Privacy Notice

1. Who controls your data

Ringcraft is the data controller. Contact julie@openequi.com

2. What we collect, and why

Data	Why	Legal basis
Email address	Deliver your entry link, reports, and transactional messages	Contract
Name for publication	Your certificate; publication only if Top 5	Contract / consent (clause 8.2 of the Terms)
Business name, industry role (optional)	Certificate; anonymous role-level commentary where samples permit	Consent
Country of residence	Checkout currency and tax determination	Contract / legal obligation
Your twenty answers and amendment history	Scoring, the consensus, your report card, the anonymised longitudinal dataset	Contract / legitimate interests
Payment status	Lodgement and receipts (card details are held by Stripe, not us)	Contract
Marketing opt-in status	Only if you separately tick the opt-in box	Consent

We collect nothing else. No password, no phone number, no postal address, no tracking for advertising.

3. The confidentiality commitment

This restates, in binding form, the promise made in our public materials:

Your entry is never shared, sold, or passed to a third party. No data broking, no partner lists, no selling the industry's opinions back to the industry, no sponsor access to entrant data.
Your individual answers are published only in aggregate, as part of the collective consensus, and are never attributed to you.
Your name is published only if you finish in the Top 5, under the consent given at entry.

4. Who processes your data on our behalf

Service providers acting only on our instructions such as payment processing email delivery, and database hosting Each is bound by contract to process your data only for these purposes.

5. Marketing

Marketing consent is separate from entry, unticked by default, and never required. Paid entrants receive no marketing at all between lodgement and delivery of The Ring Craft Review, regardless of opt-in status. You may withdraw marketing consent at any time via the link in any marketing email.

6. Retention

Personal data (name, email, business name, role, country) is retained while needed to deliver the product and any recognition attached to it, and then for [a period of 5 years thereafter after which it is deleted.
Forecast data (answers, scores, band distances) is retained indefinitely in anonymised form as part of the longitudinal dataset. Once anonymised it is no longer personal data.
Payment records are retained as required by tax law.

7. Your rights

Depending on your jurisdiction, you may have rights of access, correction, deletion, portability, restriction, and objection, and the right to complain to your supervisory authority

Deletion works like this: on a verified request we delete your personal data - your name, email, and details - and your answers remain in the dataset only in anonymised form, permanently unlinked from you. If you finished Top 5 and were published, we will remove your name from surfaces we control, but cannot recall industry press already published under your entry consent.

8. Security

Entry data is held in a secured database with regular backups. Access is by your personal entry link; treat it like a key. We will notify affected entrants and regulators of any breach as the law requires.

9. Changes to this notice

Material changes affecting a live Edition will be notified to paid entrants by email (this is a service-critical notice, sent regardless of marketing opt-in).