Privacy

Last updated: [EFFECTIVE DATE]

Patroliate respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we use it, how it may be shared, and which rights you have.

1. Who we are

Patroliate is part of Rewrite80, based in the Netherlands. Patroliate is operated by:

Patroliate
Part of Rewrite80
P.O. Box 4350
4900 CJ Oosterhout
The Netherlands
Chamber of Commerce number: [CHAMBER OF COMMERCE NUMBER]
Email: [PRIVACY EMAIL]

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), Rewrite80 is the data controller for the personal data described in this policy.

2. Personal data we collect

Depending on how you use the website, we may collect the following information.

Account and login information

When you create an account or sign in, including through Google, we may receive:

Your name or display name
Username
Email address
Profile image
A unique account identifier
The identity provider used to sign in
Login and account security information

Authentication is provided through Auth0. If you sign in with Google, Google also processes your information under its own privacy policy.

Comments and community activity

When you comment on an article, we may process:

Your display name or username
Your comment and related activity
Your profile image
The date and time of your comment
Technical information used for moderation and spam prevention

Our comment system is provided by Hyvor Talk. Public comments and usernames may be visible to other visitors.

Purchases and webshop information

When you purchase a product, we may process:

Your name
Billing and delivery address
Email address and telephone number
Order details
Payment status
Customer service correspondence

Our webshop and checkout are powered by Shopify and may use related integration services. Payment details are processed by the relevant payment provider. We do not normally receive or store your complete payment-card information.

Contact forms and correspondence

If you contact us, we may collect your name, email address, telephone number, order number and the contents of your message.

Newsletter information

If you subscribe to updates, we may collect your email address and information about your subscription preferences. You can unsubscribe at any time through the link included in our emails.

Technical and usage information

When you visit the website, we or our service providers may collect:

IP address
Browser and device information
Approximate location based on your IP address
Pages visited and interactions with the website
Cookie identifiers
Security, diagnostic and log information

Embedded content

The website may contain embedded content from services such as YouTube. These providers may collect information when you load or interact with their content. Where required, this content will only be activated after you have provided consent.

3. Why we use your information

We may use personal data to:

Create and manage user accounts
Authenticate users and secure the website
Enable comments and community participation
Process orders, payments, delivery and returns
Respond to questions and support requests
Send requested updates or newsletters
Moderate comments and detect spam, fraud or abuse
Improve the website and understand how it is used
Comply with legal, tax and administrative obligations
Establish, exercise or defend legal claims

4. Legal bases

Under the GDPR, we rely on one or more of the following legal bases:

Contract: processing necessary to provide an account, fulfil an order or deliver a requested service
Consent: for certain cookies, marketing communications and embedded third-party content
Legitimate interests: operating, securing and improving the website, preventing abuse and communicating with users
Legal obligation: meeting tax, accounting, consumer protection and other legal requirements

You may withdraw your consent at any time. Withdrawal does not affect processing that already took place lawfully.

5. Services and third parties

We may use service providers that process personal data on our behalf or as independent controllers, including:

Auth0, for authentication and account security
Google, when Google Sign-In or embedded Google services are used
Hyvor Talk, for comments and community functionality
Shopify, for webshop and checkout functionality
Payment, hosting, email, security and analytics providers
YouTube, for embedded video content

These services have their own privacy policies and may process information outside the European Economic Area. Where required, appropriate safeguards such as adequacy decisions or standard contractual clauses are used.

We do not sell your personal data.

6. Cookies

The website may use necessary cookies for login, security, shopping-cart and checkout functionality. With your consent, we may also use cookies or similar technologies for analytics, embedded media and other optional features.

Where legally required, optional cookies will not be activated until you provide consent. You can change or withdraw your preferences through the website’s cookie settings.

7. How long we retain information

We keep personal data only for as long as necessary for the purpose for which it was collected.

Retention periods may differ depending on the type of information:

Account information is generally retained while the account remains active
Comments may remain visible until they are removed or anonymised
Order and invoice information may be retained for the statutory administration period
Contact correspondence is retained only as long as reasonably necessary
Security logs are generally retained for a limited period, unless they are needed to investigate abuse or an incident

We may retain certain information for longer where required by law or necessary for legal claims.

8. Your rights

Depending on applicable law, you may have the right to:

Access your personal data
Correct inaccurate or incomplete data
Request deletion of your data
Restrict the use of your data
Object to certain processing
Receive certain data in a portable format
Withdraw consent
Lodge a complaint with a supervisory authority

In the Netherlands, the supervisory authority is the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

To exercise your rights, contact us at [PRIVACY EMAIL]. We may request additional information to confirm your identity.

9. Public comments

Information submitted through the comment section may be publicly visible. Do not post sensitive personal information or information about other people without their permission.

If you want a comment removed or anonymised, contact us at [PRIVACY EMAIL]. Removal requests may be subject to legal, moderation and technical considerations.

10. Security

We take reasonable organisational and technical measures to protect personal data. However, no website, account system or internet transmission can be guaranteed to be completely secure.

You are responsible for keeping your login information secure and for notifying us if you suspect unauthorised use of your account.

11. Children

The website is not intended for children under the age of 16 without the involvement and consent of a parent or legal guardian. If you believe that a child has provided personal data improperly, please contact us.

12. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. The most recent version will be published on this page with an updated revision date.