Project NEXUS Accessible

Compare versions

Changes between version 1.0 and version 2.0.

• Added: +
• Removed: −

− Our Commitment to Your Privacy Timebank Global is committed to protecting your privacy and ensuring your personal data is handled responsibly in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988-2018.

+ <h2>Our Commitment to Your Privacy</h2><p>Timebank Global is committed to protecting your privacy and ensuring your personal data is handled responsibly in accordance with the <strong>General Data Protection Regulation (GDPR)</strong> and the Irish <strong>Data Protection Acts 1988-2018</strong>.</p><p>This policy explains what information we collect, why we collect it, how we use it, and your rights regarding your personal data.

− This policy explains what information we collect, why we collect it, how we use it, and your rights regarding your personal data.

+ We believe in <strong>transparency</strong> and <strong>user control</strong>.</p><h2>Data Controller</h2><p>The data controller responsible for your personal data is:</p><ul><li><strong>Legal Name:</strong> HOUR TIMEBANK COMPANY LIMITED BY GUARANTEE</li><li><strong>Common name and trading name:</strong> hOUR Timebank CLG; trading as Timebank Ireland</li><li><strong>Company Registration:</strong> Irish company number 608327</li><li><strong>Charity Registration:</strong> RCN 20162023 (Charities Regulator)</li><li><strong>Registered Address:</strong> 21 Páirc Goodman, Skibbereen, Co.

− We believe in transparency and user control.

+ Cork, P81 AK26, Ireland</li><li><strong>Data Protection Contact:</strong> <a href="mailto:[email protected]" target="_blank" rel="noopener noreferrer nofollow">[email protected]</a></li></ul><p>For the Timebank Global Community, HOUR TIMEBANK COMPANY LIMITED BY GUARANTEE is both the Platform Provider and the community operator.

− 1.

+ If you join an independently operated Tenant community, that Tenant Operator is a separate data controller for the membership and community data it determines and processes.

− Data Controller The data controller responsible for your personal data is: Legal Name: Timebank Global (Company Limited by Guarantee) Registered Business Name: Timebank Ireland Charity Registration: RCN 20162023 (Charities Regulator) Registered Address: 21 Páirc Goodman, Skibbereen, Co.

+ We remain responsible for processing carried out in our role as Platform Provider.</p><h2>Information We Collect</h2><p>We collect only the information necessary to provide our timebanking services:</p><table><thead><tr><th>Data Type</th><th>Purpose</th></tr></thead><tbody><tr><td><strong>Account Information</strong></td><td>Name, email address, password (encrypted) — Required to create and manage your account</td></tr><tr><td><strong>Profile Details</strong></td><td>Bio, skills, location, photo — Helps connect you with community members</td></tr><tr><td><strong>Contact Information</strong></td><td>Phone number (optional), address — For arranging exchanges if you choose to share</td></tr><tr><td><strong>Activity Data</strong></td><td>Exchanges, messages, time credits — Essential for platform functionality</td></tr><tr><td><strong>Device Information</strong></td><td>Browser type, IP address, device type — Used for security and troubleshooting</td></tr></tbody></table><h2>Legal Basis for Processing</h2><p>Under GDPR, we process your personal data based on the following legal grounds:</p><ul><li><strong>Contract Performance:</strong> Processing necessary to provide our timebanking services to you</li><li><strong>Consent:</strong> Where you have given explicit consent (e.g., marketing communications)</li><li><strong>Legitimate Interests:</strong> Improving our services, preventing fraud, and ensuring platform security</li><li><strong>Legal Obligation:</strong> Complying with Irish and EU legal requirements</li></ul><h2>How We Use Your Data</h2><p>Your data is used exclusively for the following purposes:</p><ul><li><strong>Service Delivery:</strong> Facilitating time exchanges and community connections</li><li><strong>Communication:</strong> Sending important updates, notifications, and messages from other members</li><li><strong>Security:</strong> Protecting your account and preventing fraud or abuse</li><li><strong>Improvement:</strong> Analysing usage patterns to enhance platform features (anonymised)</li><li><strong>Legal Compliance:</strong> Meeting regulatory requirements under Irish and EU law</li><li><strong>Charitable Reporting:</strong> Aggregated, anonymised statistics for charity reporting purposes</li></ul><p><strong>We do not sell your personal data to third parties.</strong> Your information is never shared with advertisers or data brokers.</p><h2>Data Sharing</h2><p>We may share your data with:</p><ul><li><strong>Other Members:</strong> Your profile information is visible to verified members to facilitate exchanges</li><li><strong>Partner Organisations:</strong> If you join a specific community, that organisation's coordinators can see your membership details</li><li><strong>Service Providers:</strong> Trusted providers who help us operate the platform (hosting, email delivery) under strict data processing agreements</li><li><strong>Legal Authorities:</strong> When required by law or to protect our legal rights</li></ul><p>All service providers are bound by GDPR-compliant data processing agreements.</p><h2>How We Protect Your Data</h2><p>We implement robust security measures:</p><ul><li><strong>Encryption:</strong> All data is encrypted in transit (TLS/HTTPS) and at rest</li><li><strong>Secure Passwords:</strong> Passwords are hashed using industry-standard algorithms</li><li><strong>Access Controls:</strong> Strict internal policies limit who can access your data</li><li><strong>Regular Audits:</strong> We conduct security reviews and update our practices accordingly</li><li><strong>EU-Based Hosting:</strong> Your data is stored within the European Union</li></ul><h2>Your GDPR Rights</h2><p>Under GDPR, you have the following rights:</p><ul><li><strong>Right of Access:</strong> Request a copy of all personal data we hold about you</li><li><strong>Right to Rectification:</strong> Correct any inaccurate or incomplete information</li><li><strong>Right to Erasure:</strong> Request deletion of your data ("right to be forgotten")</li><li><strong>Right to Restrict:</strong> Limit how we process your data in certain circumstances</li><li><strong>Right to Portability:</strong> Receive your data in a structured, machine-readable format</li><li><strong>Right to Object:</strong> Object to processing based on legitimate interests</li></ul><p>To exercise any of these rights, contact us at <a href="mailto:[email protected]" target="_blank" rel="noopener noreferrer nofollow">[email protected]</a>.

− Cork, P81 AK26, Ireland Data Protection Contact: [email protected] If you are a member of a Partner Organisation using our platform, that organisation may also be a data controller for data they collect directly from you.

+ We will respond within one month.

− 2.

+ You may also request deletion using our <a href="https://timebank.global/account-deletion" target="_blank" rel="noopener noreferrer">account deletion page</a> or the account deletion control in the app.</p><h2>Cookies & Tracking</h2><p>We use cookies to enhance your experience:</p><ul><li><strong>Essential Cookies:</strong> Required for login, security, and basic functionality</li><li><strong>Preference Cookies:</strong> Remember your settings like theme preference</li><li><strong>Analytics Cookies:</strong> Help us understand how people use the platform (anonymised)</li></ul><p>We do <strong>not</strong> use advertising cookies or tracking pixels.</p><h2>Data Retention</h2><ul><li><strong>Active Accounts:</strong> Data is kept while your account remains active</li><li><strong>Inactive Accounts:</strong> Accounts inactive for 24 months may be anonymised after notice</li><li><strong>Deleted Accounts:</strong> Personal data is removed within 30 days of deletion</li><li><strong>Transaction Records:</strong> May be retained for up to 7 years for legal/charity reporting</li></ul><h2>International Data Transfers</h2><p>Your data is primarily stored within the European Union.

− Information We Collect We collect only the information necessary to provide our timebanking services: Data TypePurpose Account InformationName, email address, password (encrypted) — Required to create and manage your account Profile DetailsBio, skills, location, photo — Helps connect you with community members Contact InformationPhone number (optional), address — For arranging exchanges if you choose to share Activity DataExchanges, messages, time credits — Essential for platform functionality Device InformationBrowser type, IP address, device type — Used for security and troubleshooting 3.

+ If we need to transfer data outside the EU/EEA, we ensure appropriate safeguards (SCCs, adequacy decisions).</p><h2>Children's Privacy</h2><p>Our platform is intended for users aged <strong>18 years and older</strong>.

