Privacy notice

This is the data deal, in plain language. If anything below is unclear, write to maria@jazzylea.com and we will explain.

Who holds your data

Jazzylea is run across two Cultlab entities. They are separate companies, and the controller depends on the part of Jazzylea you use.

For RSVP and registration, guest-list choices, signing in at the door and the live room on the night, the post-event survey, WhatsApp survey flow, website recap, and future-event marketing, the data controller is Cultlab Limited.

Cultlab Limited
Company number 14338376
28 Tupwood Gardens
Caterham
CR3 6EW

For payments, memberships, founding support, and donations, the data controller and Stripe merchant is Cultlab Creative Hub Ltd, the non-profit payment entity for Jazzylea.

Cultlab Creative Hub Ltd
Company number 16390725
Private company limited by guarantee without share capital
28 Tupwood Gardens
Caterham
CR3 6EW

When a payment, membership, or donation also needs Jazzylea follow-up, the two Cultlab entities share only what is needed to connect a payment, membership, donation, or refund to the right person, run the project, reconcile payments, honour your rights, handle refunds or disputes, and keep lawful accounting records.

What we collect

Only what the Jazzylea invitation, event, payment, and post-event survey need:

RSVP and invitation details: your name, email, phone number, title, company, question if you send one, RSVP choice, and guest-list visibility choice.
Registration in the app: your first and last name, email, job title, company and industry, your guest-list choice, and your photo if you add one; your ticket prints an ink version of it. Your answers stay on your phone as you go, in the browser’s own storage, so you can come back to them. A few reach us sooner: when you open the registration, we start a record for it; when you leave the first step, your first name and email, so we can tell whether you’re already a guest and, if you are, email you a sign-in link instead; and your photo, once you choose to use it. The rest arrives when you finish.
Verify profile: when you send us the WhatsApp message from your home in the app, your WhatsApp number and your yes to curated introductions and reminders about the evening.
Notifications: if you turn them on, the address your browser’s push service gives us (Apple’s, Google’s or Mozilla’s, for example), so we can tell you our answer to your request, remind you the day before and tell you when the talk is about to start. You can turn them off on your home in the app, or in your phone’s settings.
Personal invitation links: before you register, we may prepare a private link that opens your registration with your first and last name, email, job title, company and industry, and sometimes your photo, filled in. The link holds only a long random key; anyone who opens it sees those details, so we send it only to you. We keep these details on our invitation list, with when we wrote to you or messaged you on LinkedIn, whether you replied, and whether you opened your link, registered, verified your profile or turned on notifications. Your invitation, a PDF with your name, photo and personal link, is kept in our Google Drive. Like your link, anyone with its address can open it, so we send it only to you.
What you share in Jazzylea: anything you write, answer, post or choose in our app and at our evenings, in what we offer now and in what we add later. For example, your reflections after an evening, your stories and questions for a public talk, your messages and reactions in the room, and your connections in the community: the women we introduce you to and the people you connect with.
Payments and donations: the payment option you choose, donation amount if you enter one, checkout session ID, checkout status, product label, amount, currency, and payment metadata needed to open and reconcile Stripe Checkout. Stripe collects and processes your customer email, phone number, billing details, card or other payment method details, fraud checks, and transaction data. Stripe may share the customer email and transaction record with Cultlab Creative Hub Ltd for receipts, accounting, refunds, disputes, and support. When you buy a ticket, we keep your name, email and phone number from the checkout on your guest record, with your place for the evening, so we can let you in. We do not store your full card details.
The evening itself: at the door, the phone number you type, the WhatsApp number or WhatsApp username you send your sign-in code from, and when you signed in; in the room, the chat messages you post, your likes, poll votes and reactions, and anything you add to your profile.
Post-event survey: your post-event survey answers and any free text you choose to leave.
Survey contact details: first name, last name, email, LinkedIn, phone, and any second phone or work email already linked to your survey row.
Survey choices: whether a quote may be public, whether you want rare notes about future Jazzylea evenings and news, whether you want WhatsApp survey reminders, and whether you opt out of WhatsApp messages.
WhatsApp: your WhatsApp number, or your WhatsApp username if you use one, when you message the Jazzylea number: for the survey, so we can verify the survey session and show it back to you only as a masked confirmation; at the door, so we can confirm your sign-in code and send you your link into the room. Meta may also provide your WhatsApp profile name, message ID, message timestamp, and button or text response.
Technical records: the page name, submission time, shortened browser user agent, viewport, page URL, referrer, UTM tags if present, survey version, schema checksum, token/session records, rate-limit counters, and standard hosting logs.

