Privacy Policy

raccolta(“we”, “us”, “our”) is a platform for discovering, organising and joining sport and social events. This Privacy Policy explains how we collect, use, share and protect your personal data, and the rights you have over it.

The data controller responsible for your personal data is Raccolta Ltd, [REGISTERED ADDRESS], [COUNTRY]. For any privacy question, or to exercise your rights, contact us at [privacy@example.com]. If we have appointed an EU/UK representative, you may also reach them at [EU REPRESENTATIVE — if appointed].

We collect the following categories of personal data:

• Account data — email address, password (stored only as a salted hash), and, if you sign in with Google, your Google account identifier and the email and name Google shares with us.
• Profile data — display name, optional first and last name, date of birth, profile photo, bio, phone number, city, country and preferred languages.
• Content you create — events you organise, photos you upload, event participation, saved searches, and chat messages.
• Location data — coarse location (city/country) and any address or coordinates you enter for an event or search. We do not track your precise device location in the background.
• Technical & usage data — IP address, browser type, device information, and log data generated when you use the service, including timestamps recorded for security and consent records.
• Consent records — a log of the consents you give (Terms, Privacy Policy, marketing), including the time, version and IP address, kept to demonstrate compliance.

Under the EU/UK General Data Protection Regulation (GDPR) we rely on the following legal bases:

• To provide the service (create your account, show and run events, deliver chat and notifications) — performance of a contract.
• To keep the service safe (authentication, fraud and abuse prevention, content moderation) — our legitimate interests and compliance with legal obligations.
• To send transactional email (email verification, security and account notices) — performance of a contract.
• To send marketing email and to set non-essential cookies (including advertising) — your consent, which you can withdraw at any time.
• To comply with the law and to establish, exercise or defend legal claims — legal obligation and legitimate interests.

We do not sell your personal data. We share it only with service providers (processors) who help us run raccolta, under contract and only as needed:

• Cloud hosting and database providers that store the platform data.
• Object storage providers that host uploaded photos and avatars.
• Email delivery providers used to send verification and notices.
• Google, for “Sign in with Google” and, where you have consented, Google advertising.
• Mapping and geocoding providers used to display maps and resolve addresses you enter.
• Content-moderation providers used to detect unsafe text and images.

We may also disclose data where required by law, to enforce our terms, or to protect the rights and safety of users and the public.

Some of our providers may process data outside your country, including outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision. You can request a copy of the relevant safeguards by contacting us.

We keep your personal data for as long as your account is active. When you delete your account we anonymise your profile and remove your personal data, retaining only what we are legally required to keep, or what is necessary to preserve shared content (for example, events other people joined or messages in a group chat are kept in anonymised form). Backups are purged on a rolling schedule.

Depending on where you live, you have some or all of the following rights. Under the GDPR you may:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”);
• restrict or object to certain processing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting prior processing;
• lodge a complaint with your local data protection authority.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it, to delete it, to correct it, and to opt out of any “sale” or “sharing” of personal information. We do not sell your personal information, and we will not discriminate against you for exercising your rights.

You can access, export or delete your data directly from your Privacy & data settings, or contact us at [privacy@example.com] and we will respond within the timeframe required by law.

raccolta is not intended for children. You must be at least 16 years old to create an account. If we learn that we have collected personal data from someone under that age, we will delete it.

We protect your data with measures including encryption in transit, hashed passwords, access controls and session-revocation on password change and logout. No system is perfectly secure, but we work to keep your data safe and will notify you and the relevant authorities of a data breach where required by law.

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are only set with your consent.

We may update this Privacy Policy from time to time. When we make material changes we will update the “last updated” date and, where appropriate, notify you in the app or by email.

Questions about this policy or your data? Email [privacy@example.com] or write to Raccolta Ltd, [REGISTERED ADDRESS], [COUNTRY].