Privacy Policy

Blk Curate Collective (BCC, we, us) is run by Aletana Esoehen Ajulo, trading as Blk Curate Collective, ABN 60 314 429 032. We are based in Sydney.

For anything about your personal information, email hello@blkcuratecollective.com.

When you apply to the directory, we ask for your business name, what it does, its city and suburb, a short description, its logo (if it has one yet), its website and Instagram, your name, your email, a phone number and, if you want to give them, notes for us. We use these to review your application and, if we approve it, to set up your listing and your account.

We also ask whether your business is Black-owned (at least 50%), because that is who the directory is for.

• An ABN, if you give one. It is optional. We use it only to check the business is real, and we never publish it.
• An ACN, if you apply as a registered charity or not-for-profit. We use it to check your organisation on the ACNC register before we approve the charity rate. We never publish it.
• Your gender. We ask everyone who applies, and “Prefer not to say” is one of the answers. We only ever count totals, to see who we are reaching. It is never shown on your listing, and no page shows it next to your name.
• Your race or ethnicity, in your own words, or that you’d prefer not to say. We ask everyone who applies. We use it only to understand who BCC reaches. It is never shown on your listing, and no public page shows it next to your name.
• When you agreed to our Terms and this policy, so we have a record of it.

If we decline your application because the directory is not open in your area yet, we add your email address to the waitlist for your area, and the email telling you says so. We use it only to tell you when we open there, never for the newsletter, and you can unsubscribe at any time.

If you start the apply form and leave before sending it, we keep what you've typed with your email address, so you can pick up where you left off. We email you a link to finish after a day, and once more after four days, then stop. Every one of those emails has a link that stops them and deletes what you typed, and anything not finished is deleted after 30 days.

When you're listed, your listing shows what you choose to put on it. See what's public.

When you sign in, we use your email address. You can also set a password. Passwords are held by our sign-in provider in a scrambled form (a hash) that we cannot read. We record when you set one. Sign-in links and codes expire after 15 minutes.

When you pay for a membership, you pay on Stripe's own checkout page. We never see or store your card number. We keep your membership's status and dates, and the reference numbers Stripe gives us. When it starts, we give you a member code (like BCC-7KQ4MX). It identifies you as a member; it never signs anyone in.

When you sign up for the newsletter, we keep your email address, which form you used and when. Members can also choose the members' edition from their dashboard.

When you contact us, we keep your name, email, the topic you picked and your message, so we can reply.

When you upload photos or a logo, the location data your phone or camera adds to a photo is taken out in your browser before it is uploaded. The logo you send with an application is also saved by our server as a new copy of the image, without any of the original file’s details, and only our team can see it until your application is approved.

When you open a listing, we count the view. So that each visitor counts once a day, the site turns your IP address and browser details into a one-way code (a hash) that can't be turned back into them, and deletes it after a day. Only the number of views is kept. It decides which listings show as most viewed.

At our events, photographers take photos, and we publish some of them on this site and our social media. If you don't want to be photographed, tell the photographer or one of us at the event, and email us if you'd like a photo of you taken down.

Every business in the directory is Black-owned, so a listing says publicly that its owners are Black. Under the Privacy Act, information about a person's racial or ethnic origin is sensitive information, and we treat it that way.

We only collect it, and only publish your listing, with your consent. You give it when you apply: the application asks you to agree to this before you can send it. If you'd rather not be listed any more, email us and we'll take your listing down.

Public, on your listing: the business name, tagline, description, suburb and city, category, the month we verified it, website, Instagram, logo and photos, and a public email address if you add one.

Never public: your phone number, ABN or ACN, gender, race or ethnicity, the details in your application (including your name and the email you applied with, unless you add that email to your listing), and anything about your membership or payments.

Public listings can be found and copied by search engines, and by other online services that collect public web pages, including ones that use them to train AI.

We don't sell your personal information, and we don't use it for advertising. We share it only with the services that run the site for us, and only what each needs:

• Supabase: our database, sign-in and file storage.
• Vercel: hosts the website.
• Stripe: takes membership payments.
• Resend: sends our emails (sign-in, account, reminders and the newsletters) and keeps the two newsletter lists.
• Humanitix: sells tickets to our events. When you buy a ticket, Humanitix's own privacy policy applies. On pages that sell tickets, Humanitix's checkout loads from its own site.
• WhatsApp: if you join the members' WhatsApp group, the other members can see your name and number.
• Typeform: applications made before this site had its own application form came to us through Typeform.

Some of these services store or process information outside Australia, including in the United States.

We may also disclose information when the law requires it.

We use these cookies, all to make the site work:

• a sign-in cookie, which keeps you signed in. It lasts up to 400 days and renews while you use the site. Signing out removes it.
• a reminder cookie, which remembers for 30 days that you said "not now" to setting a password.
• an application cookie, which remembers for 30 days that you started the apply form in this browser, so it can offer to pick up where you left off.
• a listing cookie, which remembers which of your listings your dashboard is showing, if you have more than one.
• a theme cookie, which remembers for a year whether you chose the dark or light look for your dashboard.
• a city cookie, which remembers for a year the city you chose, so the site starts on it next time.

Two notes are also kept in your browser's own storage and never sent to us: one that you've signed up for the newsletter, so the sign-up pop-up doesn't ask again, and one that it has already asked you this visit, which goes when you close the tab.

We don't use analytics or advertising cookies. Humanitix's checkout, on pages that sell tickets, may set its own.

We keep your information while you're listed or a member, and after that only as long as we need it for our records or the law requires, for example payment records for tax. If you ask us to delete your information, we will, unless we have to keep it.

When you close your account (from your dashboard's Settings, or by asking us), your listing comes off the directory and any membership stops straight away, and you can no longer sign in. Thirty days later we delete everything of yours for good: your account, listing, photos, applications, messages and newsletter signup. Until then you can change your mind by replying to the email that confirms it, and we'll open your account again. The records of what you paid stay with Stripe for as long as tax law requires, which is five years.

You can change most of your listing yourself from your dashboard, and close your account from its Settings. To see the information we hold about you, correct it, or ask us to delete it, email hello@blkcuratecollective.com. We'll reply within 30 days.

You can unsubscribe from either newsletter at any time, with the unsubscribe link in every issue, or by emailing us.

Only BCC's admins can see applications, messages and newsletter signups. The site uses a secure connection (HTTPS), private pages are never cached or indexed by search engines, and our forms are protected against spam. If there is ever a breach that is likely to cause you serious harm, we'll tell you and the regulator.

If you have a question or a complaint about how we handle your information, email hello@blkcuratecollective.com first and we'll try to put it right. If you're not happy with our answer after 30 days, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au (opens in a new tab) or on 1300 363 992.

If we change this policy, we'll publish the new version here with its date. If a change affects how we use information you've already given us, we'll email you first.