We do not ask for special-category information such as health, religion, politics, or sexuality. Please do not put that in free text unless you genuinely need to tell us. If you do, we will use it only to handle the point you raised and remove it where it is not needed.

Why we collect it

RSVP, access, and logistics.

We use RSVP and contact details to manage invitations, seat planning, door access, guest-list choices, event questions, and follow-up around Jazzylea. Our lawful basis is legitimate interests: running a private invitation project carefully. If you say yes to the public guest list, we rely on your choice to show your name publicly on the Jazzylea website. If you choose “visitors only”, we show it only to people who reserved a seat.

Payments and donations.

When you use the payments page, Cultlab Creative Hub Ltd uses your selected ticket, membership, founding support, or donation amount to create a Stripe Checkout session and route you to Stripe. Stripe processes the payment, subscription, receipt, fraud checks, refunds, and disputes. Our lawful basis is contract where you buy a seat or membership, legitimate interests where you make a donation or support Jazzylea, and legal obligation where we keep payment and accounting records.

Post-event survey.

We use survey answers to understand how the evening worked, what people responded to, what could improve, and whether the Jazzylea model should continue through future rooms, community layers, partnerships, patron support, or other formats. Our lawful basis is legitimate interests: learning from a private event and developing Jazzylea with the people who attended or were invited. You do not have to complete the survey. Without contact details, we may not be able to connect your answer to the right guest, save your progress reliably, or reply.

Invitations and the registration.

We invite women leaders ourselves, by email and on LinkedIn, and an invitation can carry a personal link. The details on it come from our own lists and introductions, from public professional profiles such as LinkedIn and company websites, and from business-data providers (Explee and EnrichLayer), which find or confirm work details for us from a name or a LinkedIn address. Only you get your link: it opens your registration with those details filled in, for you to check and change. Your registration tells us who you are, so we can consider you for a seat, look for a patron to cover it, print your ticket, plan the room and introduce you to the women you’d most want to meet. Our lawful basis is legitimate interests: inviting the right people to a private evening and running it well. You can object at any time, and we will take you off our invitation list: email maria@jazzylea.com.

Taking part in the community.

We keep what you share so we can show it where you shared it, remember it when you come back, introduce you to the people you’d most want to meet, and learn how to make Jazzylea better. Some of it is meant to be seen: what you post in the room appears on guests’ phones and on the big screen, and the people you connect with see that connection. Whatever we add to the app or our evenings later works the same way. Our lawful basis is legitimate interests: running the community and its evenings well. Unless another part of this notice says otherwise, we keep what you share for as long as you take part in the community. You can object, or ask us to delete anything you’ve shared, at any time: email maria@jazzylea.com.

The door and the room.

On the night you sign in on your phone. We find you on the guest list by your phone number, and you confirm it is you by sending a one-minute code from WhatsApp. We note the WhatsApp number or username you sent it from on your guest record, so you can get back in without a new code. In the room, what you post in the chat and your likes, votes and reactions are shown on guests’ phones and on the big screen during the evening. Our lawful basis is legitimate interests: letting the right people in and running the evening.

Autosave and one-row survey record.

The survey autosaves partial answers to one survey row in our database. Opening your personal link, or continuing without WhatsApp after giving contact details, sets a short-lived, HttpOnly survey session cookie so saves go to the right row. The survey does not keep answer data in localStorage.

