Skip to content

Privacy Policy

Draft. This page is a structured template and must be completed and reviewed by a qualified legal advisor before launch.

Who is responsible

[to be added], contact: [to be added]

What the application form collects (when applications are open)

  • Your name and email address
  • Optionally, where you are based
  • Your role, your project, its stage and your biggest current challenge
  • Why you want to join and what you could contribute
  • Optionally, a website or social profile
  • The time of your consent and the version of this policy
  • A salted, one-way hash of your IP address and your browser's user agent, used only to prevent abuse

What the waitlist collects

Your email address, the time of your consent, the version of this policy and a salted hash of your IP address. We use it only to tell you when new places open.

Membership and payment

Checkout, payment, and membership management run on Whop. Your card or bank details go to Whop and its payment providers and never reach this website. When your membership starts, changes, or ends, Whop sends us the membership ID, your Whop user ID, your email address, the plan, and the membership status. We use this to know who is a member and whether the membership is active.

Needs legal review: Whop as processor or independent controller, and the transfer of data to the United States.

Questions before checkout

Before checkout we ask what you are building and what you would like to contribute. We store your email address, your two answers, the time of your consent, the version of this policy and a salted hash of your IP address.

Why, and on what basis

We use this data to run your membership in The Grand Quarter, including your answers to the two questions before checkout, to review applications, to contact you about your membership and, for the waitlist, to tell you when places open. The legal basis is the performance of your membership contract (Art. 6(1)(b) GDPR), your consent for the waitlist and for applications (Art. 6(1)(a) GDPR) and, for abuse prevention, our legitimate interest in protecting the forms (Art. 6(1)(f) GDPR).

Where it is stored

Memberships, the answers before checkout, applications and waitlist signups are stored with Supabase. The website is hosted on Netlify. Server regions and the data processing agreements: [to be added]

How long

Retention period: [to be added]

Community tools

Members get access to the community through Whop. The planned chat is a private Telegram group connected to the membership through Whop, and live sessions run as video calls. Which tools are used and how they handle your data: [to be added]

Your rights

You can request access, correction, deletion, restriction or a copy of your data, withdraw your consent at any time with effect for the future, and lodge a complaint with a data protection authority.

Version 2026-10-draft-5