EST. MMXXVI · A PUBLIC RECORD
2 ENTRIES · LIVEConfess
POLICY 001 / PRIVACY

Privacy.

A short, plain-English summary of what we collect, why, and what we never do with it. Reparations.design is operated by Neeley Worldwide Ltd(UK company no. 10288310). The School of Critical Design is the education arm of Neeley Worldwide Ltd, not a separate organisation; references to “the School” below mean a programme inside the same legal entity that operates the Site.

A /

Data controller

The data controller for personal data collected through Reparations.design is:

Neeley Worldwide Ltd
Company no. 10288310 (England & Wales)
Registered office: 86-90 Paul Street, London, England, EC2A 4NE
Privacy contact: privacy@reparations.design

Because the School of Critical Design is the education arm of Neeley Worldwide Ltd (not a separate company), data handled “by the School” remains under the same controller. We do not transfer your personal data to a separate organisation when we work on the scholarship.

B /

What we collect

When you submit a confession we collect: the confession text, your chosen contribution tier (which may be $0 — confessions are free to submit and publish), your selected tags, and a contact email. If you sign your name, we also collect your name, optional role, and optional URL.

For contributions of $10,000 and above, we additionally collect billing details (legal name, company, address, country, and any tax ID you provide) so we can issue an invoice from our accounting system.

For card payments below $10,000, Stripe collects the card data on its own infrastructure. We never see or store your card number — we only see the resulting payment confirmation.

If you check “Keep me updated on Reparations.Design” on the confession form, we record that opt-in alongside your email so we can send occasional updates about the project.

C /

What we publish

The public ledger displays your confession text, the contribution amount (if any), the tags you selected, and (only if you chose “Sign my name”) your name, optional role, and optional URL. Your contact email and billing details are never published.

D /

What we never do

  • We do not sell, rent, or share contact emails with anyone.
  • We do not run third-party advertising trackers.
  • We do not deanonymize anonymous submissions.
  • We do not retain payment card numbers — Stripe handles those.
  • We do not use your data to train AI models.
E /

Service providers

We use a small set of vendors to operate the site. Each processes only the data they need to provide their service:

  • Supabase — database hosting (confession content, contact emails, billing snapshots).
  • Stripe — payment processing for card contributions.
  • Resend — transactional email (moderation outcome, newsletter).
  • Vercel — application hosting and edge caching.
  • Xero — invoice billing for $10,000+ contributions.
F /

Legal bases for processing

Under UK GDPR we rely on the following legal bases:

  • Publication of confession content — your explicit consent (given when you submit the form), supported by our legitimate interest in operating a public ledger.
  • Moderation communications — performance of pre-contractual steps and our legitimate interest in operating moderation.
  • Payment processing — necessary to process a voluntary contribution you choose to make and to comply with our tax and accounting obligations. No payment data is collected if you contribute nothing.
  • Newsletter / project updates — your explicit consent, given via the opt-in checkbox on the confession form. You may withdraw consent at any time by emailing privacy@reparations.design.

We do not rely on legitimate interest for marketing.

G /

Your rights

You can ask us to delete your contact email at any time; published confession text remains on the public ledger but the email associated with it will be removed. You can ask us to remove a published confession entirely by writing to privacy@reparations.design. If you live in the UK, the EU/EEA, or California, you have additional statutory rights — including access, rectification, portability, restriction, objection, and erasure — and we will honour them within the statutory period (30 days for UK/EU, 45 days for California, extendable in limited cases).

If you believe we have mishandled your personal data, you have the right to complain to the UK Information Commissioner’s Office at ico.org.uk or your local supervisory authority.

H /

Cookies

We do not use advertising or tracking cookies. The only cookie we set is a short-lived session cookie used by the admin moderation tools.

I /

Contact

Questions, requests, or complaints about privacy: privacy@reparations.design. Postal correspondence: Neeley Worldwide Ltd, 86-90 Paul Street, London, England, EC2A 4NE.

Terms of use →