Privacy Policy | Gluten Free Glee

1. Introduction

Gluten Free Glee LTD ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website and mobile application (collectively, "Platform"). By using our Platform, you consent to the collection and use of information as outlined in this policy.

This policy applies to the information we collect through our Platform, and may be updated periodically. We encourage you to review this policy regularly.

2. Information We Collect

We collect various types of personal data in order to provide, improve, and secure our services:

Personal Identification Information: We may collect your name, email address, and any other personal details you provide during account creation or communication with us.
Location Data: Through our analytics partners, we may collect location data for improving the user experience and providing location-based services.
Payment Information: For subscription services, payment details are processed securely by third- party providers. If you subscribe via our website, payments are handled by Stripe. If you subscribe via our mobile app, payments are processed by Apple's App Store or Google Play Billing. These processors handle payment transactions securely and do not share your full payment information with us.
Usage Data: This includes information about your interactions with the Platform, such as pages viewed, features used, and technical data (IP address, device type, etc.) collected by analytics tools like PostHog.
Cookies and Tracking Technologies: We use cookies to enhance your user experience. Essential cookies are necessary for the operation of the Platform. We also use an optional third-party analytics cookie from PostHog to track user behavior and improve our services.

3. How We Collect Your Data

We collect data through:

Direct Interactions: You provide personal data when you register for an account, fill out forms, subscribe to our services, or communicate with us through support channels
Automated Technologies: As you use our Platform, we may automatically collect certain data via cookies and other tracking technologies, such as IP addresses, device information, and browsing patterns.
Third-Party Integrations: We may receive information from third-party partners, such as payment processors, analytics providers, and social media platforms. These third parties are governed by their own privacy policies.

4. Legal Basis for Data Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

Consent: You provide consent when you register for an account, subscribe to services, or opt into marketing communications.
Contractual Necessity: We process data to perform our obligations under our terms and conditions (e.g., to provide access to premium content).
Legitimate Interests: We process certain data, such as usage information, to improve our services and ensure the security of our Platform.
Legal Obligation: We may process your data if required to comply with legal obligations, such as tax laws or data protection regulations.

5. How We Use Your Data

We use the data we collect for various purposes:

Account Management: To create, maintain, and manage your account, including user authentication and customer support.
Service Provision: To provide access to free and premium content and resources, including personalized recommendations based on your interests.
Communication: To send you updates, newsletters, marketing offers, and important information regarding your account and our services (with your consent).
Analytics and Improvement: To analyze usage patterns, improve our Platform's performance, and tailor content to your preferences.
Security: To monitor and ensure the security of our Platform and protect against fraud and abuse.

6. Sharing Your Information

We do not sell, trade, or rent your personal data. However, we may share your information with the following trusted third parties:

Payment Processors: Payment details are processed securely by third-party providers. If you subscribe via our website, payments are handled by Stripe. If you subscribe via our mobile app, payments are processed by Apple's App Store or Google Play Billing. They handle your payment information securely and are responsible for maintaining their own privacy practices.
Service Providers: We use trusted third-party service providers to support our operations. These include services for database hosting, error monitoring, subscription management, and analytics. These providers only process your data to assist us with our business operations.
Legal Obligations: We may disclose your data if required by law, for example, to comply with a legal process, protect our rights, or respond to requests from public authorities.

All third-party services are required to adhere to strict data protection and confidentiality agreements.

7. Retention of Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. The retention period may vary based on the type of data and the purposes for which it is processed:

Account Data: We will retain your account information as long as your account is active. If you request deletion, we will remove your personal data, except when required by law to retain it.
Transactional Data: Payment and transaction information is retained by our payment processors for as long as necessary to process payments and comply with financial regulations.
Analytics Data: Usage data collected via analytics tools is retained for a period of time to help us analyze trends and improve our services.

8. Your Data Protection Rights

As a data subject, you have the following rights under GDPR:

Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccuracies in your data.
Right to Erasure: You can request that we delete your personal data, subject to certain exceptions.
Right to Restrict Processing: You can request that we limit how we use your data under certain conditions.
Right to Object: You can object to the processing of your personal data for direct marketing purposes or other legitimate interests.
Right to Data Portability: You can request that we transfer your data to another service provider in a structured, commonly used, and machine-readable format.

To exercise these rights, please contact us at: hey@gfglee.com

9. Cookies Policy

Cookies are small text files placed on your device to enhance your experience on our Platform. We use cookies for the following purposes:

Essential Cookies: Necessary for the functioning of the Platform, such as for authentication and security.
Analytics Cookies: We use optional cookies (PostHog) to collect data about your usage patterns to improve our services.

You can manage your cookie preferences by adjusting the settings in your web browser. You can choose to accept or reject cookies at any time, though disabling cookies may impact your ability to use certain features of our Platform.

10. Third-Party Links

Our Platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the content, privacy practices, or policies of these third-party sites. We encourage you to review the privacy policies of any external sites you visit.

11. International Data Transfers

We may transfer your personal data to countries outside the UK and the European Economic Area (EEA) in order to fulfill the purposes described in this policy. In such cases, we ensure that appropriate safeguards are in place to protect your data, such as the use of standard contractual clauses or reliance on adequacy decisions.

12. Children's Privacy

Our Platform is not intended for children under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete such information.

13. Email Newsletters and Marketing Communications

If you choose to subscribe to our email newsletter, we will use your email address to send you information about:

New gluten free guides and resources
Updates to our map, tools, or features
News related to gluten free living or eating out safely
Exclusive content or offers for subscribers
Promotions and updates related to our Pro subscription

You will only receive these newsletters if you have opted in, either during account registration or by subscribing via a newsletter signup form.

You can unsubscribe from our newsletter at any time by:

Clicking the "unsubscribe" link at the bottom of any marketing email
Managing your email preferences in your account settings
Contacting us directly at: hey@gfglee.com

We use a third-party provider to manage and send our email communications that processes your email data securely and in line with UK GDPR regulations.

We do not share your email address with any third parties for their own marketing purposes.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a notice on our Platform. The updated Privacy Policy will be posted on this page, with the effective date reflected at the top.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your data protection rights, please contact us at: hey@gfglee.com