What we collect

Account, event, booking and support information

HE Connect may store your name, email address, phone number, invite status, role, profile preferences, hosted events, joined events, messages, reports, moderation history, bug reports and support requests.

For paid events, HE Connect stores platform payment records such as booking status, payment references, ticket amounts, service fee amounts and refund state. Full card details are handled by Stripe or the configured payment provider, not by HE Connect.

Lawful basis

Why we process data

HE Connect processes data to provide the service requested by users, operate secure accounts, enable event bookings, support hosts, maintain platform safety and meet legal or payment obligations.

Depending on the context, the lawful basis may include contract, legitimate interests, legal obligation, consent for optional features such as marketing updates, and vital interests where urgent safeguarding or welfare concerns arise.

Processors

Third-party services

HE Connect may use payment, email, hosting, storage, map and diagnostic providers to operate the platform. Examples include Stripe for payments, an SMTP/email provider for transactional messages and OpenStreetMap/Leaflet map services.

These providers only receive information needed for their role. They may have their own security, retention and legal obligations.

Location and children

Family-sensitive data is handled carefully

HE Connect is designed for home-education communities, so location and family context can be sensitive. Users should avoid adding unnecessary child details, exact home addresses or private safeguarding information unless needed for a specific safety or support process.

Where possible, use approximate areas for profiles. Event hosts should consider whether precise venue details should only be shared with joined attendees, especially for private or home-based events.

Retention

How long information is kept

HE Connect keeps information only as long as needed for the service, support, safety, audit, payment, refund, dispute, legal or safeguarding purposes. Some records may remain after an event ends because they form part of payment, safety or moderation history.

Operational cleanup may remove expired magic links, old analytics events and closed support records. Backups may retain data for a limited rotation period before replacement or deletion.

Your rights

Access, correction, deletion and objection

You can download your account data from your profile page. You can also request correction, deletion, restriction, objection or location-data removal through the privacy controls on your profile or by contacting support.

Some information may need to be retained despite a deletion request where required for safeguarding, audit, payments, refunds, disputes, fraud prevention or legal obligations. You also have the right to complain to the UK Information Commissioner's Office if you believe your data has not been handled properly.

Next step

Need a privacy action?

Use the privacy controls in your profile to download your data or request deletion, correction, restriction, objection or location-data removal.