Privacy Notice
The Jam Jar · run by The Human-Centric Workplace Ltd
The Jam Jar is a members-only community. People share real workplace situations here, so we take looking after your information seriously. This notice explains, in plain English, what we collect, why, who can see it, where it goes and what you can do about it.
1. Who we are
The Human-Centric Workplace Ltd is the data controller for The Jam Jar. That means we decide how your personal data is used and we are responsible for it.
- Registered in England and Wales, company number 16215745
- Registered office: 102 Lees Hall Road, Sheffield, England, S8 9JN
- Registered with the Information Commissioner's Office (ICO): ZC205952
- Privacy contact: Simone Fenton-Jarvis, simone@thehuman-centricworkplace.com
2. What we collect
Your account
Your email address, your membership status, your plan (monthly or yearly) and a reference number linking you to your subscription in Stripe. If you are an admin, ambassador or expert, we also record that role.
Payments
Payments are handled by Stripe. We never see or store your full card details. We see your billing email, which plan you are on and whether your payments are up to date.
Your profile
Your name, photo, country and anything else you choose to add to your profile.
What you post and do
Discussion threads and replies, feed posts, photos and comments, reactions, votes, star ratings, bookshelf submissions, questions for our experts, event suggestions, feedback and feature requests, and items you save or pin.
Connection requests
When you send another member a request to connect, we send it to them by email. We do not keep a copy of your message on the platform.
The BEAM feedback tool
What you type into BEAM is sent to our AI provider, Anthropic, to generate your feedback. We do not keep a copy of it on the platform. See section 7.
Your journal
Notes, BEAM reflections and answers to the weekly question that you write in your journal, the tags you add to them, which ones you have marked as wins, and anything you pin to your vision board. Your journal is private: see section 3.
If you use Talk instead to dictate an entry, your own browser turns your speech into text using its built-in speech service (Google, if you use Chrome or Edge; Apple, if you use Safari). The audio goes from your browser straight to that service under its own terms. We never receive or store any audio — only the text you choose to save.
Jam Slam
If you play the game, your best score each week and how many rounds you have played that week.
Emails we send you
Your login codes, your welcome email, the weekly digest, and notifications when someone answers your question.
Technical information
Your browser stores your login session so you stay signed in. Our hosting provider automatically records basic technical information, such as IP addresses, to keep the site running and secure.
3. Who can see what
- Other active members can see your name, photo, country and profile, and everything you post, react to or rate in the community. The Jam Jar is only open to active members; nothing is visible to the public.
- When you send a connection request, the member you contact receives your email address, so they can reply to you directly. Their email address is only shared with you if they choose to reply.
- Our admins (Simone and Louisa) can see account and membership details and can moderate or remove content.
- Ambassadors and experts can see and answer questions submitted to Ask an Expert.
- Your journal is the exception to all of the above. Only you can read it. There is no way for other members, an organisation that pays for your seat, our ambassadors, our experts or our admins to view it through the platform, and it never appears in any reporting — not even as a number. Our two co-founders can technically reach the underlying database to keep the service running, as with any service like this; we do not read journals, and the platform has no screen that shows them.
- Jam Slam scores are shown to other active members on the game's leaderboard, under your profile name.
- The public landing page shows only total counts of recent activity, such as "4 new threads this week". It never shows names or content.
4. Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Running your membership: your account, login, profile, the community, the member directory, connection requests, BEAM, your journal, Jam Slam, the weekly digest and answer notifications | Contract. It is what you signed up for. |
| Taking payments and keeping financial records | Contract, and legal obligation (tax and accounting law) |
| Keeping the platform secure, preventing misuse and moderating content | Legitimate interests: keeping the community safe and working |
| Improving the platform, including looking at overall usage and feature requests | Legitimate interests |
| Showing anonymous activity counts on the public landing page | Legitimate interests (no personal data is shown) |
| Sending you marketing about other THCW services, if you have asked for it | Consent. You can withdraw it at any time. |
5. Sensitive information
We do not ask for sensitive information, such as details about your health, religion, sexuality or political views. But The Jam Jar is a place for real conversations, and you may choose to share something personal.
Please remember: anything you post in the community can be seen by all active members. Only share what you are comfortable with them seeing. When using BEAM or describing a situation, please don't use real names of colleagues or other people. Describe the situation, not the person.
