Privacy Policy

1. Scope

This Privacy Policy explains how The 9th Edition collects, uses, stores, and protects personal data when you browse our website, subscribe to newsletters, submit project information, or interact with account features. This policy is written for a design and architecture publishing platform with editorial, lead, and subscriber workflows.

2. Information We Collect

We collect data in the following categories:

• Identity and contact details (name, email address) provided by you.
• Submission content (project details, descriptions, uploaded media links, enquiry messages).
• Account and authentication data (session metadata, login tokens, role assignments).
• Technical and security logs (IP-derived rate-limit keys, request metadata, error logs).
• Communication preferences (newsletter subscription status and source).

3. How We Use Data

• To provide and improve editorial publishing, search, and account functionality.
• To process project enquiries and editorial submissions.
• To send newsletters where you have subscribed or requested communications.
• To prevent abuse, fraud, and unauthorized access through security controls.
• To maintain legal records, audit actions, and comply with applicable law.

4. Legal Bases

Depending on your location, our processing relies on one or more of: consent, contract necessity, legitimate interests (such as service security and editorial operations), and legal obligations.

5. Data Sharing

We do not sell personal data. We may share limited data with vetted service providers that help us run authentication, hosting, storage, email operations, and analytics/security tooling, subject to confidentiality and data protection obligations.

Typical processors include Vercel (site hosting and request logs), InsForge (database, authentication, and object storage for uploads), optional Upstash (Redis used for distributed rate limiting), and Sentry (error monitoring and performance diagnostics). Subprocessors may change; material updates will be reflected here or via on-site notice where required.

6. Retention

We retain personal data only as long as necessary for the purpose collected, legal compliance, dispute resolution, and security. Retention windows vary by data class (for example, subscriber records, enquiry records, and admin audit logs).

7. Your Rights

Subject to applicable law, you may request access, correction, deletion, portability, restriction, or objection to certain processing. You may also withdraw consent where processing is consent-based.

8. Security

We implement technical and organizational controls designed to protect confidentiality, integrity, and availability of data, including authentication controls, role-restricted admin access, and rate-limiting for sensitive public endpoints.

9. Cross-Border Processing

Our service providers may process data in multiple jurisdictions. Where required, we use appropriate safeguards for international transfers.

10. Contact

For privacy requests, contact: support@theninthedition.com. We may need to verify your identity before processing requests.