Membership privacy

Who controls your information

Spectrum Universal is the seller of the digital membership service and the data controller responsible for the membership, invitation and profile information described in this notice. This notice covers those services; separate program notices and external stores’ policies may also apply.

Information and purposes

We process names, email addresses, optional invitation phone numbers, account identifiers and authentication records to verify identity, deliver invitations and provide access. Profile descriptions, artwork, media, websites and social links are processed to create and screen profiles; only approved public profile content is displayed publicly. Private contact details remain private.

Support messages, consent records, access decisions, audit history and security records are used for support, accountability and fraud prevention. Where collected, IP addresses, device identifiers and usage telemetry help protect and maintain the service. We do not request Shopify or social-media passwords.

Legal bases

Where applicable data-protection law requires a legal basis, we rely on contract performance to create and manage your account, provide membership access and process necessary profile information. We rely on legitimate interests to maintain service security, prevent fraud, moderate content and handle support, subject to your rights and interests.

We rely on your consent for optional marketing and any non-essential cookies or processing that require consent; you can withdraw it. We rely on legal obligations where applicable law requires tax, accounting, consent or other compliance records to be kept or disclosed.

Sharing

Information may be processed by hosting, authentication, email, support and security service providers, and configured safety-screening providers. Only information necessary for the relevant service is shared.

For digital membership orders processed through Paddle, Paddle.com is the Merchant of Record and online reseller. Paddle is a recipient of the personal information necessary for the sale, subscription management, payment processing, tax compliance, invoicing, payment-related customer service and refunds. Paddle processes that information under its own privacy notice. This disclosure does not mean checkout is currently available or that Paddle processes independent store, ticket, gifting or Gems transactions.

Professional advisers may receive information where needed, and authorities where required by law. External store and media services handle information under their own policies when you authorize connections or load their content.

Retention and security

Information is retained while needed for your account, the service, support, safety review or applicable legal obligations, then deleted or anonymised when no longer needed. Revoking an entitlement does not automatically erase your profile. You can request deletion through Contact; required fraud-prevention or legal records may be retained.

We use appropriate technical and organisational safeguards, including encryption in transit, access controls and private upload access. No system can guarantee absolute security.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent without affecting prior lawful processing. Contact Spectrum Universal to exercise your rights or raise a complaint. You may also complain to your competent privacy authority. Where GDPR applies, requests are normally answered within one month, subject to permitted extensions.

Cookies and external services

Essential cookies and browser storage maintain account sessions, verification, security and necessary preferences. External media or store services may use their own cookies when you open or authorize them. Browser settings let you restrict cookies and storage, though blocking essential storage can prevent sign-in. Non-essential analytics or marketing should operate only with any consent required by applicable law.

International processing

Service providers may process information outside your country. Where required, appropriate transfer safeguards must apply, such as recognised adequacy decisions or standard contractual clauses. Contact us for information about applicable providers and safeguards.