Privacy Notice: House Two membership applications
Last updated: October 2026
This notice explains what personal information House Two collects when you apply for membership through our online application, why we collect it, who we share it with, how long we keep it, and the rights you have over it.
We've tried to write it plainly. If anything is unclear, email us at hello@housetwo.club and we'll explain.
1. Who we are
House Two is a London members' club with no building of its own. We run events in different places around London.
The organisation responsible for your personal information (the "controller") is:
House Two Club Limited Registered in England and Wales, company number 17119543 Registered office: 124–128 City Road, London, England, EC1V 2NX Email: hello@housetwo.club
We are registered with the Information Commissioner's Office (ICO). Registration number: ZC195188.
We have not appointed a Data Protection Officer, because a business of our size doesn't need one. Questions about privacy go to hello@housetwo.club.
In this notice, "House Two", "we", "us" and "our" mean House Two Club Limited. "You" means anyone who starts or submits an application.
2. How the application works, in brief
- You sign in with your email address. We send you a single-use sign-in link, so there's no password.
- You tell us a little about yourself and what you're hoping to find at House Two.
- You answer a question left by a previous applicant, and leave a question of your own for someone who comes after you.
- You save a payment card with our payment provider, Stripe, for future membership payments, and pay a £10 reservation fee when you submit your application (see section 3.6).
- Your application is considered by the House Two Committee: our founders and a small number of our most involved ambassadors. The Committee meets every two months, and we'll email you after the meeting that considers your application.
- Membership is expected to begin in 2027. Your card is charged for membership only once membership begins, as set out in the Membership Terms.
- Applicants receive a free House Two hat, collected in person at one of our events.
3. What we collect
3.1 Information you give us
| What | Details | Required? |
|---|---|---|
| Name | First name and last name | Yes |
| Email address | Used to sign you in and to contact you | Yes |
| Phone number | Checked to make sure it's a real number, and stored in international format | Yes |
| Home address | Your UK home address | Yes |
| Instagram handle | Your Instagram username, or "n/a" if you don't have one | Yes |
| Age confirmation | That you are at least 20, and when you confirmed it (part of the agreement you tick before paying) | Yes |
| How you heard about us | One option from a list (for example "A friend", "Instagram", "An AI assistant") | Yes |
| Who introduced you | The name of the friend, member, ambassador or founder who introduced you, if you choose to tell us | Optional |
| Other referral detail | A free-text note if you chose "Something else entirely" | Optional |
| What you're hoping to find | Up to two options from a list, and an optional free-text note | At least one option |
| Your answer | Your answer (up to 100 words) to the question you chose | Yes |
| Your question | A question (up to 160 characters) you leave for a future applicant | Yes |
| Invitation preferences | Whether you'd rather not be invited (one choice covering email, text, WhatsApp and post) | See section 5 |
| Payment authorisation | That you authorised us to save your card and charge membership as described, with the date and time, the version of the terms you agreed to, and the price, currency and billing interval shown to you | Yes |
The free-text boxes (your answer, your question, and the "something else" notes) are yours to fill however you like. Please don't include sensitive details such as health information, religious beliefs or sexual orientation, or information about other people, unless you're comfortable with us holding it. We don't ask for these and don't need them.
3.2 Information created as you use the application
- Account and sign-in records: a unique account ID, your email address, and when you signed in.
- Application progress: which step you're on, the furthest step you've completed, when you started, when you were last active, and when you submitted.
- Application status: for example draft, submitted, waitlisted, accepted, declined, cancelled before charge, payment failed, or active member.
- The questions offered to you: the four questions you were shown, the question you chose, its wording at the time, and the first name of the person who left it.
- Technical information recorded automatically by our hosting and database providers when your device connects to the application, such as your IP address, browser type and the time of the request. These providers keep these logs for the limited periods set out in their own policies.
3.3 Information from our payment provider
Your card details are entered directly into a secure form provided by Stripe. They go straight to Stripe; House Two never sees or stores your full card number or security code.
Stripe tells us, and we store:
- the card brand (for example Visa) and the last four digits, so you can recognise which card is saved;
- Stripe's reference numbers for you as a customer, for your saved card and for the card-saving process;
- whether the card was saved successfully, and when.
3.4 Information from other people
- The person who left your question. We show you their first name after you've answered.
- Future applicants. A future applicant who answers your question and becomes a member will have their first name and answer passed on to you.
- Whoever introduced you. An ambassador may separately tell us that they introduced you, so that we can credit them. We keep a record of this in Airtable, including your name, so we can match it to your application.
3.5 Information we don't collect
We don't collect your date of birth, home address, photographs or identity documents through the application. We don't use the application to collect any of the special categories of personal information (such as health, ethnicity, religion or sexual orientation).
