Privacy Notice

Welcome to www.the-98-percent.com, the website for The 98% CIC.

The 98% CIC is a community interest company registered in England and Wales. This Privacy Notice has been written to inform you about how The 98% CIC collects and uses your personal data when you use our website, contact us through any channel, or otherwise interact with us.

It is important for you to know that under the Data Protection Act 2018 and similar regulations in other states, countries, and territories, you have certain data rights relating to the information and personal data we collect from you. This includes knowing about the data we hold, how we process that data, and the purposes for which we use your data.

As the data controller, The 98% CIC is responsible for maintaining this notice, managing your data, and ensuring that all data we hold, process, and use is done so in accordance with all relevant legislation and regulations.

This Privacy Notice outlines the personal data we collect, your rights, how you are able to exercise those rights, and how you can verify, update, or request deletion of the information we hold about you.

By contacting The 98% CIC, submitting information through our website, or otherwise interacting with us, you are deemed to have signalled your understanding of, acceptance of, and agreement to this Privacy Notice.

1. Who we are

The 98% CIC is a community interest company founded by Alexa Morden (Alexa Bull). We also produce and publish The 98% podcast.

The 98% CIC is registered in England and Wales with company number 16521251. Our registered office is Unit 11, Glebe Farm, Brackley, NN13 6DN, United Kingdom.

2. Contacting us

If you have any questions or enquiries relating to this Privacy Notice, or how your personal data is collected, processed, or used, or if you wish to exercise any of your legal data rights, you can contact The 98% CIC by emailing <EMAIL ADDRESS>.

In addition to using the contact forms available on our website, you can also contact us through our official social media channels or other methods we publish from time to time.

3. The information we collect from you

The exact information or personal data we collect from you will vary depending on the way in which you use our website, the forms you complete, and how you choose to interact with The 98% CIC.

We collect information and personal data from you through the following channels:

When you use our website
Whenever you access our website, we may collect information relating to your device, operating system, and browser. We may also record whether you have accessed the website directly or via a link on a third-party site or communication. Data may also be collected on how you use the website, such as the pages you visit and how long you spend on each page.

When you complete a form
When you complete an information form on our website, you may be asked to provide certain personal data, such as your name, email address, location, or other details relevant to your enquiry or participation.

When you sign up to our mailing list
If you choose to subscribe to our mailing list or newsletter, we will collect your name and email address. We may also collect information on your preferences where you choose to provide them, so that we can tailor the information we send you. You can unsubscribe from our mailing list at any time by using the link provided in our emails or by contacting us directly.

When you interact with us
Whenever you contact us directly, whether by email, social media, or other channels, we collect the personal data you provide as part of that interaction. This will typically include your basic contact information and the details of your message, as well as any other information you voluntarily provide.

When provided by third parties
In some cases, we may collect personal data about you from third parties where this is necessary to support our work. This may include information provided by partners, collaborators, or organisations we work with. The personal data collected in this way will be similar to the information you provide directly to us.

Cookies and analytics
Like most websites, we use cookies and similar technologies to help our website function properly, to understand how visitors use the site, and to improve our services. Where cookies are not strictly necessary, we will only use them with your consent. You can control your cookie preferences through your browser settings or by using the cookie banner on our website. Data collected in this way may include your IP address, device information, browsing activity, and general location.

When you place an order for merchandise
We collect personal data necessary to process and deliver your purchase, including your name, email address, postal address, and payment details (processed securely by our payment providers).

4. Special categories of data

In some situations, the information and personal data we collect from you may include what the UK General Data Protection Regulation and the Data Protection Act 2018 define as “special category data.”

This includes, but is not limited to:

  • Information relating to your physical or mental health, including any disabilities or access requirements you may have.

  • Your ethnic background or religious views.

  • Your sexual orientation.

  • Other information relating to a protected characteristic, as defined by the Equality Act 2010 or similar legislation in other countries and territories.

