Privacy notice
Your data should have a reason to be here.
This notice explains what Sunday Entrepreneur collects, why we use it, what may be visible to other members, and how you can ask us to correct, export or delete information associated with your account.
1. What we collect
Depending on how you use Sunday Entrepreneur, we may process:
- Google account identity: your Firebase user ID, name, email address and profile image when you choose Google sign-in.
- Profile information: information you choose to add, such as headline, organisation, location, interests, skills, projects and biography.
- Applications and registrations: information you submit for events, Founder House, Sunday Pitchers or other programmes, which may include phone number, city, startup details and files you upload.
- Community activity: posts, comments, reactions, connections, messages, reports and content you choose to share.
- Consent and preference records: your Terms acceptance, Privacy Notice acknowledgement, age confirmation and optional marketing preference.
- Technical and security information: logs and device/network information processed by our infrastructure providers for authentication, reliability, fraud prevention and security.
2. Why we use it
We use personal data to provide account access, operate the community, process event and programme applications, manage registrations and passes, enable messaging and collaboration, respond to support or privacy requests, prevent abuse, maintain security, and communicate about services you requested.
Marketing communications are treated separately. If we ask for marketing consent, declining it will not stop you from using the core service.
3. What is public and what is private
Your public community profile is intended to show only information useful for community discovery. Sunday Entrepreneur does not intentionally publish your private phone number or sign-in email address in the public profile record.
Posts and other content you publish to public/community surfaces may be visible to other members or, where clearly indicated, to the public. Direct messages are intended for the participants in that conversation. Applications, registrations, payment proofs and internal review information are not public community content.
4. Service providers
We use service providers to run the product, including Google/Firebase for authentication, database and storage services, Vercel for website hosting and delivery, and an email-delivery provider for account, event, application and opted-in update emails. Those providers may process the information needed to provide the relevant service under their own contractual and security terms.
Where an event or payment flow uses another provider, we will use that provider only for the relevant purpose and may link to its own privacy information.
5. Age and programme eligibility
Sunday Entrepreneur does not impose a blanket age declaration for ordinary account access or programme registration. A specific programme may state additional age, parent/guardian or institution-led requirements where applicable law, safety, travel, accommodation, payment or another genuine programme need requires them.
Where a parent, guardian or institution must be involved, we will explain that in the relevant programme flow and limit collection to information reasonably needed for that purpose.
6. Retention
We keep information only for as long as reasonably needed for the purpose for which it was collected, to operate your account, maintain security and programme records, resolve disputes, meet accounting or legal requirements, or handle a request you make. Different categories can have different retention periods.
7. Your choices and rights
You can update profile information in the product. You can also use the Privacy & Data Centre to request a data copy, correction or account/data deletion. You can withdraw optional marketing consent there as well. You can also withdraw the core account-processing consent; doing that stops normal account/community use and opens a request for us to stop or remove data that is no longer required.
Withdrawing consent does not make earlier lawful processing disappear automatically, and some records may need to be retained where required for security, financial, dispute-resolution or legal reasons.
8. Security
We use Google authentication, access-controlled Firebase rules, private storage paths, transport encryption and platform security controls. No online service can promise absolute security; if we become aware of a security incident requiring action, we will handle it under applicable requirements.
9. Contact
For privacy questions or requests, use the Privacy & Data Centre for a private, dated ticket tied to your authenticated account, or email contact@sundayentrepreneur.com.