Privacy policy

Last updated: [date]. Data controller: [legal entity name, address, contact email].

What we collect

• Account: email address, password (stored hashed by our auth provider), name and username.
• Profile (optional): country, region, qualifications, sectors, availability and a short bio.
• Content: job posts, kit listings (including photos you upload) and comments you write.
• Notifications: a record of when someone tags you or replies to you, shown only to you.
• Technical: a login session cookie. We don't use advertising or tracking cookies.

Why (lawful basis)

• To run your account and show your posts — contract.
• To keep the community safe and handle reports — legitimate interests.
• Notifications you switch on — consent, which you can withdraw at any time.

Who can see what

Your name, username, and comments are public. Your email is never shown. Job contact details are shown only to logged-in members. Anonymous rate submissions are never linked to your profile in public views, and averages are only shown once there are at least 5 submissions in a category.

Where it's stored

Data is stored with Supabase (database and authentication) and served via Vercel. [Confirm hosting regions — e.g. EU/UK — and list sub-processors.]

Your rights

You can access and correct your data from your account page, and delete your account at any time from the same page — this removes your profile and anonymises your comments. You can also request a copy of your data, object to processing, or complain to the ICO (ico.org.uk). Contact: [email].

Retention

We keep your data while your account is open. Deleted accounts are removed immediately; backups roll off within [N] days.