Indigo Estate (“we”, “us”, or “our”) is a digital membership platform operated by Machala Beckford. We are committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website and membership services at indigo-estate.madethis.app.
Please read this policy carefully. By using our platform, you acknowledge that you have read and understood this policy.
1. Who We Are (Data Controller)
The data controller responsible for your personal information is:
Business: Indigo Estate
Owner / Controller: Machala Beckford
Email: team@indigo-estate.madethis.app
ICO Registration: Registered with the UK Information Commissioner’s Office (ICO number to be confirmed by the data controller)
2. What Data We Collect
We collect the following categories of personal data:
- Identity data: your name and any display name you choose
- Contact data: your email address
- Payment data: billing details processed securely by Stripe (we do not store full card numbers — Stripe handles payment processing under their own privacy and security standards)
- Account data: your membership tier, join date, and account preferences
- Usage data: pages visited, content accessed, session duration, and interactions within the platform
- Technical data: IP address, browser type, operating system, and device identifiers collected automatically when you use our site
3. How We Use Your Data
We use your personal data to:
- Create and manage your membership account
- Deliver the membership services you have subscribed to (The Library, The Programmes, The Vault, and The Room)
- Process your payments and manage your subscription via Stripe
- Send you service-related emails (account confirmations, billing receipts, updates to our terms)
- Send you community and content emails where you have consented to receive them
- Improve and develop our platform based on how members use it
- Comply with our legal obligations under UK law
We do not sell your personal data to third parties under any circumstances.
4. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), our legal bases for processing your data are:
- Contract: processing is necessary to deliver the membership services you have paid for
- Legitimate interests: improving our platform and preventing fraud
- Legal obligation: complying with UK law and financial regulations
- Consent: where we send marketing or non-essential communications (you may withdraw consent at any time)
5. Data Retention
We retain your personal data for as long as your membership is active, and for two years following cancellation. This allows us to resolve any disputes, comply with legal obligations, and provide records if requested. After this period, your data is securely deleted or anonymised.
Payment records may be retained for up to seven years in accordance with UK financial and tax legislation.
6. Sharing Your Data
We share your data only with trusted third-party service providers who assist us in operating the platform:
- Stripe — payment processing (their privacy policy applies to payment data)
- MadeThis — the platform infrastructure provider hosting Indigo Estate
- Convex — database and backend services
- Vercel — website hosting
All third-party providers are contractually required to handle your data securely and only for the purpose of delivering their services. None of them receive permission to use your data for their own marketing purposes.
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — request deletion of your data (subject to legal retention requirements)
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to restrict processing — ask us to limit how we use your data while a dispute is resolved
To exercise any of these rights, contact us at team@indigo-estate.madethis.app. We will respond within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
8. Cookies
We use essential cookies to operate the platform (authentication sessions and security). We may use analytics cookies to understand how the platform is used. No third-party advertising cookies are used. For full details, see our Cookie Policy.
9. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted HTTPS connections. Payment data is handled exclusively by Stripe, which is PCI-DSS compliant.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and, where changes are material, notify you by email. Continued use of the platform after changes constitutes acceptance of the updated policy.
11. Contact Us
For any questions about this Privacy Policy or how we handle your data, please contact us at: