1. Who we are
WOO (woo-irl.me) is the data controller for the personal data described in this policy. Contact us at hello@woo-irl.me.
2. What we collect
- Account data: your name, email address, date of birth and password (stored hashed, never in plain text).
- Profile data: photographs, bio, interests, values and preferences that you choose to publish.
- Verification data: a selfie used to confirm identity, stored privately and never shown publicly.
- Transaction data: orders for cards and keychains, delivery address, and verification fee. Card details are handled by our payment provider — we never see or store them.
- Usage data: log-in times, device and browser information, and basic analytics.
3. How we use it
To create and display your profile to people you share your code with; to verify identity and keep the community safe; to deliver merchandise you order; to process payments; to send service emails; and to investigate reports of abuse.
4. Legal bases
We rely on contract (running your account and orders), legitimate interests (safety, fraud prevention, improving WOO), consent (marketing email, which you can withdraw at any time) and legal obligation (tax and law-enforcement requests).
5. Who we share with
Service providers only: hosting and database, payment processing, email delivery, and print fulfilment. They act on our instructions and cannot use your data for their own purposes. We never sell your data or share it with advertisers.
6. How long we keep it
Profile data is kept while your account is active and deleted within 30 days of account deletion. Verification selfies are deleted once verification is complete or the account is closed. Order and payment records are kept for six years for tax purposes. Safety records relating to a report may be kept longer where necessary.
7. Your rights
You can access, correct, download or delete your data, object to processing, or withdraw consent at any time. Email hello@woo-irl.me and we will respond within one month. You may also complain to the UK Information Commissioner's Office (ico.org.uk).
8. Security
Data is encrypted in transit and at rest, access is restricted to the small number of people who need it, and row-level security rules ensure members can only reach their own records.
9. Cookies and changes
We use essential cookies to keep you signed in and basic analytics to understand how the site is used. We do not use advertising trackers. Material changes to this policy will be notified by email before they take effect.