Reminders on WhatsApp.

The survey is a proper reflection on the evening, so it is fine to pause and finish later. When you message the bot or tap a survey button, we may use WhatsApp to send your personal survey link, help you continue, or remind you at the time you selected. If you say no, choose survey opt-out, or reply STOP, we stop survey reminders for that number. STOP records a WhatsApp opt-out and stops future WhatsApp contact. A survey opt-out, or a completed survey with the future-events box left unticked, may still show one final choice asking whether you want rare notes about future evenings. We do not send future-event announcements by WhatsApp unless you tap yes or tick the box. To stop those messages, reply STOP to any WhatsApp message or email maria@jazzylea.com. Withdrawing does not affect messages we already sent.

The recap of the evening.

After the night, we put together a recap of the evening: a write-up and some photos, published on jazzylea.com once it is ready. It draws on what you and others tell us in the survey to describe how the room felt as a whole. Your own words appear in it only if you ask us to, by ticking the public-testimonial option when you leave them, and a person on our side reads anything before it goes up. The evening is photographed for this recap; we publish those photos on our legitimate interest in showing the night, and you can object at any time. If you’d rather your words or a photo of you were not used, leave the testimonial box off, or email maria@jazzylea.com and we will take the quote or the photo down from the website or public recap. The recap is not sent over WhatsApp, and STOP does not affect it; the email route above is how you keep yourself out of it.

What we do with your answers.

We do more with your answers than read them one by one. We may combine what you tell us in the survey with your contact details to build a picture of who the Jazzylea community is: the kinds of people who come, what they responded to, what relationships or future formats may be relevant, and who might need a careful follow-up. We use that to plan future evenings, to weigh up partnerships, to understand support or patron interest, and for other Jazzylea business. A person does this work and makes every call. This rests on our legitimate interests in running Jazzylea well; you can object at any time by emailing maria@jazzylea.com, and we will stop unless we have a compelling reason not to. For relevant one-to-one follow-up, we may contact you by email, phone, SMS, or WhatsApp, including from Maria or another Jazzylea team email address or mobile number, where your survey answer, opt-in, payment, membership, support, or prior contact suggests that a collaboration, partnership, patron, support, or future-room conversation may be relevant. We will identify Jazzylea clearly, and you can stop those messages at any time by replying STOP, saying no, using unsubscribe where shown, or emailing maria@jazzylea.com. Separately, on the last step of the survey we ask, by an optional box that is off unless you tick it, whether we may send you rare notes about future Jazzylea evenings and news by email or WhatsApp. If you opt in, we may use your contact details and Jazzylea relationship context to send occasional marketing communications about future Jazzylea evenings, news, and related opportunities. That is consent, and yours to change: use the unsubscribe link in any marketing email or email maria@jazzylea.com and we will take you off the list. It is separate from the finish reminders and the public recap, which carry on either way. The attendee list you agreed to when you signed up carries on as before; this survey does not change it. No automated system decides anything about you on its own, so this is not the kind of solely-automated decision-making covered by Article 22 of the UK GDPR.

Where it lives

The RSVP form is hosted by Vercel and sends submissions to the Jazzylea RSVP endpoint. Registrations, ticket buyers’ guest records, door sign-ins and what happens in the room are stored in the Jazzylea database, run by Neon and hosted in London. The post-event survey writes to a separate table in the same database. The payments page is hosted by Vercel, creates a Stripe Checkout session for Cultlab Creative Hub Ltd through the Jazzylea payments endpoint, and then sends you to Stripe to enter payment details.

Survey access tokens, rate-limit counters, and the WhatsApp opt-out suppression record live in a KV store. Webhook deduplication records and reminder scheduling records also live there. Resend sends confirmation emails and an internal copy to the Jazzylea project team. WhatsApp messages run through the WhatsApp Business Platform. Ably carries live updates between phones and the big screen during the evening. Our invitation list and the personal links are kept in the same Jazzylea database, and the invitation PDFs in Google Drive (Google Workspace). Explee (in the UK) and EnrichLayer (in the United States) find or confirm invited women’s work details for us. If you turn on notifications, your browser’s push service (Apple’s, Google’s or Mozilla’s, for example) delivers them to your phone. Stripe processes payments, subscriptions, donations, refunds, fraud checks, receipts, and disputes. Vercel hosts the site and API and may hold short operational logs. Only the Jazzylea/Cultlab event team uses the information.

