← Back to PinkWatch.org
Data Controller
PinkWatch.org
Email: privacy@pinkwatch.org
This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
1.1 Account Information
When you register for a SafeGuard account, we collect:
- Full name
- Email address
- Password (stored in encrypted/hashed form only)
- Postcode (optional, provided voluntarily)
1.2 Location Reports
When you submit a property location report, we collect:
- Property address and postcode
- Map coordinates (latitude and longitude)
- Property type classification
- Any description or notes you voluntarily provide
- Estimated occupancy numbers (optional)
1.3 Technical Data
We automatically collect limited technical data when you use our service:
- IP address
- Browser type and version
- Pages visited and time of access
- Device type
1.4 Data We Do Not Collect
We do not collect or process any special category data as defined under Article 9 of the UK GDPR, including data concerning racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life, or sexual orientation.
2. Lawful Basis for Processing
Under UK GDPR Article 6, we process your personal data on the following lawful bases:
- Consent (Article 6(1)(a)): You provide explicit consent when creating an account and submitting location reports.
- Contract (Article 6(1)(b)): Processing is necessary to provide you with the SafeGuard service as described in our Terms of Service.
- Legitimate Interests (Article 6(1)(f)): We have a legitimate interest in maintaining the security of our platform and preventing misuse. We have conducted a Legitimate Interest Assessment to ensure this does not override your rights.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Display property location reports on the community map
- Authenticate your identity when you log in
- Communicate with you about your account or reports
- Maintain the security and integrity of the platform
- Comply with legal obligations
We will never sell, rent, or trade your personal data to third parties for marketing purposes.
4. Data Sharing
We may share your data only in the following circumstances:
- Public display: Property location reports (address, type, description) are displayed publicly on the map. Your full name is shown as the reporter. Your email address is never publicly displayed.
- Legal requirements: We may disclose information if required by law, regulation, court order, or governmental request under UK law.
- Service providers: We use trusted third-party hosting providers located in the United Kingdom or EEA to store data. These providers are bound by data processing agreements compliant with UK GDPR.
5. Data Retention
We retain your personal data as follows:
- Account data: Retained for as long as your account is active. Upon account deletion, your personal data will be erased within 30 days.
- Location reports: Retained indefinitely for the public benefit of community safety, unless you request removal.
- Technical logs: Retained for a maximum of 12 months, then automatically deleted.
6. Your Rights Under UK GDPR
Under the UK GDPR and Data Protection Act 2018, you have the following rights:
- Right of Access (Article 15): Request a copy of the personal data we hold about you.
- Right to Rectification (Article 16): Request correction of inaccurate personal data.
- Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
- Right to Restriction (Article 18): Request restriction of processing of your personal data.
- Right to Data Portability (Article 20): Request your data in a structured, machine-readable format.
- Right to Object (Article 21): Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at privacy@pinkwatch.org. We will respond within one calendar month as required by UK GDPR Article 12(3).
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Passwords are hashed using bcrypt with a cost factor of 12 and are never stored in plain text
- All data transmission is encrypted using TLS/SSL (HTTPS)
- Database access is restricted and secured
- Regular security reviews are conducted
8. Cookies
SafeGuard uses only essential functional storage (localStorage) to maintain your login session. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. OpenStreetMap tiles are loaded from third-party servers and are subject to the OpenStreetMap Foundation Privacy Policy.
9. International Transfers
Your data is stored on servers located within the United Kingdom. We do not transfer personal data outside the UK or EEA unless adequate safeguards are in place as required by UK GDPR Chapter V.
10. Children's Privacy
SafeGuard is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly. The age threshold of 16 is in accordance with Section 9 of the Data Protection Act 2018.
11. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Material changes will be communicated by email to registered users where practicable.
13. Contact Us
For any privacy-related enquiries or to exercise your data rights, please contact:
Data Protection Contact
PinkWatch.org
Email: privacy@pinkwatch.org
Please include "SafeGuard Privacy" in the subject line.