Privacy policy.
Your data, plainly.
What we collect, why we collect it, who sees it and what you can do about it. Many of our members are young, so we have written this for them first.
1. Who we are
SydeDoor is the trading name of Joao Alves, a sole trader. SydeDoor is not yet a registered company. Joao is the "controller" of your personal data, which means deciding how the data is used and being responsible for it.
If we form a company to run SydeDoor, it will take over this role and your data will move to it. We will update this policy and tell you if that affects you.
For anything about your data, email joao@sydedoor.com. We will give you a postal address on request.
2. The short version
- We collect what we need to run the waitlist and, once we launch, the programme.
- We do not sell your data, and we don't run advertising trackers or analytics on this website.
- We take extra care with under-18s. On camera is always a choice.
- You can ask to see, correct or delete your data at any time.
3. What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Waitlist form: name, email, LinkedIn URL if you add one, which group describes you, country and city, what excites you, what you would be comfortable paying, anything else you tell us, and your email preference. | To manage the waitlist, understand who is interested, shape what we build and choose cities and prices. | Legitimate interests |
| Emails about SydeDoor: your email address and your choice. | To send updates, only if you said yes. Every email lets you opt out. | Consent |
| Partner form: your name, contact and company details, and what you tell us, if you are interested in hosting or being a guest. | To talk to you about working together. | Legitimate interests |
| When you contact us: your details and what you say. | To reply and keep a record of the conversation. | Legitimate interests |
| Membership: name, contact details, date of birth or age group, country, stage of study or work, and your plan and booking history. | To check eligibility, provide your place and contact you about it. | Contract |
| Parent or guardian details: name, contact details and consent records for members under 18. | To get consent, keep them informed and contact them if needed. | Legal obligation and legitimate interests |
| Payment records: what you paid, when and your billing details. Our payment provider handles card numbers, and we never see them in full. | To take payment and keep accounts. | Contract and legal obligation |
| Taking part: attendance, team, work you submit, judges' scores and feedback, and prizes. | To run editions, give feedback, judge fairly and build your portfolio. | Contract |
| Recordings and livestreams: your image, voice and name if you appear on camera or speak in a recorded session. | To let members catch up and to run the livestream. Marketing use always needs separate consent. | Legitimate interests, or consent for under-18s on the public livestream and for marketing |
| Access and support needs: health or disability information only if you choose to tell us. | To make adjustments and keep you safe. | Explicit consent, or legal obligations around equality and safeguarding |
| Safeguarding records: concerns raised and what was done about them. | To protect members and meet our duties. | Legal obligation and substantial public interest |
| Website data: IP address, browser and pages requested, in our hosting provider's server logs. | To deliver the site and keep it secure. | Legitimate interests |
Where we rely on legitimate interests, we have weighed them against your rights, with extra weight given to the interests of young people. Where we rely on consent, you can withdraw it at any time.
We don't make decisions about you using only automated means.
4. Under-18s
SydeDoor membership is for people aged 16 to 25. The best interests of young members come first in how we use their data.
- Nobody under 18 takes part without the consent of a parent or guardian.
- We don't send marketing to under-18s without a clear yes, and we don't build advertising profiles of anyone.
- Hosts don't receive the contact details of under-18s, and never work with them unsupervised.
- Under-18s appear on the public livestream only with consent, and can always take part off-camera.
- Young people can exercise their own data rights. A parent or guardian can also ask on their behalf, where that is appropriate.
The programme isn't for anyone under 16. If you think we hold data about someone under 16 that we shouldn't, email joao@sydedoor.com and we will look into it and delete it where appropriate.
6. International transfers
Some of these providers process data outside the UK and EEA, including in the United States. When that happens, we rely on a government adequacy decision or on approved safeguards such as standard contractual clauses. Email us if you would like more detail.
7. How long we keep data
| Data | Kept for |
|---|---|
| Waitlist answers | Until you ask us to remove them or 24 months after our last contact with you, whichever comes first. |
| Membership and participation records | While you are a member, then up to 3 years, so that we can verify your work and deal with any questions. |
| Payment and accounting records | 6 years, as tax law requires. |
| Session recordings | Up to 12 months after the edition, unless you have agreed to a longer use. |
| Marketing consent records | As long as we rely on them, then up to 3 years. |
| Safeguarding records | For as long as safeguarding law and guidance require, which can be several years. |
| Access and support needs | Until the end of your membership, unless a safeguarding record needs it for longer. |
After that, we delete or anonymise it.
8. Your rights
You have the right to:
- see a copy of the data we hold about you;
- have inaccurate data corrected;
- have your data deleted, or its use restricted, in some situations;
- object to our use of your data based on legitimate interests, and to direct marketing at any time;
- withdraw any consent you have given;
- receive certain data in a portable format.
Email joao@sydedoor.com to use any of these. It is free. We will reply within one month, and may need to confirm who you are first.
If you're unhappy, please tell us so that we can try to fix it. You can also complain to the ICO at ico.org.uk, or to the data protection authority where you live.
9. How we protect data
We use encrypted connections, access controls and reputable providers, and we limit who can see sensitive information. No system is perfectly secure. If a breach puts you at risk, we will tell you and the regulator as the law requires.
11. Changes
We will update this policy as SydeDoor develops, especially at launch. The date below shows the latest version. If a change significantly affects you, we will tell you directly.
Last updated: 2 November 2026