− Legal Basis for Processing Under GDPR, we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide our timebanking services to you Consent: Where you have given explicit consent (e.g., marketing communications) Legitimate Interests: Improving our services, preventing fraud, and ensuring platform security Legal Obligation: Complying with Irish and EU legal requirements 4.

+ We do not knowingly collect data from anyone under 18.</p><h2>Complaints</h2><p>You may lodge a complaint with the <strong>Data Protection Commission</strong>:</p><ul><li><strong>Address:</strong> 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland</li><li><strong>Website:</strong> <a href="https://www.dataprotection.ie" target="_blank" rel="noopener noreferrer nofollow">www.dataprotection.ie</a></li></ul><h2>Changes to This Policy</h2><p>We may update this Privacy Policy to reflect changes in our practices.

− How We Use Your Data Your data is used exclusively for the following purposes: Service Delivery: Facilitating time exchanges and community connections Communication: Sending important updates, notifications, and messages from other members Security: Protecting your account and preventing fraud or abuse Improvement: Analysing usage patterns to enhance platform features (anonymised) Legal Compliance: Meeting regulatory requirements under Irish and EU law Charitable Reporting: Aggregated, anonymised statistics for charity reporting purposes We do not sell your personal data to third parties.

+ We will notify you via email or platform notification for significant changes.</p><h2>Contact Us</h2><p>For privacy questions: <a href="mailto:[email protected]" target="_blank" rel="noopener noreferrer nofollow">[email protected]</a></p>

− Your information is never shared with advertisers or data brokers.

− 5.

− Data Sharing We may share your data with: Other Members: Your profile information is visible to verified members to facilitate exchanges Partner Organisations: If you join a specific community, that organisation's coordinators can see your membership details Service Providers: Trusted providers who help us operate the platform (hosting, email delivery) under strict data processing agreements Legal Authorities: When required by law or to protect our legal rights All service providers are bound by GDPR-compliant data processing agreements.

− 6.

− How We Protect Your Data We implement robust security measures: Encryption: All data is encrypted in transit (TLS/HTTPS) and at rest Secure Passwords: Passwords are hashed using industry-standard algorithms Access Controls: Strict internal policies limit who can access your data Regular Audits: We conduct security reviews and update our practices accordingly EU-Based Hosting: Your data is stored within the European Union 7.

− Your GDPR Rights Under GDPR, you have the following rights: Right of Access: Request a copy of all personal data we hold about you Right to Rectification: Correct any inaccurate or incomplete information Right to Erasure: Request deletion of your data ("right to be forgotten") Right to Restrict: Limit how we process your data in certain circumstances Right to Portability: Receive your data in a structured, machine-readable format Right to Object: Object to processing based on legitimate interests To exercise any of these rights, contact us at [email protected].

− We will respond within one month.

− 8.

− Cookies & Tracking We use cookies to enhance your experience: Essential Cookies: Required for login, security, and basic functionality Preference Cookies: Remember your settings like theme preference Analytics Cookies: Help us understand how people use the platform (anonymised) We do not use advertising cookies or tracking pixels.

− 9.

− Data Retention Active Accounts: Data is kept while your account remains active Inactive Accounts: Accounts inactive for 24 months may be anonymised after notice Deleted Accounts: Personal data is removed within 30 days of deletion Transaction Records: May be retained for up to 7 years for legal/charity reporting 10.

− International Data Transfers Your data is primarily stored within the European Union.

− If we need to transfer data outside the EU/EEA, we ensure appropriate safeguards (SCCs, adequacy decisions).

− 11.

− Children's Privacy Our platform is intended for users aged 18 years and older.

− We do not knowingly collect data from anyone under 18.

− 12.

− Complaints You may lodge a complaint with the Data Protection Commission: Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland Website: www.dataprotection.ie 13.

− Changes to This Policy We may update this Privacy Policy to reflect changes in our practices.

− We will notify you via email or platform notification for significant changes.

− Contact Us For privacy questions: [email protected]

View the version that applies today