Policies
Privacy policy
Last updated October 2026
Who we are
The Assembly is a student-led community based in London. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), the data controller is The founders of The Assembly. Contact us about privacy at [email protected].
What we collect
When you sign in with LinkedIn: your name, email address, profile photo and a LinkedIn account identifier. LinkedIn does not give us your headline, work history, education or connections, and we do not collect them.
When you complete your profile: the details you choose to add, such as your university, subject, LinkedIn profile link and interests.
When you book: your name, email address, the tickets you bought, and whether you agreed to be photographed or to show your attendance to other members. Card payments are handled by Stripe; we never see or store your card details.
When you contact us: your name, email address and message.
Why we use it, and our lawful basis
To provide your account and tickets (contract). To run events safely, check tickets at the door and handle refunds (contract and legitimate interests). To show your profile in the member directory and your attendance to other members (consent, which you can withdraw it at any time in your account). To publish event photographs that include you (consent, given at booking). To meet accounting obligations (legal obligation).
Who can see your information
Other members see only what you choose to share, and only if you opt in to the directory. Your email address is never shown to other members.
We share data only with the services that run this website: our hosting and database providers, Stripe (payments) and our email provider. We do not sell your data or share it with employers, firms or sponsors.
How long we keep it
Account data is kept until you delete your account. Booking records are kept for six years for accounting purposes, detached from your profile if you delete it. Enquiries are deleted after two years.
Your rights
You can access, correct, export or delete your data, object to processing and withdraw consent. Most of this can be done from your account page; for anything else, email [email protected]. You may also complain to the Information Commissioner’s Office (ico.org.uk).
Cookies
We use only strictly necessary cookies. See our cookie policy.