Privacy notice
Last updated
Who this is
Heirloom Praxis operates this website. We are based in New Haven, Connecticut. For questions about anything here, write to privacy@heirloompraxis.com — no form and no account required.
What we collect and why
We collect only what a specific purpose requires, and we ask for it at the moment that purpose arises rather than in advance.
- Email address — when you join the newsletter, a notification list or the Builders Circle waitlist, or ask us to email you a tool result. Used to send you that thing.
- Name, email, organisation and message — when you use the contact or booking form. Used so a person can reply properly.
- Sector, situation and access needs — when you request a Clarity Session, so the session is useful and accessible.
- Name, email, how you describe your work and what you would like AI to help with — when you join the Black Food & Farm AI Working Group interest list — plus anything optional you choose to add (organisation, general location, experience with AI, a short description of a challenge, how you would like to be involved). Used to organise the working group and suggest tools that fit. If the link you used carried a campaign tag, such as an event QR code, that tag is recorded with your signup. General updates and a personal follow-up are separate choices, each off until you tick it.
- Tool answers — held in your browser while you use a tool. Not stored by us unless you explicitly ask for a copy by email.
- Aggregate page counts — only where privacy-preserving analytics are enabled. No cookies, no identifiers, no cross-site tracking.
The legal basis
Consent, given by you at the point of collection, for anything you submit. You can withdraw it at any time, and withdrawing it is a one-click action rather than a conversation.
Where we retain a record of an enquiry after replying, that is our legitimate interest in maintaining a record of business correspondence, and you may object to it at any time.
How long we keep things
- Mailing lists: until you unsubscribe or ask for deletion.
- The working group interest list: until you leave it or ask for deletion. Signups with no activity for two years are reviewed by a person, and deleted if they are no longer needed. Your record of what you agreed to, and when, is kept with your signup for as long as the signup exists.
- Contact and booking submissions: two years, then deleted — unless we are still working together.
- Tool results sent by email: the record of the send, until you ask for its removal.
- Server logs: short-lived operational logs, containing no full email addresses. Email addresses are redacted before anything is written to a log.
Who else sees it
Our hosting provider and our database provider process data on our behalf under their own terms. Where you use an AI-assisted tool, the text of your answers is sent to a model provider for that request only, without your name, email or any identifier attached.
If you join the newsletter, an event notification list or the Builders Circle waitlist, your email address is also held by Brevo, the email service we use to write to those lists, which processes it on our behalf. For the waitlist, the name you gave is sent too. Each list is kept separate in Brevo exactly as it is here, so joining one never puts you on another. Nothing else is sent to Brevo: not your tool answers, not an enquiry or booking, and no tags or profile.
Leaving a list on this site takes you off it in Brevo, and unsubscribing from one of our emails marks you as having left here. If you ask us to delete your information, we delete it from both.
Working group signups are held in our database only. They are not sent to Brevo and not to any AI model. The confirmation email is sent through Resend, the service we use for transactional email. Nothing about your signup is shared with event organisers, partner organisations or other projects in the Heirloom ecosystem.
We do not sell, rent, trade or share personal information for anyone else's purposes. There is no advertising network, no data broker and no partner list.
Your rights
To exercise any of these, write to privacy@heirloompraxis.com. You do not need to explain why.
- Ask what we hold about you. We reply within thirty days.
- Ask for a copy in a portable format.
- Ask us to correct something that is wrong.
- Ask us to delete it. We do, and we confirm when it is done.
- Object to a use, or withdraw consent, at any time.
- Complain to your data protection authority if we handle any of this badly.
Security
Traffic is encrypted in transit. Access to submissions is restricted and administrative actions are logged. Secrets are held as server-side environment variables and are never included in anything sent to your browser.
We would rather state the limits than imply perfection: this is a small institution running on commercial infrastructure, and no operation of this size can promise that a determined attacker will never succeed. What we can promise is that we collect little, keep it briefly, and will tell you promptly if something goes wrong.
Children
This site is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has submitted something, write to us and we will remove it.
Changes
If this notice changes in a way that affects how your information is handled, we will update the date at the top and, where the change is material and we hold your email address, tell you directly rather than relying on you re-reading this page.