3.6 Reservation fee
When you submit your application, you pay a £10 reservation fee. Stripe processes the payment; we receive confirmation that it was paid, the amount, the date, and Stripe's reference for it. We never see your full card number. If your membership starts, the £10 is credited against your first membership payment. If we can't offer you a place, or you withdraw, any refund is made through Stripe as set out in our Membership Terms.
4. Why we use your information, and our lawful basis
Data protection law requires us to have a lawful basis for each way we use your personal information. The bases we rely on are:
- Contract: we need the information to take the steps you've asked us to take before entering a membership contract with you, or to perform that contract.
- Legitimate interests: we use the information in ways you'd reasonably expect, for a genuine business purpose, where this doesn't override your rights and interests. You can ask us for more detail about how we've balanced these.
- Legal obligation: the law requires us to keep the information.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Creating your account and signing you in by email link | Name, email, account records | Contract (steps at your request before membership) |
| Saving your progress so you can return | Everything you've entered so far, progress records | Contract |
| Considering your application at the Committee | Your application, including your answer, your question and what you're hoping to find | Legitimate interests (choosing members who suit the club and keeping the founding membership small); also steps at your request before a contract |
| Letting you know after the Committee meets, and contacting you about your application, membership, events and your hat | Name, email, phone | Contract; legitimate interests |
| Sending your welcome pack and other membership materials if you become a member | Name, home address | Contract |
| Saving your card, and charging membership once it begins | Name, email, Stripe references, card brand and last four digits, payment authorisation record | Contract |
| Taking your £10 reservation fee, and any refund | Name, email, payment records | Contract |
| Keeping a record of what you authorised (terms version, price, interval, time) | Payment authorisation record | Legitimate interests (being able to show what you agreed to); legal obligation where payment rules require it |
| Showing your question to future applicants, with your first name | Your question, first name | Legitimate interests (running the question exchange, which is part of how applying works; see section 6) |
| Passing your first name and answer to the person who left your question, if you become a member | First name, answer | Legitimate interests (starting a first conversation between members; see section 6) |
| Reviewing questions before they circulate (we may lightly edit for clarity, or choose not to circulate a question) | Your question | Legitimate interests (keeping the question exchange kind and appropriate) |
| Thanking and crediting the person who introduced you, including paying ambassadors for introductions | Referral source, the name you give us | Legitimate interests (running our ambassador programme fairly) |
| Understanding how people find us and what they're looking for, so we can plan events and membership | Referral source, what you're hoping to find (we look at these in summary) | Legitimate interests |
| Sending you invitations and news by email | Name, email | Legitimate interests (the soft opt-in; see section 5) |
| Sending you invitations and news by text message or WhatsApp | Name, phone | Legitimate interests (the soft opt-in; see section 5) |
| Sending you invitations and House Two materials by post | Name, home address | Legitimate interests (see section 5) |
| Recognising you, and finding and inviting you on Instagram | Instagram handle | Legitimate interests |
| Keeping the application secure, preventing fraud and misuse, and fixing problems | Account records, technical information, payment references | Legitimate interests |
| Keeping financial and tax records | Payment records, name | Legal obligation |
| Dealing with complaints, disputes and legal claims | Any relevant information | Legitimate interests |
Is any decision made automatically? No. The questions offered to you are picked at random from those we've approved, but every decision about your application is made by people on the Committee. We don't use automated decision-making or profiling that has legal or similarly significant effects on you.
What if you don't give us the required information? We can't consider an application without it.
5. Invitations and news
When you apply, you're signing up to be part of House Two, so we'll invite you to our events, including some that are invite-only, and send you news about House Two by email, text message and WhatsApp. If you become a member, we may also post you invitations and House Two materials.
We do this because you gave us your details while applying for membership, and we only tell you about House Two's own events and membership. For email, text and WhatsApp, the law allows this without asking for separate consent (it's known as the "soft opt-in"), as long as you can say no easily. For everything in this section, our lawful basis is legitimate interests.
- At the end of your application, you can tick a box to say you'd rather not be invited. That one choice covers email, text, WhatsApp and post.
- Saying no has no effect on your application.
- You can change your mind at any time: use the unsubscribe link in any email, reply STOP to a text, tell us on WhatsApp, or email hello@housetwo.club. Every message we send tells you how.
- When you opt out, we keep your contact details on a "do not contact" list, so that we don't contact you by mistake.
Messages about your application and membership (for example, letting you know after the Committee meets, the notice before your first membership payment, or your welcome pack) are not marketing. We'll send these whatever your preferences.
