Privacy Policy

Last updated: August 18, 2025

Toiletly (“we”, “our”, or “us”) is committed to protecting your privacy and handling your data in a transparent and secure way. This Privacy Policy explains what information we collect, how we use it, and the rights you have.

1. Who We Are

Toiletly is a public toilet finding service designed to help parents with toddlers, people with disabilities, and the wider community discover accessible facilities.

Toiletly Ltd
Company number: 16656730
Registered office address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Please note: our registered office address is for official correspondence only and does not process customer enquiries. The fastest way to reach us is by email.

2. Information We Collect

We collect and process the following categories of information:

a. Account Information

Name / Display Name
Email Address
Password (encrypted)
Profile settings and preferences

b. Usage & Contribution Data

Toilet submissions and edits (location, accessibility, opening times, etc.)
Attachments (images you upload, subject to moderation)
Confirmations & votes
Gamification data (points, levels, badges, contributions)

c. Technical Information

Log data (IP address, browser, device information, OS, timestamps)
Cookies and local storage (for authentication, preferences, and analytics)

d. Analytics & Tracking

We use Google Analytics 4 to understand how users interact with our app. This includes:

Pages visited
Clicks and interactions
Approximate location (city/region level)
Device and browser information

3. How We Use Your Information

We process data for the following purposes:

Service delivery – provide account functionality, toilet listings, maps, and moderation features.
Community contributions – manage edits, confirmations, and gamification features.
Safety and moderation – prevent inappropriate content and maintain a respectful environment.
Analytics – improve performance, features, and usability.
Legal compliance – meet obligations under UK and international law.
Communication – send service emails (account changes, moderation updates). Marketing emails are only sent with your explicit consent.

4. Legal Bases for Processing

Under UK GDPR and similar frameworks, we process data on the basis of:

Consent – for optional features (e.g. marketing emails, analytics cookies where required).
Contract – to provide Toiletly when you create an account.
Legitimate Interests – for improving features, preventing abuse, and ensuring security.
Legal Obligations – when required by law.

5. How We Share Your Data

We only share data when necessary:

With other users (e.g. display name and contributions may be visible to the community).
With service providers (e.g. hosting providers, analytics tools, email services).
With authorities (if required by law or to protect against fraud or abuse).

We do not sell your personal data.

6. Data Retention

Account information is retained while your account is active.
Contribution data (submissions, confirmations, edits) may remain in anonymised form after deletion.
Analytics data is retained in line with Google’s policies (up to 26 months unless configured otherwise).
Moderation archives (e.g. attachments, flagged content) may be stored for up to 12 months.

7. Your Rights

Under applicable laws (including UK GDPR), you have the right to:

Access the data we hold about you
Correct inaccurate or incomplete data
Delete your account and associated personal data (subject to retention rules)
Restrict or object to certain types of processing
Request a copy of your personal data (data portability)
Withdraw consent at any time

8. Children’s Privacy

Toiletly is not designed for children under 13. We do not knowingly collect data from children without parental consent. If you believe a child has provided us with personal data, please contact us.

9. Security

We take appropriate measures to protect your data, including:

Encrypted passwords (bcrypt/argon2)
SSL/TLS encryption
Access controls and monitoring
Moderation workflows to prevent misuse

However, no system is 100% secure. Please protect your login credentials.

10. Cookies & Tracking

We use:

Essential cookies – required for authentication and app functionality
Analytics cookies – via Google Analytics, used to measure and improve performance

You can manage or disable cookies in your browser settings.

11. International Transfers

Data may be processed outside the UK (e.g. by Google Analytics). In such cases, we ensure adequate safeguards are in place (such as Standard Contractual Clauses).

12. Changes to this Policy

We may update this Privacy Policy from time to time. Significant changes will be notified by email or in-app notice. Please check this page periodically for the latest version.

13. Regional Supplements

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

The right to know what personal information we collect and how we use it
The right to request deletion of your personal information
The right to opt-out of the sale or sharing of personal data (we do not sell your data)
The right to non-discrimination for exercising your rights

Brazil Residents (LGPD)

If you are a resident of Brazil, you have rights similar to GDPR, including:

Confirmation of processing
Access, correction, and deletion
Portability and information about data sharing
The right to revoke consent

14. Contact Us

For privacy-related questions, concerns, or requests:

Contact Form

Toiletly Ltd
Company number: 16656730
Registered office address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Please note: our registered office does not accept customer mail. Contact by email is the fastest way to reach us.

This privacy policy is effective as of August 18, 2025 and will remain in effect except with respect to any changes in its provisions in the future.