Privacy Policy
Your privacy is important to us. This policy explains how we handle your personal data.
Privacy at a Glance
- We collect only what's necessary to provide our service
- We never sell your personal data to third parties
- You can access, export, or delete your data at any time
- We use encryption to protect your information
- You control what information is visible on your profile
1. Introduction
LocalAunty Ltd ("LocalAunty," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Service").
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.
2. Data Controller
LocalAunty Ltd is the data controller responsible for your personal data. If you have questions about this policy or your data, contact us at:
3. Information We Collect
3.1 Information You Provide
- Account Information: Name, email address, password, date of birth, gender, location
- Profile Information: Photos, biography, preferences, religion, interests
- Communications: Messages exchanged with other users
- Verification Data: Photos or documents for identity verification
- Payment Information: Processed securely by Stripe (we do not store card details)
- Support Communications: When you contact customer support
3.2 Information Collected Automatically
- Device Information: Device type, operating system, browser type
- Usage Data: Pages visited, features used, time spent on the Service
- IP Address: For security, fraud prevention, and approximate location
- Cookies: As described in our Cookie Policy
3.3 Special Category Data
Some information you provide (such as religion, ethnicity, or sexual orientation) may be considered "special category" data under GDPR. By providing this information, you explicitly consent to its processing for the purpose of matching you with compatible users.
4. Legal Basis for Processing
We process your data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing the Service | Contract performance |
| Processing payments | Contract performance |
| Matching users | Contract performance / Consent |
| Safety and fraud prevention | Legitimate interests |
| Service improvement | Legitimate interests |
| Marketing communications | Consent |
| Legal compliance | Legal obligation |
5. How We Use Your Information
- To create and manage your account
- To match you with other users based on preferences
- To facilitate communication between users
- To process payments and provide Premium features
- To verify your identity and prevent fraud
- To provide customer support
- To send service-related notifications
- To improve and personalize the Service
- To enforce our Terms of Service
- To comply with legal obligations
6. Information Sharing
We do NOT sell your personal data to third parties.
We may share your information with:
- Other Users: Your public profile information is visible to other users
- Service Providers: Companies that help us operate (payment processing, hosting, email)
- Legal Authorities: When required by law, court order, or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
7. Data Retention
We retain your data for as long as:
- Your account is active
- Necessary to provide you with our services
- Required by law (e.g., financial records for 7 years)
- Needed to resolve disputes or enforce our agreements
When you delete your account, we delete or anonymize your data within 30 days, except where we are legally required to retain it.
8. Your Rights (GDPR)
Under UK GDPR, you have the following rights:
Right of Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data ("right to be forgotten")
Right to Restrict Processing
Limit how we use your data
Right to Data Portability
Receive your data in a machine-readable format
Right to Object
Object to processing based on legitimate interests
Right to Withdraw Consent
Withdraw consent at any time (where processing is based on consent)
To exercise these rights, email privacy@localaunty.com or use the settings in your account. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure password hashing (bcrypt)
- Regular security audits and testing
- Access controls and employee training
- Secure data centers with physical security
While we use commercially reasonable measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
10. International Data Transfers
Your data may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO, to protect your data when transferred internationally.
11. Children's Privacy
LocalAunty is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we discover that we have collected information from a minor, we will delete it immediately. If you believe a minor has provided us with their data, please contact us.
12. Third-Party Services
We use the following third-party services:
- Stripe: Payment processing (Privacy Policy)
- Amazon Web Services: Cloud hosting
- Cloudflare: Security and performance
These services have their own privacy policies governing their use of your data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on the Service. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
14. Contact Us
For privacy-related questions, data requests, or complaints:
LocalAunty Ltd - Data Protection
Email: privacy@localaunty.com
We aim to respond to all requests within 30 days.