Privacy policy

Who is responsible

The data controller is Creator Brunch Club (association), org.no. 938 361 525, Sørkedalsveien 1014, 0758 Oslo, Norway. For anything privacy-related, email hello@creatorbrunchclub.com.

Creator Brunch Club is for adults: you must be 18 or older to apply or join.

What we collect, and why

Your application. Name, email, city, the links you choose to share (Instagram, LinkedIn, website), what you create, what you hope to get from CBC, how you heard about us, a profile picture (so members recognise each other), your answer about being photographed at events, your language and, if you were invited, the referral code. We use this to review applications and keep the community curated. Legal basis: steps you ask us to take before joining, and our legitimate interest in running a curated community (GDPR Art. 6(1)(b) and (f)).

Sign-in. You can sign in with email and password, or with Google, LinkedIn or X. From them we receive your name, email address and profile picture, never your password. Passwords are stored hashed by our database provider.

Being a member. Your RSVPs and check-ins, feedback you give after events, community points, the people you invite (they and you can see each other's name, status and joining date), posts on the opportunity board with the contact details you add, rentals, events you suggest, answers you give for a member spotlight, partner offers you use, things you save, and your email settings. Legal basis: our agreement with you as a member, and our legitimate interest in running the community (Art. 6(1)(b) and (f)).

Paid events. If you pay for an event, Vipps MobilePay handles the payment; we receive the amount, the payment status and a reference, not your card or bank details. We keep payment records for five years, as Norwegian accounting law requires (Art. 6(1)(b) and (c)).

Member directory. You're only listed if you choose to be. A listing shows your name, photo, short bio, city, tags and links to other members, and on a public profile page (go.creatorbrunchclub.com/m/…) that anyone with the link can open and share. Legal basis: your consent (Art. 6(1)(a)). Untick it in your settings to remove both.

Emails. Account and event emails (your application, RSVPs, reminders) are part of membership. Event and opportunity emails can be switched off in your settings. Members also get The Weekly Beat, our weekly member email, because you're a member; every issue has a link to turn it off. If you're not a member, you only get the newsletter if you subscribe (delivered by Substack or by us), and every issue has an unsubscribe link. Our email provider tells us whether each email was delivered, opened or clicked; we keep that with the address in a send log, to check emails arrive and to see what's useful.

Photos and video at events. We only use photos or video of you if you've said yes, and saying no doesn't affect your application. We use the material on our own channels and those of partners such as a venue. Legal basis: your consent (Art. 6(1)(a)). You can change your mind at any time by emailing us; we then stop using it and remove existing posts where we reasonably can. Event albums are shared with members through Google Drive. Photos members upload to a gallery are stored at a public link and credited with their name.

AI help. We use Anthropic's Claude to power the directory search, to rank the directory for you (using your own application answers), to choose which members an opportunity or the weekly email suits (using the tags and short bio of members who get those emails), and to translate, summarise and tidy up posts. Choosing what suits you is a form of profiling; our legal basis is our legitimate interest in connecting members, and you can object at any time by emailing us. Nothing is decided about you automatically in a way that has legal or similarly significant effects: people at CBC make the decisions, including who is accepted.

Who can see what

• Anyone: your public profile page if you're in the directory; posts you put on the opportunity board or rentals, with your name; photos you upload to a gallery.
• Signed-in members: the directory; the name and photo of everyone going to an event (your other details only if you're in the directory); the community points leaderboard.
• Us: the CBC team who run the club see what's needed to review applications, run events and help members.

We don't sell your data, and we share it with authorities only where the law requires it.

Join page statistics

To make applying easier, we count how people use the /join page: which parts are seen, which form fields are completed or trip people up (never what you type), whether you applied, your device type (phone, tablet or desktop) and the site or campaign (UTM tags) that sent you. This sets no cookies and stores nothing on your device. Your IP address is never stored: it is combined with your browser details and a key that changes every day into an anonymous code, so we can't recognise you from one day to the next. Browsers that send a Global Privacy Control signal aren't counted. Legal basis: our legitimate interest in improving how people join. We keep the raw events for 13 months.

If you apply, we also note on your account how you applied and where you came from, so we can see which channels bring members.

Across the site we also count page views and device types with Cloudflare Web Analytics and Framer's built-in statistics. Both are cookieless.

Who helps us

A small set of providers ("processors") handle data on our instructions. Where a provider is outside the EEA, the transfer is covered by the EU Standard Contractual Clauses, or by the EU-US Data Privacy Framework where the provider is certified. Vipps MobilePay is responsible for the payment itself, under its own privacy terms.

How long we keep it

• Applications we turn down: deleted 12 months after the decision, unless you apply again.
• Your membership data: kept while you're a member. Ask us to delete your account and we'll do it within 30 days.
• Weekly data backups: kept for 12 months, so deleted data is gone from them within a year.
• The email send log: 24 months.
• Join page statistics: 13 months.
• Newsletter: until you unsubscribe. After that we keep only a note that you did, so we don't email you again.
• Event photos and video: until you withdraw your consent or we no longer use them.
• Payment records: five years.
• Emails you send us: up to 24 months.

Your rights

Under the GDPR you have the right to access your data, correct it, have it deleted, restrict how we use it, object to how we use it (including the AI matching above), receive a copy in a portable format, and withdraw consent at any time. Withdrawing consent doesn't affect what we did before. Email hello@creatorbrunchclub.com and we'll answer within one month.

If you're unhappy with how we've handled your data, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).

Do you have to give us your data?

To apply we need your name, email, city, what you create and what you want from CBC, how you heard about us, at least one link and a profile picture. Without these we can't review your application. Everything else, such as being photographed, the directory listing and the newsletter, is your choice.

Cookies & storage

We don't use cookies, advertising or third-party tracking. Your browser's storage keeps your sign-in session so you stay signed in, a draft of your application and any referral code while you apply, which food picture you've already seen on the home page, and where to bring you back after you sign in to RSVP. The site also stores its own files on your device so it loads quickly and works as an app. Our page-view statistics are cookieless.

Changes

We may update this policy from time to time. We'll change the "last updated" date above, and for significant changes we'll let members know.