Who is responsible for your information?
Grand Days Out is a Made Grand project. The legal name and status of the organisation responsible for personal information is [TO CONFIRM: data controller and legal name]. Its correspondence address and registration details are also [TO CONFIRM: address and registration details].
Information we may collect
The information depends on how you use Grand Days Out. It may include:
- your name, email address, account identifier and information needed for Google or email link sign-in;
- beta signup details: your name, email address, optional description of the kind of planner you are, and your agreement to receive beta emails;
- profile choices such as your broad age group, usual group type, broad home area, interests, dislikes, preferred pace, food preferences and access or mobility needs;
- plan details such as the plan name, group type and size, date or time, budget, destination, travel area, notes and weather flexibility;
- details entered about people you organise for, such as a nickname, broad age group and selected access needs;
- saved contacts, activities, preferences, recommendations and plans;
- technical and security information needed to keep sessions working, protect the service and diagnose errors, such as timestamps, request information and security identifiers.
- if you accept analytics, limited information about visits and pages viewed, such as the page address, page title and time of the visit.
Please avoid putting unnecessary personal or sensitive information into names, notes or other free-text fields.
How we use information
- to provide account access and keep the private beta secure;
- to save profiles, preferences, groups and plans;
- to help organisers find suitable options and build a practical day out;
- to send invitations or other service messages when a user requests them;
- to respond to enquiries and accessibility or data requests;
- to diagnose technical problems and improve the beta.
Beta communications
If you join the Bath beta list, we use the details you submit to send occasional updates about the beta. These are not described as regular marketing emails. You can unsubscribe using the link in an email, or through the confirmed privacy contact once it is published.
Children and represented participants
An organiser may add limited information about people they are planning for, including a child or dependant. This information is entered by the organiser, not collected directly from that person. We use broad age groups and selected access needs so plans can reflect the group. Organisers should use a nickname and provide only what is needed for the plan.
How matching works
Grand Days Out uses rules to filter and rank places or events against the information in a plan, such as age groups, budget, timing, access needs, interests and things to avoid. This helps produce relevant suggestions. It is not used to make legal, financial, employment or similarly significant decisions about people.
Service providers
We use providers only where they support the service:
- Lovable Cloud for hosting, managed data storage, authentication and transactional email;
- Google for optional Google sign-in and for the Manrope web font;
- Google Analytics, only with your consent, to help us understand visits and page use;
- Cloudflare for delivery and protection of the website.
Internal venue research also uses n8n and OpenStreetMap Nominatim. Those workflows are for venue information and are not intended to receive account, profile or plan information. We do not sell personal information or use advertising trackers. We do not send profile, plan, participant or preference form details to Google Analytics.
How long information is kept
Account and planning information is kept while it is needed to provide the beta, protect the service and meet legitimate record-keeping needs. The detailed retention periods and deletion schedule are [TO CONFIRM: retention periods and criteria]. We will not claim a fixed period until that decision is recorded.
Where information is processed
Some providers operate internationally. The locations used for this service and any transfer safeguards are [TO CONFIRM: provider regions and international-transfer safeguards].
Your rights
Depending on the circumstances, you may have rights to ask for access to your personal information, correction, deletion, restriction, objection or portability. Where we rely on consent, you may withdraw it. These rights are not absolute and the response will depend on the applicable law and the request.
To make a privacy request, contact [TO CONFIRM: privacy enquiries email address]. You may also complain to the Information Commissioner’s Office.
Changes to this notice
This notice will be updated as the beta develops. Its first formal review date is[TO CONFIRM: last reviewed date].