1. Who We Are

This website is operated by JustReminisce, trading under Leinnovations Ltd, a company registered in the United Kingdom.

• Website: https://justreminisce.com
• Data controller: Leinnovations Ltd (referred to as “JustReminisce”, “we”, “us”, “our”)
• Contact email: support@justreminisce.com

This Privacy Policy explains how we collect, use, and protect your personal data when you use JustReminisce.

This policy should be read together with our Terms & Conditions, which explain how content is shared, moderated, retained, and removed on the Platform.

This policy is intended as a general guide and does not replace legal advice.

---

2. What Data We Collect

We collect and process different types of data depending on how you use the Platform.

2.1 Data You Provide Directly

Account details

• Name, username, email address, password (hashed), profile photo, and profile information.

Profile and group information

• Groups you join or create (e.g. schools, workplaces, clubs).
• Biographical or descriptive information you choose to add.

Memories and content

• Text, photos, videos, and other media you upload as memories.
• “Test my Memory” entries, including names, nicknames, notes, and any other details you choose to record.

Messages and interactions

• Direct messages, group posts, comments, reactions, invitations, and replies.

Forms and support

• Information you submit via contact forms, feedback forms, or support requests.

Payment / subscription information (if applicable)

• Order details such as products purchased, billing name, email address, and billing address.
• Payment card details are processed by our payment providers (e.g. Stripe, PayPal) and are not stored by us.

---

2.2 Data Collected Automatically

When you use the Platform, we may automatically collect:

Technical information

• IP address, browser type and version, device type, operating system.

Usage information

• Pages viewed, links clicked, time spent on pages, referring URLs.

Log and security data

• Error logs, login attempts, abuse detection signals, and security events.

---

2.3 Comments

When visitors leave comments:

• We collect the data shown in the comments form.
• We collect the visitor’s IP address and browser user agent string to help with spam detection.
• An anonymised hash of your email address may be sent to the Gravatar service. After approval, your profile image may appear publicly with your comment.

---

3. How We Use Your Data

We use your data to:

• Provide, operate, and maintain the JustReminisce Platform.
• Create and manage user accounts.
• Store and display memories, profiles, and group content as you choose.
• Enable messaging, notifications, and interactions between members.
• Process subscriptions, purchases, and billing.
• Send transactional emails (e.g. verification, password resets, notifications).
• Send optional marketing or product updates where you have given consent.
• Protect the Platform from spam, abuse, fraud, and security threats.
• Improve platform performance, reliability, and features.
• Comply with legal obligations and respond to lawful requests.

Where reasonably necessary, we may access, review, or process content (including messages and group interactions) for moderation, safety, system integrity, prevention of abuse, or legal compliance.

We do not analyse personal content for psychological profiling, mental health assessment, or emotional inference. User content is processed only to provide platform features, ensure safety, and improve functionality.

---

4. Legal Basis for Processing (UK GDPR / EU GDPR)

We process personal data under one or more of the following lawful bases:

• Contract – to provide the services you sign up for.
• Consent – for optional activities such as marketing emails or non-essential cookies.
• Legitimate interests – to operate, secure, and improve the Platform in a way that does not override your rights.
• Legal obligation – to meet accounting, tax, or regulatory requirements.

---

5. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Keep you logged in.
• Remember preferences.
• Protect against spam and abuse.
• Ensure the site functions correctly.

Some cookies may be set by third-party services (e.g. analytics, CDN, embedded content).
Where required, we request consent for non-essential cookies.

You can control cookies through your browser settings, though some features may not function correctly if cookies are disabled.

---

6. Media and Location Data

If you upload images or videos, please avoid including embedded location data (EXIF GPS) if you do not want that information to be visible.

Visitors may be able to download media and extract location data if it has been included.

---

7. Embedded Content from Other Websites

Pages may include embedded content (e.g. videos, images, posts, maps).

Embedded content behaves as if you visited the external site directly. These sites may:

• Collect data about you
• Use cookies
• Track your interaction

We do not control these third-party websites.

---

8. Service Providers and Where Your Data Goes

We use trusted third parties to operate the Platform.

8.1 Cloud Storage – Wasabi

Used to store uploaded media securely.

8.2 Content Delivery Network – Bunny.net

Used to deliver images and static content efficiently.

8.3 Email Service – Brevo

Used for account emails and optional updates (if you opt in).

8.4 Other Providers

• Hosting and infrastructure providers
• Payment processors
• Analytics and security tools
• Spam detection services

We share only the minimum data necessary and require providers to comply with data protection laws.

---

9. How Long We Keep Your Data

We retain personal data only as long as necessary:

• Accounts – while active.
• Memories and content – until deleted by you or your account is removed.
• Comments – retained indefinitely.
• Transaction records – as required by law.
• Logs and security data – for limited periods.

---

10. Your Rights

Depending on your location, you may have rights to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Request data portability

Please note:
The right to deletion is not absolute. Where you request deletion of personal data, we will assess the request under applicable data protection law. We may remove, restrict, anonymise, or retain limited information where legally necessary, such as for security, legal claims, audit records, compliance obligations, or abuse prevention. We cannot control screenshots or copies made outside the Platform, but we will take reasonable steps within our own systems.

To exercise your rights, contact:
support@justreminisce.com

---

11. Children’s Privacy

JustReminisce is not intended for children under 16 without appropriate parental or guardian consent.

If we become aware that personal data has been collected without valid consent, we will take steps to delete it.

---

12. How We Protect Your Data

We use appropriate technical and organisational measures, including:

• Secure servers and access controls
• HTTPS encryption
• Regular updates and security patches
• Role-based access for administrators

No system is completely secure. You are responsible for keeping your login details safe.

---

13. When We May Share Data

We may share personal data:

• With service providers described above
• Where required by law or legal process
• To protect rights, safety, or security
• As part of a merger, acquisition, or sale of our business (with notice where required)

We do not sell personal data.

---

14. International Transfers

Some service providers operate outside the UK or EU.
Where data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses.

---

15. Changes to This Policy

We may update this Privacy Policy from time to time.
The “Last updated” date will reflect changes, and significant updates may be notified via email or on-site notice.

---

16. Contact Us

JustReminisce / Leinnovations Ltd
Email: support@justreminisce.com