Privacy Policy
193 Countries Consortium Ltd (Companies House 14499310, Level 30, The Leadenhall Building, 122 Leadenhall Street, London EC3V 4AB) is the data controller for this membership platform. We process personal data under UK GDPR and the Data Protection Act 2018. Data is hosted in the UK. This notice is a working draft for client legal review before go-live.
| What we hold | Why | Lawful basis | Retention |
|---|---|---|---|
| Account & profile (name, email, company) | Provide membership services | Contract (Art. 6(1)(b)) | Life of membership + 6 years |
| Signed membership agreements | Evidence of the contract | Contract / Legal obligation | 6 years after membership ends |
| Payment ledger & Direct Debit plans | Fee collection, accounting | Contract / Legal obligation (financial records) | 6 years (HMRC) |
| Card / bank details | Payment collection | Handled by PCI-DSS payment providers — never stored on this platform | n/a |
| Mentoring sessions & notes | Deliver the mentoring benefit | Contract | Life of membership + 12 months |
| Summit applications & intent letters | Event administration | Contract | 12 months after the event |
| Investor-visibility pitches | Introductions you request | Consent (Art. 6(1)(a)) — withdraw any time in your dashboard | Until consent withdrawn |
| Audit logs | Security & accountability | Legitimate interests (Art. 6(1)(f)) | 6 years |
Your rights. Access, rectification, erasure, restriction, portability and objection. Erasure requests are actioned by an administrator: your identity is anonymised while financial records are retained under legal obligation. Contact the membership office to exercise any right; you may also complain to the ICO (ico.org.uk).
Processors. Payment collection (Stripe / GoCardless), e-signature, transactional email (Postmark) and UK-region cloud hosting act as processors under Article 28 agreements once live.
No marketing without consent. No card data on our servers. No data sold — ever.