Privacy Policy
Scope
This policy explains how [[LEGAL_ENTITY]] handles personal data when you use Ascendancy Strains. It covers this service only, not sites we link to.
What we collect
Information you give us: your email address, display name, account settings, age confirmation, and anything you choose to contribute such as reviews, saved items or business information. Information collected automatically: IP address, device and browser type, pages viewed, referring page, and timestamps. We use this to operate, secure and improve the service. Information from third parties: where a business listing is compiled from public sources or supplied by a data provider, and where you sign in through another provider. We do not ask for, and ask that you do not send us, health information or other special-category data.
Why we use it, and our lawful basis
To provide the service and your account — performance of our contract with you. To keep the service secure, prevent abuse, and meet legal obligations — our legitimate interests and compliance with law. To improve the service and understand how it is used — our legitimate interests, using aggregated or de-identified data wherever we can. To send service messages you cannot opt out of, such as claim decisions and security notices — performance of our contract. Optional messages are sent only with your consent, which you can withdraw at any time.
Cookies and similar technologies
We use cookies and local storage that are strictly necessary to sign you in, keep your session and remember your preferences. Where we use anything beyond that, we ask for your consent first and you can change your choice at any time.
Sharing
We do not sell personal data, and we do not share it for cross-context behavioural advertising. We share it with service providers who process it on our instructions under written contract — hosting, email delivery, error monitoring and analytics. We share it when the law requires, to enforce our terms, or to protect rights and safety. If the business is transferred, data may transfer with it, and we will tell you first.
How long we keep it
Account data is kept while your account is open and for a limited period afterwards to handle disputes and meet legal obligations, then deleted or anonymised. Security and access logs are kept on a short rolling window. Evidence submitted with a business claim is kept only as long as needed to decide the claim and to show the decision was properly made.
Your rights
Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. You may also withdraw consent where we relied on it. If you are in California, you may request disclosure of the categories and specific pieces of personal information we collected, request deletion or correction, and you have the right not to be discriminated against for exercising those rights. Make a request from your account settings or by emailing [[PRIVACY_EMAIL]]. We will respond within the period the applicable law allows. You may also complain to your local data protection authority.
Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls and restricted storage for claim evidence. No service can be completely secure, and we cannot guarantee absolute security.
International transfers
We may process data in countries other than yours. Where we do, we use an approved transfer mechanism such as standard contractual clauses, together with additional safeguards where they are needed.
Children
The service is not directed to children and we do not knowingly collect their personal data. If you believe a child has given us data, contact [[PRIVACY_EMAIL]] and we will delete it.
Changes
We will post any change here with a new effective date, and give notice before a material change takes effect.
Contact
[[LEGAL_ENTITY]], [[POSTAL_ADDRESS]]. Privacy enquiries: [[PRIVACY_EMAIL]].
Version History
v1 · current · draft, not in effect
