Legal Information

Privacy Policy

Last Updated: June 5, 2025

1. Information We Collect

1.1 Personal Information

We may collect the following personal information:

• Account Information: Name, email address, username, password
• Profile Information: Profile pictures, bio, preferences
• Contact Information: Phone number, mailing address (if provided)
• Payment Information: Billing address, payment method details (processed securely by third parties)
• Communication Data: Messages, support tickets, feedback

1.2 Technical Information

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, features used, time spent
• Cookies and Tracking: See our Cookie Policy for details
• Location Data: General location based on IP address

2. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To provide, maintain, and improve our Services
• Account Management: To create and manage your account
• Communication: To send service updates, newsletters, and support
• Payment Processing: To process transactions and billing
• Security: To protect against fraud and unauthorized access
• Legal Compliance: To comply with legal obligations
• Marketing: To send promotional materials (with consent)

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract: To fulfill our contractual obligations
• Legitimate Interests: For business operations and security
• Consent: For marketing communications and cookies
• Legal Obligation: To comply with applicable laws

4. Information Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist our operations
• Payment Processors: Stripe, PayPal, and other payment services
• Cloud Providers: AWS, Google Cloud, or similar hosting services
• Analytics Providers: Google Analytics and similar services
• Legal Authorities: When required by law or to protect our rights

5. International Data Transfers

Your data may be transferred to and processed in countries outside the UK/EEA. We ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK/EU authorities
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Other approved transfer mechanisms

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law:

• Account Data: Until account deletion plus 30 days
• Payment Data: 7 years for tax and accounting purposes
• Communication Data: 3 years for support purposes
• Marketing Data: Until consent is withdrawn

7. Your Rights (GDPR)

Under UK GDPR and Data Protection Act 2018, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request transfer of your data
• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for consent-based processing

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security assessments
• Employee training and confidentiality agreements
• Incident response procedures

9. Children's Privacy

Our Services are not intended for children under 18. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will delete the information immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or through our Services at least 30 days before the changes take effect.

11. Contact Us