Privacy Notice

Last updated 2 Oct 2026

This notice explains how Collab ("we") uses personal data on Collab. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

What we collect

• Account data: username, display name, email address, password (stored only as a secure one-way hash), role, studio name.
• Profile data: the photo, bio, location, links, services, prices, portfolio images, projects and offers you choose to publish. This is public.
• Activity data: messages, job proposals, reviews, reports and bug reports you send.
• Technical data: IP address (for sign-in protection), last-seen time, browser details included with bug reports, and a session cookie needed to keep you signed in.

Why we use it (lawful basis)

• To run your account and the Site (contract).
• To keep the Site safe, prevent fraud and handle reports and complaints (legitimate interests).
• To comply with the law (legal obligation).

We do not sell your data, do not use advertising trackers, and do not process payments.

Who can see it

• Your public profile, listings and signed reviews are visible to anyone.
• Messages are visible only to the people in the conversation and, when investigating a report about that conversation, to our moderators.
• Your email address is never shown publicly.
• Our hosting provider stores the data on our behalf.

How long we keep it

We keep your account data while your account is open. Reviews you have left may be kept to preserve the accountability of the review system. Records relating to suspensions and reports may be kept for up to 6 years for fraud prevention.

Your rights

You can access, correct, export or ask us to delete your data, and object to or restrict some processing. Contact the Report a problem page. You may also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use a single essential session cookie to keep you signed in and protect forms. No consent is needed for essential cookies.