1. Introduction
myBTBdb ("we", "our", or "us") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our website and services.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller Information
Data Controller: myBTBdb
Website: https://mybtbdb.com
Contact: For privacy enquiries, please use our contact form.
3. Information We Collect
3.1 Information You Provide
- Account Information: Display name, email address, location (country), password (encrypted)
- Profile Information: Bear collection data, verification photos, comments, and messages
- Communication Preferences: Newsletter subscription preferences
- User Content: Comments, messages, and other content you choose to share
3.2 Information Automatically Collected
- Technical Data: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent on site, click patterns, referral sources
- Cookies and Tracking: Session cookies, authentication tokens, preferences
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: Newsletter subscriptions, optional profile features
- Contract Performance: Providing our services, user accounts, community features
- Legitimate Interests: Site analytics, security, fraud prevention, service improvement
- Legal Obligation: Compliance with applicable laws and regulations
5. How We Use Your Information
- Provide and maintain our bear collecting community platform
- Create and manage your user account
- Enable community features (collections, comments, messaging)
- Send newsletters and updates (with your consent)
- Verify bear ownership through our verification system
- Prevent fraud and ensure platform security
- Analyze usage to improve our services
- Comply with legal obligations
6. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Essential Cookies: Authentication, session management, security
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Understand how you use our site to improve services
You can control cookie preferences through your browser settings. However, disabling essential cookies may affect site functionality.
7. Data Sharing and Disclosure
We do not sell your personal data. We may share your information in these limited circumstances:
- Public Profile Information: Display name, location, and collection data are visible to other users
- Service Providers: Trusted third parties who help us operate our website (hosting, email services)
- Legal Requirements: When required by law or to protect our legal rights
- Business Transfer: In connection with a merger, acquisition, or sale of assets
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encrypted data transmission (HTTPS/SSL)
- Secure password hashing
- Regular security updates and monitoring
- Access controls and audit logs
- Secure data backup procedures
9. Data Retention
We retain your personal data for as long as necessary to:
- Provide our services while your account is active
- Comply with legal obligations
- Resolve disputes and enforce agreements
You may delete your account at any time, after which we will delete or anonymize your personal data within 30 days, except where retention is required by law.
10. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: For processing based on consent
To exercise these rights, please contact us using the information provided above.
11. International Data Transfers
Your data is primarily processed within the UK/EEA. If we transfer data outside these regions, we ensure appropriate safeguards are in place.
12. Children's Privacy
Our services are not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us immediately.
13. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on our website and updating the "last updated" date.
14. Contact Information
If you have questions about this privacy policy or our data practices, please contact us:
- Through our website contact form
- By visiting: https://mybtbdb.com
15. Supervisory Authority
You have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113