We send invitations and news by email and WhatsApp through Brevo, and by text message. Your details are kept on the same contact list as people who have bought tickets to our events, so we may sometimes send applicants and members different messages.
6. The question exchange
The question exchange is part of what makes applying to House Two a little different, so here is exactly how it works.
The question you answer. We show you four questions left by previous applicants and approved by us. You choose one and answer it. After you've answered, we show you the first name of the person who left it.
Passing on your answer. If you become a member, we pass your first name and your answer to the person who left the question, so the two of you have something to talk about when you meet. You're told this before you apply. If the person who left the question isn't a member, we don't pass it on.
The question you leave. Once you submit your application, the question you leave is stored for possible use with future applicants, together with your first name. You're told this on the page where you write it. Before it circulates, we review it. We may lightly edit it for clarity, or choose not to use it if it's intrusive, discriminatory or better suited to a job interview. If a future applicant answers it and becomes a member, we'll pass their first name and answer on to you.
Our lawful basis for this is legitimate interests: the question exchange is part of how applying to House Two works, and it only ever shares your first name, your question and your answer.
Changing your mind. You can ask us at any time to stop circulating your question, or to delete it. That doesn't affect anything already shown or shared before you asked.
If you ask us to delete your account, we remove your name from your question. We may keep the question itself in the bank without your name.
7. Who we share your information with
We don't sell your personal information.
7.1 Within House Two
Your application is seen by the House Two Committee: our founders and a small number of our most involved ambassadors, who help decide who joins. They see only what they need to consider applications, and are bound by confidentiality: every Committee member has signed a confidentiality agreement. They see your application answers, but not your phone number, home address or payment details.
7.2 Other applicants and members
Only in the ways described in section 6:
- your question, with your first name, shown to future applicants;
- your first name and answer, passed to the person who left your question, if you become a member.
7.3 Service providers (processors)
We use the following providers to run the application. They act on our instructions, under contracts that require them to keep your information secure and use it only to provide their service to us.
| Provider | What they do for us | Where |
|---|---|---|
| Supabase, via Lovable Cloud | Database and sign-in system that stores your application and account | Supabase, Inc. is based in the USA; your data may be stored in the UK, EU or USA |
| Lovable | Builds and hosts the application; sends sign-in emails from noreply@housetwo.club through its email service | Lovable is based in Sweden (EU) and uses service providers that may be in the USA |
| Cloudflare | Runs the application on its global network and protects it from attack | Global network; Cloudflare, Inc. is based in the USA |
We also use these tools to run House Two, and some of your information may be held in them:
| Provider | What they do for us | Where |
|---|---|---|
| Google Workspace | Our email (hello@housetwo.club) and documents | Google LLC is based in the USA |
| Airtable | Our records of members, ambassadors and introductions | Airtable, Inc. is based in the USA |
| Brevo | Sends our invitations and news by email and WhatsApp | Brevo is based in France (EU) |
| WhatsApp (Meta) | Delivers WhatsApp messages sent through Brevo | Meta is based in Ireland (EU) and the USA |
| Ticket Tailor | Sells tickets to our events | Ticket Tailor is based in the UK |
| Notion | Our internal notes and planning | Notion Labs, Inc. is based in the USA |
| n8n | Moves information between the tools above automatically | n8n is based in Germany (EU) |
| Fillout and Wix | Our earlier sign-up form, and our main website | Fillout, Inc. and Wix.com Ltd. are based in the USA and Israel |
7.4 Stripe
Stripe processes card details and payments for us. We send Stripe your name, your email address and our internal reference numbers for your account and application. You enter your card details directly into Stripe's secure form.
Stripe acts as our processor when it handles payments for us, and as a separate controller for some purposes of its own, such as preventing fraud and meeting its legal and regulatory duties. When it acts for its own purposes, Stripe's own privacy notice applies (stripe.com/privacy).
7.5 Others
We may share your information if the law requires it, to protect our rights or the safety of others, or with professional advisers (such as accountants and lawyers) who are bound by confidentiality. If House Two were ever sold or reorganised, your information could pass to the new owner, who would have to treat it in line with this notice.
8. International transfers
Some of our providers are based in, or may access information from, the United States or other countries outside the UK. Where personal information is transferred outside the UK, we make sure it's protected by one of the safeguards UK law recognises, such as:
- the country being covered by UK "adequacy regulations" (including the UK Extension to the EU–US Data Privacy Framework, for US companies certified under it); or
- the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, approved for use in the UK.
We rely on the data processing terms each provider offers as standard, which include one of these safeguards where your information leaves the UK.
You can ask us for more information about these safeguards by emailing hello@housetwo.club.
