This page summarises how we comply with the UK GDPR and EU GDPR and how you can exercise your rights. It complements our Privacy Policy.
1. Data controller
The operator of this app is the data controller for the personal data you provide. Contact: vjmedialtd@gmail.com.
2. Lawful bases
- Contract — to provide the features you sign up for.
- Legitimate interests — to keep the Service secure, measure performance, and improve features.
- Consent — for optional features such as location lookup and marketing emails. You can withdraw consent at any time.
- Legal obligation — to comply with tax, accounting, and security laws.
3. Your rights
- Access a copy of your personal data.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Restrict or object to certain processing.
- Data portability — receive your data in a machine-readable format.
- Withdraw consent at any time without affecting prior lawful processing.
- Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ICO).
4. How to make a request
Email vjmedialtd@gmail.com from the address associated with your account. We respond within one month, as required by GDPR. We may extend this by up to two further months for complex requests and will tell you if we do.
5. Security
- All traffic is encrypted in transit via HTTPS/TLS.
- Data at rest is encrypted by our hosting and database providers.
- Authentication uses industry-standard hashing and short-lived session tokens.
- Access to production data is limited to authorised personnel and logged.
6. Sub-processors
We use vetted sub-processors for hosting, database, authentication, analytics, AI features, and mapping. Each is bound by a Data Processing Agreement and, where relevant, by Standard Contractual Clauses for international transfers.
7. Data breach notification
In the unlikely event of a personal data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay.
8. Retention & deletion
We retain personal data only as long as needed for the purposes set out in the Privacy Policy. When you delete your account, your data is removed or anonymised within 30 days, except where law requires longer retention (for example accounting records).
9. Children
The Service is not intended for children under 13 (16 in the EEA). If you believe a child has provided us with personal data, contact us so we can delete it.