What we hold, why, and for how long.

Who is responsible

Until The Glitter Standard CIC is incorporated, the data controller is The Open Sign, a trading name of UNight U.K. Ltd, registered with the Information Commissioner's Office. When the CIC is incorporated it becomes the controller and this notice is updated with its company number and registered office.

This website

The site is hosted by Netlify, which keeps standard server logs for security. The site sets no cookies, uses no analytics and loads its fonts from this domain, so nothing is sent to any advertising or analytics company when you read a page. Calm mode and your light or dark choice are stored on your own device only, in local storage, and never sent to us. The map page loads map tiles from OpenStreetMap, which sees your IP address when it serves them.

If you email us or use a form

The shared inbox (hello@) is read only by the people who run the Standard and is hosted on Google Workspace as our processor. Complaints, enquiries and readiness check results from the forms are delivered there; Netlify holds form submissions as our processor. We keep correspondence for as long as needed to deal with it and for two years afterwards, then delete it. You can complain anonymously. If you leave contact details on a complaint we use them only to acknowledge it and, with your permission, to follow up. We never pass a complainant's details to a venue.

The readiness check

If you send us your readiness check results we hold your name, work email, venue, town and answers so that we can email you to book a 15 minute call and help with your next steps. Our lawful basis is your consent, given by ticking the box. We keep them for two years after our last contact, then delete them. We never share or sell them.

Venues, staff and Ambassadors

Venues remain controllers of their own incident logs and training records. The Standard receives evidence for the Ten, training completion records and anonymised aggregated returns. Ambassadors' contact and expense details are held for the period they volunteer with us and for the statutory accounting period afterwards. Training completion records are held by the training provider, UNight U.K. Ltd, as a controller in its own right, and shared with the CIC under a written data sharing agreement.

The belonging question

Responses are collected without names, email addresses or device identifiers. The optional group identifiers are special category data processed under your explicit consent, given by ticking a box after being told what it is for, for the purpose of measuring whether a venue is welcoming and to whom. Venues see counts and averages, never individual answers, and no group figure is shown where fewer than five people selected that group. We publish only area and national figures. A data protection impact assessment was completed before the question went live.

Your rights

You can ask what we hold about you, ask us to correct or delete it, or object to our processing, by writing to hello@theglitterstandard.co.uk. You can complain to the Information Commissioner's Office at ico.org.uk. Last updated 20 October 2026.