Privacy Policy.

1What we collect

• Account details: your name, your email and your password. The password is stored only as a salted hash, so we cannot read it.
• Order details: what you bought, the amount you paid, the date, and whether the order is paid.
• RSVP choices: the yes, no or not yet you mark for events in the members area.
• Login and reset information: a random session ID kept in a cookie, and a one time password reset link when you ask for one (we store only a hash of it).
• Technical information: our hosting provider receives standard request data such as your IP address and browser type. We also use your IP address to limit repeated password reset requests.
• Messages: anything you email to us.

Payments are handled by Stripe. Your card details go directly to Stripe. We do not see or store card numbers.

2How we use it

We use your information to create and run your membership, deliver the guide, process and record your payment, let you log in and reset your password, show your RSVPs and the calendar, send you emails about your account, answer your requests, keep the site secure and meet legal obligations. We do not use it for advertising.

3Who we share it with

We share information only with the services that run the site:

• Stripe processes payments.
• Resend delivers our emails, such as password reset links. It receives your email address and the message.
• Vercel hosts the site, and our hosting and data storage providers keep the site running and store member data.

We may also share information if the law requires it or to protect our rights and members. We do not sell your personal information, and we do not share it for advertising.

RSVP links take you to third party hosts. What you give them is covered by their own privacy policies. The choices you mark in the members area are for your own planning and stay with your account.

4Cookies and sessions

We use one cookie, called sid, to keep you logged in. It is needed for the members area, is not readable by scripts, is sent only over a secure connection, and lasts up to 30 days or until you log out. We do not use advertising or analytics cookies or third party trackers on this site. Stripe may set its own cookies on its payment pages.

5How long we keep it

We keep your account, order and RSVP information while your account exists and for a reasonable time afterward for records, refund questions, disputes, taxes and accounting. Login sessions expire after 30 days, and password reset links expire after 1 hour or once used. Our service providers keep their own logs on their own schedules.

6Your choices

You can ask to see, correct or delete the information we hold about you by emailing hello@fullcircleinsider.com from the email you joined with. We may need to confirm it is you. If we delete your account you will lose access to the members area, and the Terms refund section still applies. We may keep information we are required to keep by law.

7Security

We protect your data with hashed passwords and encrypted connections. No online service is perfectly secure, so please use a password you do not use anywhere else.

8Children

Full Circle Insider is for adults. Many Art Week events are 21 and over, and you must be at least 18 to join. We do not knowingly collect information from anyone under 18. If you think a child has given us information, contact us and we will delete it.

9Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will update it if we add new services that handle your data, such as analytics.

10Contact

Privacy questions or requests? Email hello@fullcircleinsider.com.