Privacy Policy

Last updated: March 1, 2026

Who We Are

Oxford Compass is operated in the United Kingdom. We act as the data controller for the personal data described in this policy.

Contact for privacy requests: privacy@oxfordcompass.org

What Data We Collect

We collect only the data needed to run the service:

Newsletter signup data: email address and signup metadata.
Event submission data: details entered in the public submission form, including optional submitter email.
Abuse-prevention data: IP address used for rate limiting and security checks.
Basic technical data from hosting and infrastructure logs (for reliability and security).

We do not use advertising trackers or behavioural profiling cookies.

Why We Process Data (Lawful Basis)

Under UK GDPR, we rely on:

Legitimate interests: publishing and maintaining public event information, operating security controls, preventing abuse, and improving reliability.
Consent: sending newsletter emails and optional follow-up communications where consent is given.

You can withdraw consent at any time by unsubscribing or contacting us.

Data Retention

Newsletter email addresses: retained until you unsubscribe or request deletion.
Submission IP addresses: retained for up to 90 days for anti-abuse controls, then deleted or anonymised.
Submission records: retained to keep moderation and editorial history, unless deletion is legally required.
Operational logs: retained for a limited period needed for security and debugging.

Processors and Third Parties

We use trusted processors to run the service:

Supabase: database and related backend services.
Buttondown: newsletter delivery and subscription management.
Vercel: web hosting and deployment platform.

These providers process data on our behalf under their own data protection terms.

Your UK GDPR Rights

You have the right to request:

Access to your personal data.
Rectification of inaccurate data.
Erasure in certain cases.
Restriction of processing in certain cases.
Data portability where applicable.
Objection to processing based on legitimate interests.

To exercise these rights, email privacy@oxfordcompass.org.

Cookies

We use only minimal cookies or equivalent storage needed for core site operation (for example, session-level functionality). We do not run ad-tech tracking cookies.

Complaints

If you are unhappy with how we handle data, contact us first at privacy@oxfordcompass.org. You also have the right to complain to the UK Information Commissioner's Office (ICO).

What Data We Collect

We collect only the data needed to run the service:

Newsletter signup data: email address and signup metadata.

Event submission data: details entered in the public submission form, including optional submitter email.

Abuse-prevention data: IP address used for rate limiting and security checks.

Basic technical data from hosting and infrastructure logs (for reliability and security).

We do not use advertising trackers or behavioural profiling cookies.

Why We Process Data (Lawful Basis)

Under UK GDPR, we rely on:

Legitimate interests: publishing and maintaining public event information, operating security controls, preventing abuse, and improving reliability.

Consent: sending newsletter emails and optional follow-up communications where consent is given.

You can withdraw consent at any time by unsubscribing or contacting us.

Data Retention

Newsletter email addresses: retained until you unsubscribe or request deletion.

Submission IP addresses: retained for up to 90 days for anti-abuse controls, then deleted or anonymised.

Submission records: retained to keep moderation and editorial history, unless deletion is legally required.

Operational logs: retained for a limited period needed for security and debugging.

Your UK GDPR Rights

You have the right to request:

Access to your personal data.

Rectification of inaccurate data.

Erasure in certain cases.

Restriction of processing in certain cases.

Data portability where applicable.

Objection to processing based on legitimate interests.

To exercise these rights, email privacy@oxfordcompass.org.