FREEHOLD

Legal

Privacy Policy

Draft — not yet reviewed by a lawyer. This is a starting point written to be edited, not a finished policy. Every [BRACKETED] value must be filled in and the whole document checked against the law where you operate before launch.

Last updated [DATE]. Controller: [LEGAL ENTITY], [ADDRESS]. Data protection contact: [CONTACT EMAIL].

What we collect

  • Account — your email address, held in AWS Cognito. We never see your password.
  • Content — comments you post, and, if you sell here, your vendor application and listings.
  • Moderation — a score and reason for each comment, plus a running count of published and declined comments used to decide how much scrutiny your next one gets.
  • Technical — request logs including your IP address, kept for 30 days, used to spot abuse and debug faults.

We do not run advertising trackers and we do not sell data.

Why we are allowed to

Performing our contract with you (running your account and the marketplace), and our legitimate interest in keeping the site free of spam, fraud and infringing material. Where we rely on legitimate interest you can object; see below.

Processors

Amazon Web Services hosts everything, in [REGION]. Comment text is sent to AWS Comprehend for toxicity classification[, and borderline comments to AWS Bedrock for a second opinion]. These are processors acting on our instructions, not independent recipients.

How long we keep things

  • Account and content: until you delete your account.
  • Comments held for review and not actioned: deleted after [7] days.
  • Request logs: 30 days.

Deleting your account

The account page has a delete button. It removes your account, your library and your vendor record.

Comments are handled differently, on purpose. The text of comments you have posted stays on the site with your name replaced by [deleted] and the link to your account removed. We do this because deleting the text would break conversations other people are relying on, and the identifying information is the name, not the sentence. If you need a specific comment removed as well, write to us and we will do it.

Your rights

Depending on where you live you may have the right to access, correct, export or erase your data, to object to processing, or to complain to a regulator — in the UK the ICO, in the EU your national authority. Write to [CONTACT EMAIL] and we will answer within one month.

Cookies

We do not set advertising or analytics cookies. Signing in stores tokens in your browser's session storage, which is cleared when you close the tab, and is strictly necessary for the site to work.

Children

Freehold is not intended for anyone under [16/13]. If you believe a child has an account, tell us and we will remove it.