Your journal is private, but the same habit is a good one there too. Initials rather than full names keep other people's details out of it, and the journal export can shorten anyone you have tagged to initials for you.
6. Who we share it with
We use a small number of trusted providers to run The Jam Jar. They only process your data on our instructions and are bound by contract to protect it. We never sell your data, and we never share it with anyone for their own marketing.
| Provider | What they do for us | Based in |
|---|---|---|
| Supabase | Database, login and file storage (profiles, posts, photos) | Data stored in London, UK (US company) |
| Netlify | Hosting the website and running its behind-the-scenes functions | USA |
| Stripe | Payments and subscriptions | Ireland and USA |
| Resend | Sending emails (login codes, digests, notifications, connection requests) | USA |
| Anthropic | The AI behind the BEAM feedback tool | USA |
| Google Fonts and flagcdn.com | Loading the site's fonts and country flag images. Your browser contacts them directly, which shares your IP address with them. | USA |
| Google or Apple (only if you use Talk instead in your journal) | Your browser's own speech-to-text service turns what you say into text. Your browser sends the audio to them directly; it never passes through us, and we do not have a contract with them for this. If you would rather it didn't, type instead. | USA |
| Spotify | Playing podcast episodes members have recommended. The player loads only when you open Worth a listen, and your browser contacts Spotify directly — so they see your IP address, and their own cookies apply if you are signed in to them. | Sweden and USA |
We may also share information with regulators, law enforcement or professional advisers where the law requires it, or with a buyer if the business is ever sold, in which case this notice would continue to protect your data.
7. International transfers
Several of our providers are based in, or store data in, the United States. Where your data leaves the UK, it is protected by either the UK–US Data Bridge (for certified companies) or the ICO-approved International Data Transfer Agreement or Addendum, which contractually require the same standard of protection you have in the UK.
For BEAM specifically: what you type is sent to Anthropic to generate your feedback. Under Anthropic's commercial terms, it is not used to train their AI models and is kept only for a limited period.
8. How long we keep it
| Information | How long |
|---|---|
| Your account and profile | For as long as you are a member. When your membership ends, your access stops straight away, and we delete your account and profile 90 days later. The gap means that if you rejoin in that time, everything is still there. |
| Your posts, replies and comments | They stay in the community after you leave, so other members' conversations still make sense, but shown as "Former member" rather than your name. If you would like them deleted too, just ask. |
| Reactions, votes, ratings and saved items | Deleted with your account. |
| Your journal | Until you delete it. You can delete any entry, or your whole journal, yourself at any time, and it is gone for good. It is also deleted automatically with your account. |
| Jam Slam scores | Deleted with your account. |
| Payment and transaction records | 6 years, as required by UK tax law. |
| Connection request messages and BEAM inputs | Not stored on the platform. Our email and AI providers keep them only for a limited period under their own terms. |
9. How we keep it safe
Only active members can see community content, and the database enforces this for every piece of information, not just the website. Your journal goes further: the database will only ever return your entries to you, signed in as you. Login uses one-time codes sent to your email, so there are no passwords to leak. Payment details stay with Stripe. Access keys for our providers are kept on our servers and never sent to your browser, and we review our security settings regularly.
10. Cookies
We don't use advertising or analytics cookies. Your browser stores a small amount of information to keep you logged in, which is strictly necessary for the site to work, so we don't need to ask for your consent.
11. Your rights
You have the right to:
- Access a copy of the personal data we hold about you
- Correct anything that is wrong (most of your profile you can edit yourself)
- Delete your data, including your posts
- Restrict how we use your data in certain situations
- Move your data to another service in a common format (you can export your journal yourself, as a PDF, at any time)
- Object to us using your data on the basis of legitimate interests
- Withdraw consent at any time, where we rely on it
To use any of these rights, email simone@thehuman-centricworkplace.com. It's free, and we'll reply within one month.
12. Automated decisions
We don't make any decisions about you using automated processing. BEAM gives you suggestions for your own use; it doesn't make decisions about you.
13. Age
The Jam Jar is a professional community for adults. It is not intended for anyone under 18.
14. Complaints
If you are unhappy with how we have handled your data, please talk to us first and we'll put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
15. Changes to this notice
If we change how we use your data, we'll update this notice and, if the change is significant, tell members by email.