International transfers

Our database is hosted in London. Vercel, Resend, Stripe, Ably, Meta for WhatsApp Business Platform, Google for Drive, the push services that deliver notifications (Apple’s, Google’s or Mozilla’s, for example), EnrichLayer, and the script CDN used by the RSVP page may process data outside the UK. Where they do, we rely on their standard data-transfer safeguards, such as UK international data transfer terms or equivalent standard contractual clauses offered by those providers.

WhatsApp is provided through Meta for WhatsApp Business Platform. Meta receives WhatsApp delivery and messaging data needed to operate the service. If Meta’s contracting entity or WhatsApp Business terms change, we will update this notice.

How long we keep it

Records from the 10 June 2026 evening are kept as we said then: RSVP and question records, and complete or contact-bearing survey rows, until 10 June 2027, then deleted or anonymised, unless you register for a later evening. Abandoned survey rows that are stale and have no usable answers are swept after 90 days, by 9 September 2026.

From the 11 November 2026 evening onwards, we keep your guest record, your door sign-ins and what you did in the room for two years after the last Jazzylea evening you registered for, bought a ticket for, or attended, then delete or anonymise them. If we invited you and you never registered, or you started a registration and never finished it, we delete those details three months after the evening, unless you register for a later one: for 11 November 2026, on 11 February 2027.

Door sign-in codes last one minute. Survey link tokens are short-lived and single-use. The survey session cookie usually lasts about 24 hours. Rate-limit and reminder-control records are kept only as long as needed to run the survey safely, unless they are part of an opt-out record. Payment and accounting records are kept as long as needed for tax, accounting, refunds, disputes, fraud prevention, and legal obligations; Stripe keeps its own payment records under its own privacy policy. If you ask us to remove your record sooner, we will, subject to the WhatsApp opt-out suppression record described below.

Your rights

You can ask to see what we hold on you, correct it, delete it, restrict it, take it elsewhere, object to how we use it, or withdraw consent for future-event emails and messages. You can also ask us to remove a quote or photo of you from the website or public recap. One route for all of this: maria@jazzylea.com. We respond within one month. If you are not satisfied, you can complain to the ICO at ico.org.uk/make-a-complaint.

Your right to object.

You can object to processing based on legitimate interests, including our use of survey answers to plan Jazzylea and shape follow-up. Tell us what you object to and we will stop unless we have a compelling reason not to. You have an absolute right to object to direct marketing, and we will stop marketing if you ask.

When you opt out of WhatsApp messages we keep a one-way record, not your number, so we do not contact you again. We keep that record even if you ask us to delete everything else, because the law requires us to honour the opt-out.

Cookies, analytics, and scripts

The RSVP and survey pages do not use analytics or advertising pixels. The homepage and the app count visits, how far people get through the registration, and who turns on notifications, with Vercel Web Analytics. It uses no cookies, and Vercel describes it as anonymous: it records the page, the site you came from, your country, region and city, and your device, its system and browser, and it tells visits apart by a code made from the request, which it discards after 24 hours. Before anything is sent, we take your private link, your sign-in key and who invited you out of the page’s address: only the page and, from a personal link, your industry remain. The RSVP page loads animation scripts from jsDelivr. The survey uses an HttpOnly session cookie for saves and does not keep survey answers in localStorage. When you register in the app or sign in at the door, the room sets an HttpOnly sign-in cookie that lasts a year, so you stay signed in on your phone.

Contact

maria@jazzylea.com

Changes to this notice

If we change anything material, we update this page. The current version is from 30 September 2026.