What we hold, what we do not.

The short version.

This website does not run analytics. It does not track you across the internet. It does not embed advertising pixels. It uses one cookie, set in your browser's local storage, that records you have seen the cookie banner so we do not show it again. That is the entire client-side data footprint of visiting this site.

When you submit the contact form.

If you open the floating Submit portal and send a message, the form posts to Formsubmit.co, an email-relay service. Formsubmit forwards your submission to thethresholdcollective@gmail.com and does not store the message itself. We hold your submission in that inbox for as long as we need to reply and act on it. You can ask for a copy or for deletion at any time by emailing the same address.

The form asks for your name, email, organisation (optional), the topic, and your message. Nothing else is collected. We do not enrich the data, we do not sell it, we do not pass it to third parties for marketing.

When you use the chat widget.

The Threshold concierge is a scripted in-browser widget. The conversation is held in your browser's memory only. It is not transmitted anywhere, it is not logged, and it is wiped the moment you close the tab or navigate to a different page.

The widget includes basic crisis-language detection. If you mention self-harm, suicide, overdose, or comparable distress, the bot stops the sales-style flow, surfaces UK crisis resources, and steps back. The Threshold Collective is not a crisis line. If you are in danger, please reach Samaritans on 116 123, Shout on 85258, NHS on 111 option 2, or 999.

Third-party requests this page makes.

To be transparent, here is everything this page loads from a domain other than ours:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) for typography. Google may log your IP address as part of serving the fonts. We use a font-display strategy that minimises this exposure but does not eliminate it.
• YouTube (youtube.com / youtu.be) on the home page, where a podcast appearance is embedded. YouTube places its own cookies if you press play. If you do not press play, the embed loads only the thumbnail and player chrome.
• Momentum (momentum.thethresholdcollective.co.uk) for the cover image of Issue 02 on the Momentum archive page.
• Formsubmit.co, only when you submit the contact form.

None of the above are analytics endpoints. We do not control what those services log when you visit their domains; their privacy notices are linked from each.

Your rights under UK GDPR.

Because we hold so little personal data, exercising your rights is straightforward. You can ask us, by email, to confirm what we hold about you, to send you a copy, to correct it, to delete it, or to stop processing it. We aim to respond within seven days.

The data controller is The Threshold Collective Ltd, Companies House 16357419, registered office 18 Lady Isle House, Ferry Court, Cardiff, CF11 0JH. The supervisory authority is the UK Information Commissioner's Office.

Lawful basis for processing.

Under UK GDPR Article 6, we rely on the following lawful bases for the small amount of personal data we hold:

• Legitimate interest for replying to enquiries you send through the contact form, the floating submission portal, or the chat widget. The interest is mutual: you are asking us a question, we want to answer it. You can object at any time and we will stop processing.
• Performance of a contract for processing membership payments and providing access to The Room. Without this we cannot deliver the service you have signed up for.
• Legal obligation for retaining records of payments for HMRC and Companies House compliance.

We do not rely on consent as a lawful basis for any processing, because we do not currently use any optional cookies, marketing emails, or analytics. The single banner-acknowledgement cookie is strictly necessary for the cookie notice itself to function.

How long we keep things.

• Contact-form submissions and email correspondence: retained for as long as needed to act on the enquiry, and for up to two years afterwards for our records, after which they are deleted from our inbox.
• Stripe payment records: retained per Stripe's policy and are accessible to us only via the Stripe dashboard. We do not store card details on our own servers, ever.
• Membership account data (when applicable): retained for the duration of your active membership and for one year after cancellation, then deleted unless we are required to retain by law.
• Cookie-acknowledgement: retained in your browser until you clear it; we never see it.

Children.

This website is not directed at children under thirteen. We do not knowingly collect data from children. If you believe a child has submitted personal data through this site, email us and we will delete it.

How to reach us.

One inbox handles privacy, data requests, and any concern about how this website behaves: thethresholdcollective@gmail.com.

Privacy notice version 1.0 · 3 May 2026