We will typically only collect this information when you raise concerns about mistreatment or your experience in the industry. We will only ever collect and process special category data with your explicit consent, or where there is another lawful basis for doing so. For example, we may collect this information where you choose to provide it through one of our forms (such as when disclosing access needs or diversity information), or where it is necessary to allow us to meet our commitments to equality, diversity, and inclusion.

Special category data will never be used for marketing purposes, and will not be shared outside The 98% CIC without your knowledge, except where required by law.

You are always able to update or withdraw special category information you have provided to us by contacting The 98% CIC using the details set out in this Privacy Notice.

5. Why and how we collect your data

The 98% CIC collects and processes your personal data in order to carry out our legitimate activities as a community interest company. These include, but are not limited to:

  • Responding to enquiries you make through our website, by email, or through other channels. Lawful basis: legitimate interests.

  • Allowing you to sign up to and receive our mailing list or newsletters. Lawful basis: consent. You can withdraw this at any time.

  • Collecting feedback or information through forms, surveys, or applications. Lawful basis: legitimate interests, or consent where required.

  • Recording information you provide to us when disclosing access needs, diversity data, or other special categories of data. Lawful basis: explicit consent.

  • Registering your attendance at events, workshops, training sessions, or other community activities we organise, and contacting you about these events where necessary. Lawful basis: legitimate interests.

  • Keeping records of our communications and interactions with you. Lawful basis: legitimate interests.

  • Analysing how our website is used, so that we can improve the way it works and the information we provide. Lawful basis: consent for non-essential cookies and analytics.

  • Complying with any legal obligations we are subject to, including record-keeping and reporting requirements. Lawful basis: legal obligation.

We will only collect the personal data that we need for these purposes, and we will always process your data in accordance with the principles set out in the Data Protection Act 2018.

Reports of mistreatment and abuse
In some cases, we may collect personal data about third parties when individuals raise concerns or report experiences of mistreatment or abuse in the industry. This information will usually include the details of the report and may identify the individuals involved.

We process this type of personal data on the basis of our legitimate interests to record and respond to concerns raised with us and to support our commitments to equality, diversity, and safeguarding. Where we are legally required to take action, we may also process such data on the basis of a legal obligation.

We will only collect information relevant to the concern being raised. We will handle it sensitively and will not share it outside The 98% CIC unless required by law or where necessary to protect individuals from harm. Where appropriate, we may anonymise or delete data once a report has been reviewed or resolved.

6. Using and sharing your data

The 98% CIC will only ever use your personal data for the purposes set out in this Privacy Notice, or for purposes that are compatible with those purposes.

We do not sell your personal data, and we do not share your personal data with third parties without your consent, except where required to do so by law or regulation.

We may share your personal data with trusted third-party service providers who help us operate our website, manage our mailing list, process form submissions, or deliver events and activities. These third parties are only permitted to use your personal data for the purpose of providing services to The 98% CIC and must keep your data secure at all times.

This includes third-party providers that enable us to sell and deliver merchandise, such as Printful (order fulfilment) and Squarespace Payments or Stripe (payment processing).

In limited circumstances, we may also share your personal data:

  • Where we are required to do so to comply with a legal obligation or lawful request from a public authority.

  • Where we believe it is necessary to prevent or report fraud, crime, or unlawful activity.

  • If we restructure or transfer part of our organisation, in which case your data may be transferred to the new entity, provided that equivalent protections remain in place.

  • Where we use cookies and analytics tools to understand how our website is used. Limited information, such as your IP address, device information, and browsing activity, may be shared with the providers of these services. This helps us analyse website traffic and improve our services. Such data is generally aggregated and anonymised and is not used to personally identify you.

We will never publish special category data you provide unless you have given your explicit consent.

7. Transfers of data outside the UK or EEA

The 98% CIC is based in the United Kingdom, and we primarily process and store personal data within the UK and European Economic Area (EEA). However, some personal data may be accessed or processed outside of these regions. This includes:

  • Where our website, mailing list, or other services are provided by trusted third-party service providers whose servers are located outside the UK or EEA.

