Privacy Notice

1. Who is responsible for your information

paRRssport is operated by Brendan Bishop, who is the controller of personal information processed for paRRssport. Contact address: Unit 92937, PO Box 6945, London, W1A 6US. Privacy enquiries and rights requests: privacy@parrssport.com.

2. Information we collect

When you create or use an account, we collect information you provide such as your email address, date of birth, username, display or professional name, account/profile type, profile details, professional roles, media, captions, Collections, group activity, Listings, locations you choose to share, Passport/stamp information, enquiries, reports, appeals and messages or requests you send to us. Your date of birth is used to enforce the 18+ account rule and is not displayed on your public profile. For aggregate audience measurement, the exact date may also be converted into a coarse age band; publishers and advertisers are not shown your exact date of birth. Where your profile includes a gender field, that declared value may also contribute to privacy-thresholded aggregate audience statistics.

We also generate information from use of the service, including content and profile views, video and Daily viewing progress, likes and reactions, follows, comments, saves and favourites, shares, searches and filters, group activity, listing interactions, security events, cookie choices and limited technical information needed to operate and protect the service.

Our first-party Insights system records structured member activity so we can understand feature use and improve relevance and performance. It may include feed impressions, detail views, follows, likes/unlikes, comments, shares, publishing activity, group joins/leaves, listing saves, professional/property search filters, declared professional roles and broad locations, Passport cities/countries, hashtags, coarse age bands and declared gender where used for aggregate audience measurement, and meaningful media/Daily viewing progress. The Insights ledger is designed not to store raw IP addresses, raw user-agent strings, full page URLs, private-message text, private comment text or exact verification coordinates merely for analytics or advertising. We do not use NSFW viewing, private-message content or moderation history to create advertising-interest signals.

3. Where information comes from

Most information comes directly from you or is generated when you use paRRssport. We may also receive limited information about you from other members when they follow, tag, mention, report or otherwise interact with you, and from service providers that return technical, security, email-delivery, location or moderation results needed to operate the service.

4. Why we use information and our lawful bases

To provide the service and your account: we use information needed to create and secure your account; deliver profiles, feeds, media, Dailies, Collections, Passports, groups, messages and Listings; apply your privacy choices; and respond to actions you request. We generally rely on performance of our contract with you.

Safety, security, moderation and service integrity: we use proportionate account, activity, report, security and technical information to prevent fraud and abuse, enforce our rules, investigate problems, protect members and the service, and establish or defend legal claims. We generally rely on our legitimate interests in operating a safe, reliable and lawful service, and on legal obligations where a law requires particular processing. In exceptional emergencies, vital interests may also apply.

First-party measurement, audience reporting and improvement: we use the limited Insights information described above to understand how paRRssport is used, diagnose problems, improve features and relevance, plan the service and provide privacy-thresholded aggregate performance and audience statistics for professional, promotional and advertising tools. We rely on our legitimate interests in understanding and improving our service and providing useful aggregate measurement to professional users and advertisers, balanced against members' privacy rights. Exact dates of birth, named viewing histories and individual demographic profiles are not supplied through aggregate audience reports. Optional browser analytics, advertising tracking or personalised advertising technologies are handled separately through consent where consent is required.

Communications: we use your contact details for account activation, password/security messages, moderation or service notices and important policy changes as necessary to provide and protect the service. Marketing communications, if introduced, will use the lawful basis and opt-out/consent controls required for that communication.

Consent: where we ask for consent, for example for optional cookies or technologies that require it, you may withdraw that consent at any time without affecting processing that was lawful before withdrawal.

5. Information you need to provide

Fields marked as required during registration are needed to create and administer an account, including the information required to enforce the 18+ rule and identify the account. If you do not provide required registration information, we cannot create the account. Most additional profile, professional, location and publishing information is optional and is supplied when you choose to use the relevant feature.

6. Public information and sharing with others

Information you deliberately publish may be visible to other members or the public according to the audience, profile and group privacy controls that apply to the item. Public content may also be included in share previews when you or another permitted user uses paRRssport sharing features. Private-profile, private-group and other restricted information remains subject to the relevant access rules. Professional publishers and advertisers may receive aggregate performance and audience statistics about eligible content or campaigns, such as broad age bands, declared-gender proportions, follower relationship and broad location, only where the applicable reporting thresholds are met; those reports are designed not to identify individual members or disclose exact dates of birth.

We use service providers to host, store, secure, process and deliver the service. Current infrastructure includes Krystal for web/application hosting, Cloudflare including private R2 object storage, Hetzner for media processing, Geoapify for location search/geocoding, and email-delivery and security providers. Where the paRRssport moderation connector is enabled, relevant content or moderation inputs may be submitted to OpenAI for automated moderation assistance. We may also disclose information where required by law, to respond to valid legal process, or where reasonably necessary to protect rights, safety and the service.

We do not currently take paRRssport membership payments or process paid paRRssport purchases. If paid features or a new payment provider are introduced, this notice will be updated before the relevant processing begins.

7. International processing

We try to keep core infrastructure in the United Kingdom or Europe where practical, but some service providers operate internationally and information may be processed outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, we will rely on an applicable adequacy regulation or another lawful safeguard appropriate to the transfer. You can ask us for further information about the safeguards used for a particular transfer.

8. How long we keep information

Account and feature information is generally kept while your account or the relevant content remains active and for as long afterwards as reasonably necessary to complete deletion, protect the service, resolve disputes, comply with law or maintain proportionate backups. Eligible high-resolution/source media copies may be retired after the verified processing safety window while the processed version remains available until the relevant content is deleted. Reports, appeals, rights notices and security records may be retained for a proportionate period where needed to show how a decision was reached, prevent abuse, establish or defend claims, or comply with law. First-party Insights event rows are currently scheduled for automatic deletion after 730 days unless a shorter period applies or a record must be preserved for a legal or security reason.

9. Profiling and automated tools

paRRssport uses first-party interaction and interest signals to understand feature use and may use them to improve ordering, relevance, search, aggregate audience reporting and future product features. Where demographic audience reporting is enabled, exact dates of birth are converted to broad age bands and reported only in aggregate alongside declared profile information such as gender, subject to privacy thresholds. Automated tools may also assist with spam, security, media processing and moderation. At launch we do not use this profiling to make solely automated decisions that produce legal effects or similarly significant effects on members, and we do not send the first-party Insights ledger to Meta or Google advertising platforms. If that position changes, we will update this notice and introduce the controls required by law.

10. Your data-protection rights

Depending on the circumstances and lawful basis, you may have rights to access your personal information, correct inaccurate information, request erasure, restrict processing, receive portable information, and withdraw consent where consent is the basis used. Some rights have legal limits and do not apply in every situation. Requests may be sent to privacy@parrssport.com.

Your right to object: where we rely on legitimate interests, you may object to that processing. We will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims. You may object to direct marketing at any time.

11. Cookies and optional technologies

Necessary technologies are used to provide and secure the service. Optional analytics, advertising and external-media technologies are controlled separately where consent is required. You can review or change those choices through Cookie settings. See our Cookie Notice for more information.

12. Complaints and contact

Please contact us first at privacy@parrssport.com if you have a privacy concern or want to exercise a data-protection right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

We will review this Privacy Notice as paRRssport changes. If we plan a materially new use of personal information, we will update the notice and provide any additional notice or choice required before that use begins.