requests, contact hello@elitecrowdmakers.com.
Other legal documents