Privacy Policy
How We Handle Your Data
Account identification and communication.
Legal basis: UK GDPR Art. 17
phone
Optional two-factor authentication and account recovery.
Legal basis: UK GDPR Art. 17
password
Credential verification (stored as a one-way hash).
Legal basis: UK GDPR Art. 5(1)(e)
sessions
Session management and security.
Legal basis: UK GDPR Art. 5(1)(e)
audit_log
Security auditing of authentication events.
Legal basis: Limitation Act 1980 s.5; UK GDPR Art. 17(3)(e)
Your Rights
Right to Access
You have the right to obtain a copy of the personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete data.
Right to Erasure
You can request deletion of your data, subject to legal retention obligations.
Right to Portability
You can request your data in a structured, machine-readable format.
Right to Restriction
You can request that we restrict processing of your data.
Right to Object
You can object to processing based on legitimate interests.