Privacy Policy

Introduction

Busy Bush ("we", "our", or "us") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, and protect your information when you use our parish community platform. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Busy Bush is the data controller for your personal data. You can contact us about data protection matters at: [Contact information to be added]

Information We Collect

Account Information

• Name and email address (via Google Sign-In)
• Profile picture (optional)
• Account creation and last activity timestamps

Content You Create

• Club information and descriptions
• Blog posts and announcements
• Event details and RSVPs
• Messages and discussions
• Comments and interactions

Location Data

• Address information you provide for clubs and events
• Parish and postcode data
• Coordinates for location-based features (with your consent)

Technical Information

• IP address and browser information
• Usage analytics and performance data
• Error logs and diagnostic information

How We Use Your Information

Service Provision

• Creating and managing your account
• Enabling you to create and join clubs
• Facilitating community discussions and events
• Sending notifications about club activities

Communication

• Sending important service updates
• Responding to your inquiries and support requests
• Email digests of club activities (with your consent)

Safety and Security

• Protecting against fraud and abuse
• Monitoring for suspicious activity
• Maintaining audit logs for security purposes

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To provide the services you've requested
• Consent: For optional features like location sharing and marketing communications
• Legitimate Interests: For security, analytics, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing

We do not sell or rent your personal data. We may share your information in these limited circumstances:

• Service Providers: With trusted partners who help us operate the service (e.g., hosting, analytics)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In the event of a merger or acquisition (with notice)
• Public Content: Club and event information you mark as public

Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit and at rest
• Secure authentication and access controls
• Regular security audits and monitoring
• Staff training on data protection
• Incident response procedures

Data Retention

We retain your data for as long as necessary to provide our services:

• Account Data: Until you delete your account
• Content: While your account is active or as needed for legitimate purposes
• Audit Logs: Up to 7 years for security and compliance
• Analytics: In aggregated, anonymized form

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Access and Portability

• Request a copy of your personal data
• Export your data in a structured format

Correction and Deletion

• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing

Consent and Objection

• Withdraw consent for optional processing
• Object to processing based on legitimate interests
• Opt out of marketing communications

To exercise these rights, visit your privacy settings or contact us directly.

Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and security
• Functional Cookies: To remember your preferences
• Analytics Cookies: To understand how you use our service (with consent)

You can manage your cookie preferences in your browser settings or through our cookie preferences.

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us immediately.

International Transfers

Your data is primarily processed within the UK and EEA. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through the service. Your continued use after notification constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or how we handle your data:

• Email: [privacy@busybush.local]
• Data Protection Officer: [dpo@busybush.local]
• ICO Registration: [To be added when registered]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.