Privacy Policy

← Back to PinkWatch.org

1. Information We Collect

1.1 Account Information

When you register for a SafeGuard account, we collect:

• Full name
• Email address
• Password (stored in encrypted/hashed form only)
• Postcode (optional, provided voluntarily)

1.2 Location Reports

When you submit a property location report, we collect:

• Property address and postcode
• Map coordinates (latitude and longitude)
• Property type classification
• Any description or notes you voluntarily provide
• Estimated occupancy numbers (optional)

1.3 Technical Data

We automatically collect limited technical data when you use our service:

• IP address
• Browser type and version
• Pages visited and time of access
• Device type

1.4 Data We Do Not Collect

We do not collect or process any special category data as defined under Article 9 of the UK GDPR, including data concerning racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life, or sexual orientation.

2. Lawful Basis for Processing

Under UK GDPR Article 6, we process your personal data on the following lawful bases:

• Consent (Article 6(1)(a)): You provide explicit consent when creating an account and submitting location reports.
• Contract (Article 6(1)(b)): Processing is necessary to provide you with the SafeGuard service as described in our Terms of Service.
• Legitimate Interests (Article 6(1)(f)): We have a legitimate interest in maintaining the security of our platform and preventing misuse. We have conducted a Legitimate Interest Assessment to ensure this does not override your rights.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display property location reports on the community map
• Authenticate your identity when you log in
• Communicate with you about your account or reports
• Maintain the security and integrity of the platform
• Comply with legal obligations

We will never sell, rent, or trade your personal data to third parties for marketing purposes.

4. Data Sharing

We may share your data only in the following circumstances:

• Public display: Property location reports (address, type, description) are displayed publicly on the map. Your full name is shown as the reporter. Your email address is never publicly displayed.
• Legal requirements: We may disclose information if required by law, regulation, court order, or governmental request under UK law.
• Service providers: We use trusted third-party hosting providers located in the United Kingdom or EEA to store data. These providers are bound by data processing agreements compliant with UK GDPR.

5. Data Retention

We retain your personal data as follows:

• Account data: Retained for as long as your account is active. Upon account deletion, your personal data will be erased within 30 days.
• Location reports: Retained indefinitely for the public benefit of community safety, unless you request removal.
• Technical logs: Retained for a maximum of 12 months, then automatically deleted.

6. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

• Right of Access (Article 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Article 16): Request correction of inaccurate personal data.
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
• Right to Restriction (Article 18): Request restriction of processing of your personal data.
• Right to Data Portability (Article 20): Request your data in a structured, machine-readable format.
• Right to Object (Article 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@pinkwatch.org. We will respond within one calendar month as required by UK GDPR Article 12(3).

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Passwords are hashed using bcrypt with a cost factor of 12 and are never stored in plain text
• All data transmission is encrypted using TLS/SSL (HTTPS)
• Database access is restricted and secured
• Regular security reviews are conducted

8. Cookies

SafeGuard uses only essential functional storage (localStorage) to maintain your login session. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. OpenStreetMap tiles are loaded from third-party servers and are subject to the OpenStreetMap Foundation Privacy Policy.

9. International Transfers

Your data is stored on servers located within the United Kingdom. We do not transfer personal data outside the UK or EEA unless adequate safeguards are in place as required by UK GDPR Chapter V.

10. Children's Privacy

SafeGuard is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly. The age threshold of 16 is in accordance with Section 9 of the Data Protection Act 2018.

11. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Material changes will be communicated by email to registered users where practicable.

13. Contact Us

For any privacy-related enquiries or to exercise your data rights, please contact: