ReVolution CRP (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it.
This policy applies to all users of the ReVolution CRP platform, accessible at revolutioncrp.com.
We act as the data controller for personal data processed through this platform. If you have any questions about this policy or how we handle your data, please contact us at info@revolutioncrp.com.
1. What Data We Collect
We collect the following categories of personal data:
Account data
- Email address
- First and last name
- Password (stored as a secure hash — we never see your password in plain text)
Profile data
- Job title, employer, and years of experience
- Country or region
- A short bio (optional)
- Membership tier (free or premium)
Platform activity data
- Wellbeing check-in responses and mood scores
- Win/Woe journal submissions
- Role rating submissions (anonymised before publication)
- Community forum posts and comments
- Blog article submissions
- Resource interactions
Payment data
- Subscription status and billing period
- Payment card details are processed directly by Stripe — we do not store card numbers
Technical data
- Log-in timestamps and session information
- General browser and device type (for platform compatibility)
2. How We Use Your Data
We use your personal data for the following purposes:
- To create and manage your account
- To provide access to the platform and its features
- To process your subscription and payments
- To send you platform-related emails (e.g. email verification, password resets, account notifications)
- To send community updates or broadcast messages (you may opt out at any time)
- To moderate community content and enforce our Community Guidelines
- To improve the platform based on usage patterns
- To comply with our legal obligations
3. Legal Basis for Processing
Under UK GDPR and the Data Protection Act 2018, we rely on the following legal bases:
- Contract — processing necessary to provide the services you have signed up for
- Legitimate interests — improving the platform, preventing abuse, and maintaining security
- Consent — where you have specifically opted in (e.g. featured Win/Woe submissions)
- Legal obligation — where we are required to retain or disclose data by law
4. Data Sharing
We do not sell your personal data. We share data only with trusted third-party service providers who process it on our behalf, under data processing agreements:
- Supabase — our database and authentication provider. Data is stored on EU-region infrastructure.
- Stripe — payment processing. Stripe handles all card data under PCI DSS compliance. See stripe.com/gb/privacy.
- Mailgun — transactional and broadcast email delivery (EU region).
We may also disclose data if required by law, court order, or to protect the rights and safety of our users.
5. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.
Anonymised or aggregated data (such as role ratings after anonymisation) may be retained indefinitely as it can no longer identify you.
6. Your Rights
Under UK GDPR, you have the following rights:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — request that we delete your personal data (“right to be forgotten”)
- Restriction — ask us to restrict how we process your data in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, please contact us at info@revolutioncrp.com. We will respond within 30 days.
If you are unhappy with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
7. Cookies
We use only essential cookies required for the platform to function — specifically, authentication session cookies managed by Supabase. We do not use advertising, tracking, or analytics cookies.
8. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), hashed password storage, and role-based access controls.
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. Children
ReVolution CRP is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us and we will remove the account promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify members of any significant changes via the platform or by email. The date at the top of this page reflects when the policy was last updated.
11. Contact Us
For any privacy-related questions or to exercise your data rights, please contact us at: