Privacy Policy
What has changed
Corrects the legal identity of the data controller, adds Irish company number 608327, clarifies the Platform Provider and community-operator roles, and documents the web and in-app account deletion routes. The 18+ policy is unchanged.
<h2>Our Commitment to Your Privacy</h2>
<p>Timebank Global is committed to protecting your privacy and ensuring your personal data is handled responsibly in accordance with the <strong>General Data Protection Regulation (GDPR)</strong> and the Irish <strong>Data Protection Acts 1988-2018</strong>.</p>
<p>This policy explains what information we collect, why we collect it, how we use it, and your rights regarding your personal data. We believe in <strong>transparency</strong> and <strong>user control</strong>.</p>
<h2>Data Controller</h2>
<p>The data controller responsible for your personal data is:</p>
<ul>
<li><strong>Legal Name:</strong> HOUR TIMEBANK COMPANY LIMITED BY GUARANTEE</li>
<li><strong>Common name and trading name:</strong> hOUR Timebank CLG; trading as Timebank Ireland</li>
<li><strong>Company Registration:</strong> Irish company number 608327</li>
<li><strong>Charity Registration:</strong> RCN 20162023 (Charities Regulator)</li>
<li><strong>Registered Address:</strong> 21 Páirc Goodman, Skibbereen, Co. Cork, P81 AK26, Ireland</li>
<li><strong>Data Protection Contact:</strong> <a href="mailto:[email protected]" target="_blank" rel="noopener noreferrer nofollow">[email protected]</a></li>
</ul>
<p>For the Timebank Global Community, HOUR TIMEBANK COMPANY LIMITED BY GUARANTEE is both the Platform Provider and the community operator. If you join an independently operated Tenant community, that Tenant Operator is a separate data controller for the membership and community data it determines and processes. We remain responsible for processing carried out in our role as Platform Provider.</p>
<h2>Information We Collect</h2>
<p>We collect only the information necessary to provide our timebanking services:</p>
<table>
<thead>
<tr><th>Data Type</th><th>Purpose</th></tr>
</thead>
<tbody>
<tr><td><strong>Account Information</strong></td><td>Name, email address, password (encrypted) — Required to create and manage your account</td></tr>
<tr><td><strong>Profile Details</strong></td><td>Bio, skills, location, photo — Helps connect you with community members</td></tr>
<tr><td><strong>Contact Information</strong></td><td>Phone number (optional), address — For arranging exchanges if you choose to share</td></tr>
<tr><td><strong>Activity Data</strong></td><td>Exchanges, messages, time credits — Essential for platform functionality</td></tr>
<tr><td><strong>Device Information</strong></td><td>Browser type, IP address, device type — Used for security and troubleshooting</td></tr>
</tbody>
</table>
<h2>Legal Basis for Processing</h2>
<p>Under GDPR, we process your personal data based on the following legal grounds:</p>
<ul>
<li><strong>Contract Performance:</strong> Processing necessary to provide our timebanking services to you</li>
<li><strong>Consent:</strong> Where you have given explicit consent (e.g., marketing communications)</li>
<li><strong>Legitimate Interests:</strong> Improving our services, preventing fraud, and ensuring platform security</li>
<li><strong>Legal Obligation:</strong> Complying with Irish and EU legal requirements</li>
</ul>
<h2>How We Use Your Data</h2>
<p>Your data is used exclusively for the following purposes:</p>
<ul>
<li><strong>Service Delivery:</strong> Facilitating time exchanges and community connections</li>
<li><strong>Communication:</strong> Sending important updates, notifications, and messages from other members</li>
<li><strong>Security:</strong> Protecting your account and preventing fraud or abuse</li>
<li><strong>Improvement:</strong> Analysing usage patterns to enhance platform features (anonymised)</li>
<li><strong>Legal Compliance:</strong> Meeting regulatory requirements under Irish and EU law</li>
<li><strong>Charitable Reporting:</strong> Aggregated, anonymised statistics for charity reporting purposes</li>
</ul>
<p><strong>We do not sell your personal data to third parties.</strong> Your information is never shared with advertisers or data brokers.</p>
<h2>Data Sharing</h2>
<p>We may share your data with:</p>
