This Privacy Policy explains what personal information Thrift Map collects, how we use it, and the rights you have over your data.
1. Introduction
This Privacy Policy explains how Thrift Map ("we", "us", or "our") collects, uses, and protects your personal information when you use the Thrift Map app and related services (the "Service"). It forms part of our Terms & Conditions.
We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We collect the following categories of information:
- Account information: when you sign in with Google, Apple, or email and password, we receive details such as your name, email address, and a unique account identifier.
- User-submitted content: place requests, reviews, photos, favourites, visited markers, and flags you create.
- Location information: with your permission, your device location is used to show nearby thrift locations and provide directions. You can disable location access in your device settings.
- Usage and device data: app interactions, performance metrics, device type, operating system, and diagnostic data, collected via Firebase.
- Advertising identifiers: on mobile, advertising identifiers may be processed by Google AdMob to serve ads.
3. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the Service;
- Authenticate you and manage your account;
- Display thrift locations and provide directions;
- Review and publish user-submitted places;
- Improve and monitor the performance of the Service;
- Display advertising on the mobile app;
- Communicate with you about your account or important updates;
- Protect against fraud, abuse, and violations of our Terms.
4. Legal Bases for Processing
Under the UK GDPR, we rely on the following legal bases:
- Performance of a contract: to provide the Service you have requested;
- Consent: for optional features such as location access and personalised advertising, where required;
- Legitimate interests: to improve, secure, and promote the Service, where these interests are not overridden by your rights;
- Legal obligation: where we must process data to comply with the law.
6. Visibility of Submitted Content
Places, reviews, and other content you submit may be published within the Service and visible to other users once approved. Please avoid including personal information you do not want to be public in your submissions.
7. Data Retention
We keep your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it for legal, security, or fraud-prevention purposes.
8. Your Rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate data;
- Request deletion of your data ("right to be forgotten");
- Object to or restrict certain processing;
- Request a copy of your data in a portable format;
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at jamescollard2005@gmail.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. Data Security
We use appropriate technical and organisational measures to protect your personal information, including secure authentication and encrypted connections. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.
11. International Transfers
Some of our service providers may process data outside the United Kingdom. Where this happens, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses) to ensure your data remains protected in accordance with England and Wales data protection law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at jamescollard2005@gmail.com.