  • Where individuals working for or on behalf of The 98% CIC are based outside the UK or EEA, including in Canada.

Whenever your personal data is transferred outside of the UK or EEA, we ensure that appropriate safeguards are in place to protect it. These may include:

  • Transfers to countries which the UK government or the European Commission recognise as providing an adequate level of data protection.

  • Standard contractual clauses or other legally recognised safeguards that require the recipient to protect your data to the same standards as required in the UK and EEA.

  • Where data is processed in Canada, it will also be subject to Canadian data protection law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), which sets out requirements for how organisations collect, use, and disclose personal information.

By interacting with us, you understand that your personal data may be processed in countries outside the UK or EEA, including Canada, but that in all cases we will ensure it is adequately protected. Where orders are fulfilled through Printful, your personal data may be processed in the EU, the United States, or other regions where Printful operates. Printful uses appropriate safeguards, such as standard contractual clauses, to ensure your data remains protected.

8. Under eighteens

Our website and services are not intended for individuals under the age of sixteen. We do not knowingly collect personal data from anyone under sixteen years of age.

If you are aged sixteen or over but under eighteen, you should only provide personal data to us with the knowledge and consent of a parent or legal guardian.

If we discover that we have collected personal data from anyone under sixteen, or from someone aged sixteen or over but under eighteen without parental or guardian consent, we will delete that data as soon as possible unless we are required to retain it for legal or regulatory reasons.

If you believe that a child or young person has provided their personal data without appropriate consent, please contact us using the details provided in this Privacy Notice.

9. How we store your data

Any personal data we collect from you is stored securely, either on our own systems or with trusted third-party service providers who help us operate our website, manage our mailing list, and deliver our activities. We only work with service providers whose data protection practices meet or exceed the standards required under UK data protection law.

We keep your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements. In practice, this means:

  • Data you provide through forms or enquiries is kept for as long as needed to respond to your query or provide the service you requested.

  • Mailing list information is kept until you unsubscribe, at which point your data will be removed from our active mailing list.

  • Special category data, such as information about health or access needs, is only kept for as long as is necessary for the activity or event for which it was collected, unless you consent to us retaining it for longer.

Deleted data may continue to exist for a short period of time in secure backups before being overwritten.

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access. However, no method of transmission over the internet or method of electronic storage can be guaranteed as completely secure. We encourage you to take care when providing personal data online.

10. Your data rights

Under the Data Protection Act 2018 and similar legislation in other countries, you have a number of rights relating to the personal data we hold about you. These include the right to:

  • Obtain a copy of the personal data we hold about you.

  • Request that we correct any personal data that is inaccurate or out of date.

  • Request that we delete your personal data where it is no longer necessary for us to retain it.

  • Withdraw your consent to our processing of your personal data, where we rely on consent as the legal basis for processing.

  • Request that we restrict the processing of your personal data in certain circumstances.

  • Request that we transfer your personal data to another organisation (data portability), where applicable.

  • Object to our processing of your personal data where we are relying on legitimate interests as the legal basis for processing.

  • Be given information about any automated decision-making and profiling that may affect you. The 98% CIC does not carry out automated decision-making or profiling.

If you wish to exercise any of these rights, you can contact us using the details set out in this Privacy Notice. In some cases, we may need to verify your identity before we can respond to your request.

If your personal data has been provided to us by a third party, we may not always be the data controller for that data. In such cases, we will let you know and may direct you to the relevant data controller to exercise your rights.

11. Deleting data

In most cases, you can ask us to delete the personal data you have provided by contacting us using the details in this Privacy Notice.

If you unsubscribe from our mailing list, your details will be removed from our active mailing list immediately. We may, however, retain a minimal record of your email address on a suppression list to ensure you are not added again without your consent.