<ul>
<li><strong>Other Members:</strong> Your profile information is visible to verified members to facilitate exchanges</li>
<li><strong>Partner Organisations:</strong> If you join a specific community, that organisation's coordinators can see your membership details</li>
<li><strong>Service Providers:</strong> Trusted providers who help us operate the platform (hosting, email delivery) under strict data processing agreements</li>
<li><strong>Legal Authorities:</strong> When required by law or to protect our legal rights</li>
</ul>
<p>All service providers are bound by GDPR-compliant data processing agreements.</p>
<h2>How We Protect Your Data</h2>
<p>We implement robust security measures:</p>
<ul>
<li><strong>Encryption:</strong> All data is encrypted in transit (TLS/HTTPS) and at rest</li>
<li><strong>Secure Passwords:</strong> Passwords are hashed using industry-standard algorithms</li>
<li><strong>Access Controls:</strong> Strict internal policies limit who can access your data</li>
<li><strong>Regular Audits:</strong> We conduct security reviews and update our practices accordingly</li>
<li><strong>EU-Based Hosting:</strong> Your data is stored within the European Union</li>
</ul>
<h2>Your GDPR Rights</h2>
<p>Under GDPR, you have the following rights:</p>
<ul>
<li><strong>Right of Access:</strong> Request a copy of all personal data we hold about you</li>
<li><strong>Right to Rectification:</strong> Correct any inaccurate or incomplete information</li>
<li><strong>Right to Erasure:</strong> Request deletion of your data ("right to be forgotten")</li>
<li><strong>Right to Restrict:</strong> Limit how we process your data in certain circumstances</li>
<li><strong>Right to Portability:</strong> Receive your data in a structured, machine-readable format</li>
<li><strong>Right to Object:</strong> Object to processing based on legitimate interests</li>
</ul>
<p>To exercise any of these rights, contact us at <a href="mailto:[email protected]" target="_blank" rel="noopener noreferrer nofollow">[email protected]</a>. We will respond within one month. You may also request deletion using our <a href="https://timebank.global/account-deletion" target="_blank" rel="noopener noreferrer">account deletion page</a> or the account deletion control in the app.</p>
<h2>Cookies & Tracking</h2>
<p>We use cookies to enhance your experience:</p>
<ul>
<li><strong>Essential Cookies:</strong> Required for login, security, and basic functionality</li>
<li><strong>Preference Cookies:</strong> Remember your settings like theme preference</li>
<li><strong>Analytics Cookies:</strong> Help us understand how people use the platform (anonymised)</li>
</ul>
<p>We do <strong>not</strong> use advertising cookies or tracking pixels.</p>
<h2>Data Retention</h2>
<ul>
<li><strong>Active Accounts:</strong> Data is kept while your account remains active</li>
<li><strong>Inactive Accounts:</strong> Accounts inactive for 24 months may be anonymised after notice</li>
<li><strong>Deleted Accounts:</strong> Personal data is removed within 30 days of deletion</li>
<li><strong>Transaction Records:</strong> May be retained for up to 7 years for legal/charity reporting</li>
</ul>
<h2>International Data Transfers</h2>
<p>Your data is primarily stored within the European Union. If we need to transfer data outside the EU/EEA, we ensure appropriate safeguards (SCCs, adequacy decisions).</p>
<h2>Children's Privacy</h2>
<p>Our platform is intended for users aged <strong>18 years and older</strong>. We do not knowingly collect data from anyone under 18.</p>
<h2>Complaints</h2>
<p>You may lodge a complaint with the <strong>Data Protection Commission</strong>:</p>
<ul>
<li><strong>Address:</strong> 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland</li>
<li><strong>Website:</strong> <a href="https://www.dataprotection.ie" target="_blank" rel="noopener noreferrer nofollow">www.dataprotection.ie</a></li>
</ul>
<h2>Changes to This Policy</h2>
<p>We may update this Privacy Policy to reflect changes in our practices. We will notify you via email or platform notification for significant changes.</p>
<h2>Contact Us</h2>
<p>For privacy questions: <a href="mailto:[email protected]" target="_blank" rel="noopener noreferrer nofollow">[email protected]</a></p>