Privacy
Who we are
000 is run by 000 MEDIA LTD, a company registered in England and Wales (company number 17430142), registered office 66 Paul Street, London EC2A 4NA. We are the controller of the personal data described here. Contact: support@000.gallery.
What we collect and why
The Dispatch. When you subscribe, we collect your email address, the page you subscribed from, the wording you agreed to and the times you asked and confirmed. We use it only to send you the Dispatch, the 000 newsletter. Our lawful basis is your consent, which you can withdraw at any time.
Reading a shared piece. When you join at a shared link to read the full piece, we collect your email address, the link you joined from and the times you asked for and opened your link. We use them to send your link and to remember that you joined. Our lawful basis is that this is needed to give you the access you asked for. Ticking the separate Dispatch box is optional and is covered by the paragraph above.
Site access. When you request access to the site, we collect your name, email address and any note you add. We use them to review the request and send your access code.
Threshold applications. When you apply to become a curator, we collect the answers you give. We store them to review your application and email them to our team. If we accept you, we reply by email.
Links in our emails. Links in the emails we send pass through links.news.000.gallery, a Resend service, which records that a link was clicked and then takes you to the page. We use this to see which pieces readers open from the Dispatch and to check that our emails work. We do not track whether an email is opened. Our lawful basis is our legitimate interest in understanding how the Dispatch is read. You can object at any time by writing to support@000.gallery.
Abuse protection. To protect the forms from abuse, we keep the IP address of each sign-up, join, access request or application for up to one hour.
Cookies
We use only cookies that are strictly necessary for a service you asked for, so they do not need consent: 000-session keeps you signed in after you enter the site; 000-reader remembers that you are a reader we know, so shared pieces open in full. It lasts one year when you join at a shared link and 30 days when it is set by opening a link in a Dispatch email. It holds a coded reference to the address it was issued for, never the address itself; 000-curator does the same on the curator portal; 000-admin is used by our own staff only. We use no advertising or tracking cookies.
Who handles your data
Resend sends our emails and holds the list of Dispatch subscribers. Vercel hosts the site. Upstash stores sign-up records. Google Workspace hosts our team email, including replies to support@000.gallery and our personal replies to applicants. Each processes data only on our instructions. All four are, or are part of, companies based in the United States, and your data may be transferred there. Resend says it complies with the UK Extension to the EU-US Data Privacy Framework. Resend also says it uses standard contractual clauses with the UK addendum. Upstash says it relies on the Data Privacy Framework, which includes the UK Extension. If that does not cover a transfer, it uses standard contractual clauses with the UK addendum. Vercel says it uses standard contractual clauses with the UK international data transfer addendum. Vercel also says it is certified under the Data Privacy Framework. Google says its Cloud Data Processing Addendum, which covers Workspace, includes standard contractual clauses for transfers under UK data protection law, and that it has incorporated the UK International Data Transfer Addendum.
How long we keep it
A sign-up you never confirm is deleted after 30 days. A reader who joined at a shared link and opened their link is kept until they ask us to delete their details. Confirmation links expire after 7 days. Once you confirm, we keep your details until you unsubscribe and ask us to delete them, or ask us to delete them at any time. Site access requests are kept for 12 months. Threshold applications are kept for 2 years. You can ask us to delete either sooner.
Your rights
You can ask to see, correct or delete your data, to restrict or object to how we use it, or to receive a copy. You can unsubscribe from the Dispatch at any time by replying "unsubscribe" or writing to support@000.gallery. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.