What we hold,
and why.

Version 0.3 · Last updated 3 October 2026 · Not yet reviewed by a solicitor

Who we are

Thisissignal Ltd, company number 16911956, registered at 3rd Floor, 86 to 90 Paul Street, London, EC2A 4NE, England. We are the data controller for the information described here. To reach us about anything on this page, email vin@thisissignal.co.uk.

What we collect

What	When	Why
Name, email address, organisation, and the message you write	When you submit a form on this site	To reply to you, and to decide whether Signal is the right fit
Dietary requirements or allergies, if you choose to tell us	Only when you confirm your arrangements for a Signal Session, and only if you select that you have requirements to share	So that you can eat safely at that Session. Shared with the venue and its caterer for that event only, and only what they need to prepare your food
Whether you have received and accepted your calendar invitation	When you confirm your arrangements for a Signal Session	So we know who is expecting to attend and can resend an invitation that did not arrive
Your IP address and basic request information	Every time a page loads	Held briefly in server logs by our host to keep the site running and to defend against abuse

What we do not do

• We set no cookies and run no analytics on this site. There is no consent banner because there is nothing to consent to.
• There are no embedded videos or players on this site. Episodes are linked to YouTube rather than embedded, and short clips are served from our own site, so nothing on any page contacts a video service. If you follow a link to YouTube, you are on YouTube and their terms apply, not ours.
• We do not add you to a marketing list because you sent us a message.
• We do not sell or rent your details to anyone, ever.
• We do not pass your details to partners or sponsors. Partners buy presence at Signal, not access to the people in it.
• We do not profile you or make automated decisions about you.

There is one thing we do share, and we would rather say it plainly than bury it. If you tell us about a dietary requirement or an allergy for a Signal Session, we pass what the kitchen needs to the venue and its caterer for that event. That is the only purpose we share anything for, we only share it with the venue and caterer for the Session you are attending, and we only do it if you have ticked the box asking us to. If you would rather not write it on a form, select I’ll discuss my requirements directly with Vin and email vin@thisissignal.co.uk. Your requirements will be looked after either way.

Third parties involved

The site is hosted by Netlify, which processes form submissions and keeps short-lived server logs on our behalf. Typefaces are currently served by Google Fonts, which means your browser makes a request to Google and Google receives your IP address in the process. We are moving to self-hosted typefaces to remove that request entirely.

For a Signal Session, the venue and its catering team receive the dietary requirements of the people attending that Session. For the Session on 28 October 2026 that is BFI Stephen Street, 21 Stephen Street, London W1T 1LN, and the caterer it appoints. They receive what is needed to prepare your food safely and nothing beyond it. They do not receive your details for any other Session, and they do not receive them at all if you have not asked us to send them.

Our lawful basis

For enquiries, access requests and event requests, we rely on legitimate interests: you have asked us to do something and we need your details to do it. The contact form also asks you to confirm you are happy for us to hold your details in order to reply, which is a confirmation rather than a separate lawful basis. For keeping the site secure and available, we rely on legitimate interests. You can ask us to delete your details at any time and we will, unless we are required to keep them.

Dietary requirements and allergies are different. Information about your health is special category data under UK data protection law, and it needs a stronger basis than the rest. We rely on your explicit consent, which is why the form asks you to tick a box before you can send them, and why it asks only when you have said you have something to share. Giving them is optional. You can come to a Session without telling us anything about what you eat, and nothing else on the form depends on it.

Consent given can be taken back. Email vin@thisissignal.co.uk and we will delete what you told us and stop sharing it, whether the Session has happened or not.

How long we keep it

Form submissions are kept for as long as the conversation is live, and for up to twelve months afterwards in case you come back to us. After that they are deleted. Server logs are kept by our host for a short period and then discarded.

Dietary requirements and allergies are kept to a shorter clock. They are deleted within 30 days of the Session they were given for. That means everywhere we hold them, not just the convenient copy: the submission stored by our host, any spreadsheet or export taken from it to brief the kitchen, and the notification emails the form sent us, which are deleted from our inboxes along with the rest. We ask the venue and caterer to do the same once the event is over. We do not carry them forward to the next Session: if you come to another one, the form will ask you again, because an allergy recorded a year ago is not something we want to be guessing about.

Your rights

Under UK data protection law you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to our use of it, or ask us to restrict it. Email us and we will act within one month. If you are not satisfied with how we have handled a request, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this notice

If we change anything material here, we will update the version stamp at the top of this page and say so in the community.