Thank you for being here. This page explains, as plainly as we can, what happens to your details when you visit bykumi.uk, leave your name with us or become a member. If anything here is unclear, we'd genuinely love to hear from you.
Who we are
KUMI Collective is a small series of evenings in London for people aged 23 and over, run by Talana. We host Second Shift, The Gathering and Dough Diaries.
Under UK data protection law, the data controller is KUMI Collective (run by Talana). In everyday words, that means we decide how your details are used, and looking after them is our job.
We follow the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
What we keep
When you leave your name
- Your email address.
- Your first name, if you'd like to share it.
- The series you're most drawn to, if you pick one.
- The page you signed up on, and the evening it was for, if there was one.
- If a friend shared their link with you, who brought you.
- If you bring a plus one to The Gathering or Dough Diaries, their name and email address.
When you're a member
- Your name and email address.
- Your personal access code, so you can sign in.
- The series you belong to, and your member number.
- The evenings you've said yes to.
- For Dough Diaries, the first name of the plus one you bring.
- For The Gathering and Dough Diaries, the name and email address of the plus one you bring to an evening.
- For Second Shift, the agreement you sign before the evening: your full name, your signature, when you signed and the IP address you signed from, along with your answer about being recorded.
When you bring a plus one, it's kind to let them know you've shared their name and email with us. We only use them to send their own place card and to welcome them at the door. They aren't added to our list, and we won't write to them about anything else.
When you visit the site
- A little technical information, such as your IP address, your browser and the pages you open. Our host keeps this in ordinary server logs.
- Your IP address also reaches Google when your browser loads our typefaces.
The “Find your seat” quiz happens entirely in your browser. Your answers stay with you; they're never sent to us or saved anywhere.
We keep the site free of analytics, advertising cookies, tracking pixels and social media pixels. Our cookie policy has a little more on this.
How we use it, and why that's allowed
Data protection law asks us to name a “lawful basis” for each way we use your details. Here's ours, side by side.
| What we do | Details used | Lawful basis |
|---|---|---|
| Write to you about evenings coming up | Email, first name, series you picked | Consent, which you're free to withdraw whenever you like |
| Keep a record of your Second Shift agreement and your answer about recording | Full name, signature, time and IP address of signing, recording answer | Contract (the agreement you sign) and legitimate interests (looking after hosts and guests) |
| Run your membership: signing you in, your seat, your RSVPs and your plus one | Member details, RSVPs, plus ones' names and emails | Contract (giving you the membership you joined for) and legitimate interests (hosting small, well-planned evenings) |
| Keep the website running smoothly and safely | Server logs, IP address | Legitimate interests (a safe, reliable website) |
| Show you our typefaces | IP address (sent to Google) | Legitimate interests (presenting the site as it's meant to look) |
Where we rely on legitimate interests, we've thought carefully about your rights first and use as little as we can. Your details are never sold and never used for advertising.
Who helps us
Your details stay with us. A few trusted services help us run the site, and they only handle your details on our behalf and as we ask.
| Service | How it helps | Where |
|---|---|---|
| Formspree | Receives a copy of sign-up form entries and passes them to Talana by email | United States |
| Resend | Sends our emails, such as the welcome note after you sign up | United States |
| Vercel | Hosts the website and keeps its server logs | United States, with servers worldwide |
| Upstash (via Vercel) | Keeps the list and member details in a secure database | Depends on region; may include the United States |
| Google Fonts | Serves the typefaces you see on the site, so it receives your IP address | United States, with servers worldwide |
When details travel abroad
Some of these services are based in, or store details in, the United States. Whenever your details leave the UK, they're protected by recognised safeguards: the UK–US data bridge where the provider is certified, or the UK's International Data Transfer Addendum to standard contractual clauses.
The only other time we'd share your details is if the law required us to.
How long we hold on to it
| Details | How long |
|---|---|
| Your place on the list | Until you unsubscribe or ask us to take you off |
| Member details | For as long as you're a member, then 12 months after |
| RSVPs | 24 months |
| A plus one's name and email | With the RSVP they came on, and taken off as soon as that seat is given back |
| Signed Second Shift agreements | 6 years after the evening, so there's a record should it ever be needed |
| Server logs | As long as our hosting provider keeps them, usually a short while |
After that, we delete your details or make sure they can no longer identify you.
What you can ask of us
Your details are yours. UK data protection law gives you the right to:
- See them. Ask for a copy of everything we hold about you (the right of access).
- Correct them. Ask us to fix anything that's wrong or missing (rectification).
- Delete them. Ask us to erase your details (erasure).
- Pause them. Ask us to stop using them for a while (restriction).
- Object. Tell us you'd rather we didn't use them in a certain way, including where we rely on legitimate interests.
- Take them with you. Ask for your details in a format you can use elsewhere (portability).
- Change your mind. Withdraw your consent whenever you like, for example by unsubscribing from our emails. Anything we did before then still stands.
For any of these, email info@doughdiaries.co.uk or send a DM to @wearekumi on Instagram. It's free, and we'll reply within one month.
If you're ever unhappy with how we've looked after your details, we'd be grateful for the chance to put it right first. You're also always welcome to contact the Information Commissioner's Office (ICO) at ico.org.uk.
Age
KUMI evenings are for people aged 23 and over, and we never knowingly collect details from anyone under 18. If you think someone under 18 has shared their details with us, let us know and we'll delete them.
How we look after it
We take good care of your details. The whole site runs over HTTPS. Members sign in with a personal access code and a single secure, signed session cookie. Only Talana can see sign-ups and member details.
No system can promise to be perfect, so here's ours: if anything ever went wrong in a way that put you at risk, we'd tell you straight away and, where required, the ICO too.
If anything changes
If we change how we use your details, we'll update this page and the date at the top. If it's a big change, we'll write to members and the list directly.
Say hello
Questions, requests or worries, big or small, are always welcome.
- Email: info@doughdiaries.co.uk
- Instagram: DM @wearekumi
Thank you for trusting us with a little bit of you.