Summary for transparency (UK GDPR / Data Protection Act). Replace or extend this text with your organisation’s formal privacy policy and lawful basis.
Identify the data controller (your name or organisation) and contact details for data protection queries.
Providing the Pump Trumps service, securing accounts, and (if you opt in) marketing. Document your lawful bases (e.g. contract, consent, legitimate interests) in your final policy.
Define how long you keep each category of data and when you delete or anonymise it.
You may request access to or deletion of your personal data. In the app, use Profiles to download an export or request erasure, subject to any legal exceptions.
List subprocessors (e.g. hosting, database provider) and, where relevant, international transfers and safeguards.