Privacy Policy

UK GDPR Compliant | Version 1.4 | Updated: 18 Apr 2026

1. Data Controller

RingersNeeded is the data controller for your personal information. If you have questions about how your data is handled or wish to exercise your rights, please contact the System Administrator at [INSERT ADMIN EMAIL].

2. Data We Process

A. Identity & Contact Data

Includes: Full Name, Email Address, Mobile/Telephone Number, Home Tower affiliation.

Lawful Basis: Performance of a Contract (to facilitate wedding bookings) and Consent (voluntarily provided in your profile).

B. Security & Audit Data

Includes: IP Addresses, Browser Metadata, and "Contact Reveal" timestamps.

Lawful Basis: Legitimate Interest. We process this data to ensure network security and prevent the unauthorized harvesting or scraping of member contact details.

3. International Data Transfers

Our servers are located in the United States. To ensure your data remains protected when leaving the UK, we utilize the following legal safeguards:

A. UK-US Data Bridge: We prioritize hosting providers certified under the UK Extension to the Data Privacy Framework.

B. Standard Contractual Clauses (SCCs): Where certification is not applicable, we rely on the UK ICO-approved Standard Contractual Clauses to ensure your data receives the same protection as it would within the UK.

4. Data Visibility & Security

We employ Privacy by Design. Your sensitive Contact Data (Email/Phone) is hidden by default. It is only disclosed to other registered members who are confirmed for the same ringing event.

Each "Reveal" action is logged alongside the viewer’s identity and IP address to provide a complete security audit trail and prevent platform abuse.

5. Cookies

We use only Strictly Necessary Cookies. These are essential for maintaining your login session and preventing Cross-Site Request Forgery (CSRF). We do not use tracking, advertising, or third-party analytical cookies.

6. Your Rights

You have the right to access, move, or delete your personal data at any time.

If you believe your data rights have been infringed, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK (ico.org.uk).