Privacy Policy
1. Introduction
This Privacy Policy explains how Popcorn Social processes personal data.
2. Data Controller
Popcorn Social is the data controller for personal data processed via the Platform.
3. Personal Data Collected
We may collect: Identification and contact data; Account, booking, and transaction data; Device, usage, and technical data; Location data (where enabled); Communications and support records.
4. Lawful Basis for Processing
We process personal data on the basis of: Contractual necessity; Legitimate interests; Legal obligations; User consent (where applicable).
5. Use of Personal Data
Personal data is used to: Operate and maintain the Platform; Facilitate bookings, orders, and payments; Communicate with Users; Improve services and prevent misuse; Comply with legal requirements.
6. Data Sharing
We may share personal data with: Merchants; Payment providers; IT and hosting providers; Regulatory or law enforcement bodies where required. We do not sell personal data.
7. International Transfers
Where data is transferred outside the UK, appropriate safeguards will be applied in accordance with UK GDPR.
8. Data Retention
Data is retained only for as long as necessary for legal, contractual, or operational purposes.
9. Data Security
We apply reasonable technical and organisational measures to protect personal data. No system is entirely secure.
10. User Rights
You have rights including: Access; Rectification; Erasure; Restriction; Objection; Data portability. You may lodge complaints with the Information Commissioner's Office (ICO).
11. Cookies
Cookies are used for functionality, analytics, and performance. Preferences can be managed via browser settings.
12. Third-Party Links
We are not responsible for the privacy practices of third-party websites or services.
13. Policy Updates
This Privacy Policy may be updated from time to time. Continued use of the Platform constitutes acceptance.
14. Contact
Privacy enquiries should be submitted via the contact details provided on the Platform.