Privacy Policy

Note for the site operator: this is a starting template, not legal advice. List what your site actually collects and the services you actually use, fill in the parts in square brackets, have a lawyer check it against the laws that apply to you, and then delete this note.

Who is responsible for your data

UNA Test (the "site") is run by [the name of the person or organisation that runs the site] ("we", "us"), its operator. We decide what personal data the site collects, why and for how long, and we are responsible for it. Some laws call this role the data controller.

The site is built with UNA, open-source community software made by UNA, Inc. UNA, Inc. does not run this site. Collecting, using and storing personal data here is entirely at our discretion and under our control, not UNA, Inc.'s. Send questions and requests about your data to us.

What we collect

Account details: your email address and password, and a phone number if you add one. We do not store your password in readable form.
Profile and content: your profile details and pictures, and what you post, comment, react to, follow or join. Who can see each item depends on the privacy settings you choose.
Messages: private messages are stored on the site's servers so they can be delivered.
Usage and device data: the pages you open and the actions you take, with the time, your IP address, browser, device type and language. Our servers also keep logs of requests and errors.
Cookies and local storage: a cookie keeps you signed in, and others remember settings such as language and theme. If you use our mobile app and allow notifications, we keep a device token to send them. [List any analytics, advertising or other third-party services you add, and the cookies they set.]
Payments: if you buy something on the site, a payment provider handles the payment. We get a confirmation, not your full card details. [Delete this item if the site has nothing paid.]
From other people: other members may mention you, tag you or invite you by email.

Why we use it

to run your account and show your content to the audience you chose;
to send you emails and notifications about your account and activity, which you can turn off in your settings, except for essential ones such as password resets;
to send you news about the site, only if you agreed to receive it;
to keep the site safe: to stop spam, abuse and fraud and to handle reports;
to understand how the site is used and improve it;
to meet our legal obligations.

Where the law requires a legal basis for using personal data, we rely on our agreement with you (the Terms of Service), our legitimate interest in running a safe and useful site, your consent (which you can withdraw at any time), and our legal obligations. [Check which of these apply to you under your laws.]

Who can see it

Other members and visitors see your profile and posts as your privacy settings allow.
Service providers that help us run the site, such as hosting, storage, email delivery and payment providers, process data for us and only to provide their service. [List them.]
Authorities get data when the law requires it, or when it is needed to protect someone's rights or safety.
A new operator gets the data if the site is transferred to someone else, and this policy continues to apply.

We do not sell your personal data. [If you share data for advertising or other purposes, describe that here instead.]

Our servers and service providers may be in countries other than yours. [Say where they are and how data sent there is protected.]

How long we keep it

We keep your account data and content for as long as your account exists. When you delete your account, we delete your profile and delete or anonymise your content within [period], apart from what the law requires us to keep. Copies in backups are deleted within [period]. Server logs are kept for [period].

Your rights

Access and copy: you can ask us what data we hold about you and for a copy of it.
Correction: you can correct most of your data yourself in your profile and account settings, or ask us to.
Deletion: you can delete your content, or your whole account in your account settings.
Objection and consent: you can object to some uses of your data and withdraw any consent you gave, for example by unsubscribing from emails.

To use these rights, contact us. We may need to confirm your identity first. Depending on where you live, you may also be able to complain to your data protection authority.

Security

We take reasonable steps to protect your data, such as limiting who can access it. No system is completely secure, so we cannot guarantee it. Use a strong password that you do not use anywhere else. If a breach affects your data, we will tell you where the law requires us to.

Children

The site is not meant for children under [minimum age]. We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy. The current version is always on this page, with the date it was last changed. If a change is significant, we will tell members before it takes effect, for example on the site or by email.

Contact

For questions or requests about your data, contact us at [an email address, a postal address or a link to your contact page]. [Add your data protection officer or representative, if you have one.]

Last updated: [date].