9. How long we keep your information
We keep personal information only as long as we need it.
| Information | How long we keep it |
|---|---|
| Applications started but never submitted | 12 months after your last activity, then deleted |
| Declined applications | 12 months after we tell you, so we can handle questions and recognise a reapplication, then deleted |
| Waitlisted applications | While you remain on the waitlist; then 12 months after you leave it or we close it |
| Applications withdrawn, or cancelled before any charge | 12 months after withdrawal or cancellation, then deleted |
| Accepted applicants and members | For as long as you're a member. After membership ends: your core membership and payment-authorisation records for 6 years (the time in which a legal claim can be brought); your application answers and questions deleted after 12 months |
| Your saved card | Removed from Stripe when your application is declined or withdrawn, or your membership ends. Stripe keeps its own records as its privacy notice describes |
| Payment and financial records | 6 years after the end of the financial year they relate to, to meet tax and accounting rules |
| Your question in the question bank | While it's in circulation, or until you ask us to remove it. After that, we may keep the question without your name |
| Answers passed on to another member | Once passed on, the other person holds them. We keep our record of it for the life of your membership |
| Home address and Instagram handle | As for the rest of your application (see the rows above) |
| Marketing preferences | Until you withdraw. After that, your email address or phone number on our "do not contact" list for as long as we send marketing |
| Technical and security logs | For the limited periods set by our hosting and database providers |
How we delete. Once a year, we go through inactive records (applications never submitted, declined or withdrawn applications, and memberships that have ended) and delete anything past the periods above. We don't delete information about current members in this review.
10. How we keep your information secure
- You sign in with a single-use link sent to your email, so there's no password to steal or reuse.
- Your information is stored in a database that only allows you to see and change your own application. Only our two founders can open the full database and our Stripe account, using password-protected accounts.
- Connections to the application are encrypted.
- Card details go straight to Stripe, which is certified to the Payment Card Industry Data Security Standard (PCI DSS). We never see or store your full card number.
- Once you submit your application, your name and phone number are locked, so they can't be changed without asking us.
No system is perfectly secure. If a breach of your personal information is likely to put you at high risk, we'll tell you without undue delay.
11. Cookies and storage on your device
The application does not use analytics, advertising or tracking cookies. It uses only storage that's strictly necessary to make it work:
| What | Purpose | How long |
|---|---|---|
| Sign-in session (stored in your browser's local storage) | Keeps you signed in so you can save progress and return | Until you sign out or clear your browser storage |
| Pre-sign-in details (local storage) | Holds your first name, last name, email and current step until you've confirmed your email, so you don't have to retype them | Cleared automatically once you've signed in |
| Stripe (cookies and similar, on the card screen) | Set by Stripe to process your card securely and prevent fraud | As set by Stripe; see stripe.com/cookies-policy |
| Cloudflare (security cookie, if set) | Protects the application against bots and attacks | Usually 30 minutes |
Because these are strictly necessary, we don't ask for your consent to use them. You can clear them through your browser settings, but you'll be signed out and may need to request a new sign-in link.
Our main website, housetwo.club, is hosted on Wix and has its own cookie notice.
12. Minimum age
You must be at least 20 to apply. We ask you to confirm this; we don't ask for your date of birth. If we learn that someone under 20 has applied, we will delete their application.
13. Your rights
You have the right to:
- Access: ask for a copy of the personal information we hold about you.
- Rectification: ask us to correct information that's wrong or incomplete. Before you submit, you can edit most of your application yourself.
- Erasure: ask us to delete your information, where there's no good reason for us to keep it.
- Restriction: ask us to pause using your information, for example while we check whether it's accurate.
- Objection: object to our using your information on the basis of legitimate interests. You can object to direct marketing at any time, and we'll always stop.
- Portability: ask for the information you gave us, in a common machine-readable format, where we use it on the basis of contract.
How to exercise your rights. Email hello@housetwo.club from the address you applied with, saying what you'd like us to do. If we need to confirm your identity, we'll ask. There's normally no charge. We'll respond within one month, or tell you within that month if we need longer (up to two further months for complex requests).
Some rights have limits. For example, we may need to keep payment records to meet tax law even if you ask us to delete them. If we can't do what you've asked, we'll explain why.
14. Complaints
If you're unhappy with how we've handled your personal information, please tell us first at hello@housetwo.club, and we'll try to put it right. We'll acknowledge your complaint within 30 days, look into it, and tell you what we've found and what we're doing about it.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
15. Changes to this notice
We'll update this notice when the application or the way we use your information changes. The date at the top shows when it was last updated. If we make a significant change that affects you, we'll tell you by email before it takes effect.
16. Contact us
House Two Club Limited 124–128 City Road, London, England, EC1V 2NX hello@housetwo.club
