Privacy Notice
The Jam Jar · run by The Human-Centric Workplace Ltd
The Jam Jar is a members-only community. People share real workplace situations here, so we take looking after your information seriously. This notice explains, in plain English, what we collect, why, who can see it, where it goes and what you can do about it.
1. Who we are
The Human-Centric Workplace Ltd is the data controller for The Jam Jar. That means we decide how your personal data is used and we are responsible for it.
- Registered in England and Wales, company number 16215745
- Registered office: 102 Lees Hall Road, Sheffield, England, S8 9JN
- Registered with the Information Commissioner's Office (ICO): ZC205952
- Privacy contact: Simone Fenton-Jarvis, simone@thehuman-centricworkplace.com
2. What we collect
Your account
Your email address, your membership status, your plan (monthly or yearly) and a reference number linking you to your subscription in Stripe. If you are an admin, ambassador or expert, we also record that role.
Payments
Payments are handled by Stripe. We never see or store your full card details. We see your billing email, which plan you are on and whether your payments are up to date.
Your profile
Your name, photo, country and anything else you choose to add to your profile.
What you post and do
Discussion threads and replies, feed posts, photos and comments, reactions, votes, star ratings, bookshelf submissions, questions for our experts, event suggestions, feedback and feature requests, and items you save or pin.
Connection requests
When you send another member a request to connect, we send it to them by email. We do not keep a copy of your message on the platform.
The BEAM feedback tool
What you type into BEAM is sent to our AI provider, Anthropic, to generate your feedback. We do not keep a copy of it on the platform. See section 7.
Emails we send you
Your login codes, your welcome email, the weekly digest, and notifications when someone answers your question.
Technical information
Your browser stores your login session so you stay signed in. Our hosting provider automatically records basic technical information, such as IP addresses, to keep the site running and secure.
3. Who can see what
- Other active members can see your name, photo, country and profile, and everything you post, react to or rate in the community. The Jam Jar is only open to active members; nothing is visible to the public.
- When you send a connection request, the member you contact receives your email address, so they can reply to you directly. Their email address is only shared with you if they choose to reply.
- Our admins (Simone and Louisa) can see account and membership details and can moderate or remove content.
- Ambassadors and experts can see and answer questions submitted to Ask an Expert.
- The public landing page shows only total counts of recent activity, such as "4 new threads this week". It never shows names or content.
4. Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Running your membership: your account, login, profile, the community, the member directory, connection requests, BEAM, the weekly digest and answer notifications | Contract. It is what you signed up for. |
| Taking payments and keeping financial records | Contract, and legal obligation (tax and accounting law) |
| Keeping the platform secure, preventing misuse and moderating content | Legitimate interests: keeping the community safe and working |
| Improving the platform, including looking at overall usage and feature requests | Legitimate interests |
| Showing anonymous activity counts on the public landing page | Legitimate interests (no personal data is shown) |
| Sending you marketing about other THCW services, if you have asked for it | Consent. You can withdraw it at any time. |
5. Sensitive information
We do not ask for sensitive information, such as details about your health, religion, sexuality or political views. But The Jam Jar is a place for real conversations, and you may choose to share something personal.
Please remember: anything you post in the community can be seen by all active members. Only share what you are comfortable with them seeing. When using BEAM or describing a situation, please don't use real names of colleagues or other people. Describe the situation, not the person.
6. Who we share it with
We use a small number of trusted providers to run The Jam Jar. They only process your data on our instructions and are bound by contract to protect it. We never sell your data, and we never share it with anyone for their own marketing.
| Provider | What they do for us | Based in |
|---|---|---|
| Supabase | Database, login and file storage (profiles, posts, photos) | Data stored in London, UK (US company) |
| Netlify | Hosting the website and running its behind-the-scenes functions | USA |
| Stripe | Payments and subscriptions | Ireland and USA |
| Resend | Sending emails (login codes, digests, notifications, connection requests) | USA |
| Anthropic | The AI behind the BEAM feedback tool | USA |
| Google Fonts and flagcdn.com | Loading the site's fonts and country flag images. Your browser contacts them directly, which shares your IP address with them. | USA |
| Spotify | Playing podcast episodes members have recommended. The player loads only when you open Worth a listen, and your browser contacts Spotify directly — so they see your IP address, and their own cookies apply if you are signed in to them. | Sweden and USA |
We may also share information with regulators, law enforcement or professional advisers where the law requires it, or with a buyer if the business is ever sold, in which case this notice would continue to protect your data.
7. International transfers
Several of our providers are based in, or store data in, the United States. Where your data leaves the UK, it is protected by either the UK–US Data Bridge (for certified companies) or the ICO-approved International Data Transfer Agreement or Addendum, which contractually require the same standard of protection you have in the UK.
For BEAM specifically: what you type is sent to Anthropic to generate your feedback. Under Anthropic's commercial terms, it is not used to train their AI models and is kept only for a limited period.
8. How long we keep it
| Information | How long |
|---|---|
| Your account and profile | For as long as you are a member. When your membership ends, your access stops straight away, and we delete your account and profile 90 days later. The gap means that if you rejoin in that time, everything is still there. |
| Your posts, replies and comments | They stay in the community after you leave, so other members' conversations still make sense, but shown as "Former member" rather than your name. If you would like them deleted too, just ask. |
| Reactions, votes, ratings and saved items | Deleted with your account. |
| Payment and transaction records | 6 years, as required by UK tax law. |
| Connection request messages and BEAM inputs | Not stored on the platform. Our email and AI providers keep them only for a limited period under their own terms. |
9. How we keep it safe
Only active members can see community content, and the database enforces this for every piece of information, not just the website. Login uses one-time codes sent to your email, so there are no passwords to leak. Payment details stay with Stripe. Access keys for our providers are kept on our servers and never sent to your browser, and we review our security settings regularly.
10. Cookies
We don't use advertising or analytics cookies. Your browser stores a small amount of information to keep you logged in, which is strictly necessary for the site to work, so we don't need to ask for your consent.
11. Your rights
You have the right to:
- Access a copy of the personal data we hold about you
- Correct anything that is wrong (most of your profile you can edit yourself)
- Delete your data, including your posts
- Restrict how we use your data in certain situations
- Move your data to another service in a common format
- Object to us using your data on the basis of legitimate interests
- Withdraw consent at any time, where we rely on it
To use any of these rights, email simone@thehuman-centricworkplace.com. It's free, and we'll reply within one month.
12. Automated decisions
We don't make any decisions about you using automated processing. BEAM gives you suggestions for your own use; it doesn't make decisions about you.
13. Age
The Jam Jar is a professional community for adults. It is not intended for anyone under 18.
14. Complaints
If you are unhappy with how we have handled your data, please talk to us first and we'll put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
15. Changes to this notice
If we change how we use your data, we'll update this notice and, if the change is significant, tell members by email.