For other types of personal data, for example information submitted through forms or provided in connection with events, we will typically delete your data once it is no longer required for the purpose for which it was collected, unless we have a legal obligation or a legitimate reason to retain it for longer, for example for record-keeping or regulatory compliance.

Deleted data may continue to exist for a short period of time in secure backups before being overwritten.

12. Third-party links and services

Our website may contain links to third-party websites, services, or social media platforms. If you follow a link to any of these, please be aware that they have their own privacy notices and policies, which may differ from ours. We are not responsible for the privacy practices of third parties, and you provide your personal data to them at your own risk.

In some cases, we may also use third-party services, such as mailing list providers, event registration platforms, social media platforms, or payment processors, to help us deliver our activities. Where this happens, your personal data will be handled in line with the provider’s own privacy practices as well as this Privacy Notice.

We encourage you to read the privacy notices of any third-party services you choose to interact with.

13. Emails, contact and marketing

We may contact you by email to respond to enquiries you have made, provide information you have requested, or send essential updates about our activities.

If you subscribe to our mailing list or newsletter, we will use your personal data to send you updates, news, and information about The 98% CIC. You can unsubscribe from these communications at any time by using the unsubscribe link in our emails or by contacting us directly.

We do not send unsolicited marketing emails, and we do not share your contact details with third parties for marketing purposes. In some circumstances, you may receive emails from third-party service providers we use, for example mailing list platforms or payment processors, but these will only be in connection with services you have requested from us.

Orders, Payments, and Fulfilment

When you purchase merchandise through our website, your order is processed securely through our ecommerce platform (Squarespace) and fulfilled by our trusted third-party production partner, PRINTFUL.

14. Orders

To fulfil your order, we share limited personal data with these providers, including your name, email address, postal address, and order details. This information is used only to:

  • process and deliver your order,

  • communicate with you about your purchase, and

  • resolve issues such as delivery queries, returns, or refunds.

Printful acts as a data processor on behalf of The 98% CIC under UK GDPR and the Data Protection Act 2018. Printful’s fulfilment facilities are located in several regions, including the UK, EU, and United States. Personal data may therefore be transferred and processed outside the UK solely for the purpose of producing and delivering your order, in line with appropriate data protection safeguards.

Payment information is handled securely by our payment partners (such as Squarespace Payments, Stripe, or PayPal). The 98% CIC does not store or have access to your full payment details. Your use of these payment services is governed by their respective privacy policies.

We retain limited order records (such as transaction amounts, products purchased, and order dates) for accounting, reporting, and compliance purposes. This information is stored securely and deleted once it is no longer required.

If you have any questions about how your data is processed when placing an order, please contact us at info@the-98-percent.com

15. Complaints

If you have any concerns or complaints regarding this Privacy Notice or the way The 98% CIC collects or processes your personal data, please contact us using the details provided so we can try to resolve the issue.

If you are based in the United Kingdom and are not satisfied with our response, you have the right to raise your concern with the Information Commissioner’s Office (ICO). Details of how to make a complaint can be found on the ICO website at www.ico.org.uk or by calling +44 (0)303 123 1113.

If your personal data is processed in Canada and you are not satisfied with our response, you may raise your concern with the Office of the Privacy Commissioner of Canada (OPC). Details of how to make a complaint can be found on the OPC website at www.priv.gc.ca or by calling +1 800 282 1376.

If you are located outside the United Kingdom or Canada, you may also have the right to raise your complaint with your own national or regional data protection authority.

16. Changes to this Privacy Notice

From time to time, The 98% CIC may update this Privacy Notice to reflect changes in our activities, legal obligations, or the way we process personal data.

Whenever we make significant changes, we will update the version published on our website and, where appropriate, notify you by email if you are subscribed to our mailing list.

We encourage you to review this Privacy Notice periodically to stay informed about how we collect, use, and protect your personal data.

This Privacy Notice was last updated on October 27, 2025