GDPR · template — seek legal advice
Privacy Policy
Version dated 9 April 2026. Complete controller details and processing records before going live.
1. Data controller
The controller of your personal data under the UK GDPR / EU GDPR is the entity operating GroupRadar (the “Controller”). Identification and contact details: Legal notice (to be completed) and email: contact@your-domain.com.
2. Categories of data
Depending on how you use the Service, we may process:
- Account and authentication data (e.g. email, username, password hash on the server);
- Content you submit (e.g. listing descriptions, invite URLs, hashtags);
- Technical logs (e.g. IP address, request time, browser type) if collected;
- Data from cookies and similar technologies — see our Cookie Policy.
3. Purposes and legal bases
| Purpose | Legal basis (UK GDPR / EU GDPR Art. 6) |
|---|---|
| Providing the Service and maintaining your account | Performance of a contract (Art. 6(1)(b)) |
| Legal obligations (e.g. responding to lawful requests) | Legal obligation (Art. 6(1)(c)) |
| Analytics or marketing (if introduced) | Consent (Art. 6(1)(a)) where required |
| Security, fraud prevention, service integrity | Legitimate interests (Art. 6(1)(f)) |
4. Retention
We keep data for as long as your account is active and as required by law or for the establishment, exercise, or defence of legal claims. After that, data is deleted or anonymised unless longer retention is mandatory.
5. Recipients and transfers
We may use processors (e.g. hosting, email delivery, IT support) under appropriate agreements. If data is transferred outside the UK/EEA, we rely on safeguards such as the UK IDTA / EU Standard Contractual Clauses where required.
6. Your rights
You may have the right to:
- Access, rectification, erasure, or restriction of processing;
- Data portability where applicable;
- Object to processing based on legitimate interests;
- Withdraw consent at any time, without affecting lawfulness of processing before withdrawal;
- Lodge a complaint with a supervisory authority (e.g. ICO in the UK, or your local EU authority).
Contact the Controller using the details above to exercise your rights.
7. Providing data
Providing data required for registration or listings is voluntary in principle but necessary for those features to work.
8. Changes
This Policy may be updated. We will notify you of material changes via the Service or the email address you provided.