1. Introduction

Paganism ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By creating an account or using our platform, you consent to the practices described in this policy.

2. Data Controller

Paganism is the data controller for the personal information you provide to us. We are responsible for deciding how and why your data is processed. For data protection enquiries, contact our Data Protection Officer at dpo@paganism.app.

3. Personal Data We Collect

• Account data: email address, password (hashed), full name.
• Profile data: display name, bio, age, gender, sexual orientation, sexual role, location, interests, creature class, clan affiliation, profile and banner images.
• Membership data: membership tier (free, silver, gold), subscription status, payment history.
• Content data: posts, messages, chat messages, photos, videos, stories you create.
• Engagement data: favourites, blood drops, event attendance, watchlist entries.
• Transaction data: ticket purchases, product orders, content subscriptions, payment amounts.
• Technical data: IP address, browser type, device information, usage logs.

4. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract: to provide the services you've requested (account, membership, tickets).
• Consent: for marketing communications, optional profile fields, and content sharing.
• Legal obligation: to comply with tax, safety, and law enforcement requirements.
• Legitimate interests: for platform security, fraud prevention, and service improvement.
• Vital interests: to protect the safety and wellbeing of our community members.

5. How We Use Your Data

• Creating and managing your account and membership.
• Facilitating ticket purchases, event attendance, and meetups.
• Enabling community features such as messaging, chat, posts, and profiles.
• Processing payments through our payment provider (Stripe).
• Personalising content, recommendations, and advertising.
• Moderating content and enforcing community guidelines.
• Communicating with you about your account, events, and policy updates.
• Maintaining platform security and preventing abuse.

6. Data Sharing

We do not sell your personal data. We may share it with the following categories of recipients when necessary:

• Payment processors: Stripe, for handling transactions securely.
• Service providers: hosting, analytics, and email delivery partners under data processing agreements.
• Advertising partners: for targeted ad delivery, based on your interests and tier.
• Legal authorities: when required by law, court order, or to protect the rights, property, or safety of our community.

7. International Transfers

Your data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data to UK GDPR standards.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Account data is retained for the lifetime of your account.
• Transaction and financial records are retained for 7 years for tax compliance.
• Moderation records are retained for 2 years after resolution.
• Deleted content is removed within 30 days, barring legal hold requirements.

You may request account deletion at any time. Upon deletion, your personal data will be permanently erased within 30 days, except where retention is required by law.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: request a copy of your personal data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: to processing based on legitimate interests or for marketing.
• Right to withdraw consent: at any time, without affecting prior processing.
• Right to lodge a complaint: with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at privacy@paganism.app. We will respond within one month of receiving your request.

10. Sensitive Data & Adult Content

As a platform that may host adult-oriented content, we process special category data (including data revealing sexual orientation) only with explicit consent. This data is used solely for profile personalisation and community matching. You may withdraw consent and remove this data from your profile at any time. Adult content features are gated behind age verification and explicit consent acknowledgement.

11. Cookies & Tracking

We use essential cookies for authentication and site functionality, and optional cookies for analytics and advertising. You can manage cookie preferences through your browser settings. Third-party advertising partners may use cookies to deliver interest-based advertising; you can opt out via the Digital Advertising Alliance.

12. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, regular security reviews, and staff training. In the event of a data breach, we will notify affected individuals and the ICO within 72 hours where required by law.

13. Children's Privacy

Our platform is strictly for individuals aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe we have collected data from a minor, please contact us immediately and we will take steps to delete it.

14. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

15. Contact

For any questions or concerns about your privacy, contact us at privacy@paganism.app or write to: Paganism, Data Protection Officer, Midlands, United Kingdom.