Privacy Policy
Town Wall · Last updated: June 2026
1. Data Controller
Andrew Blewett
101 High Trees Close, Redditch, Worcestershire, B98 7XL, United Kingdom
Email: andyblewett991@gmail.com
Governed by the UK GDPR and the Data Protection Act 2018 (DPA 2018).
2. Personal Data We Collect
| Category | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Account data | Username, email address, hashed password | Account creation and authentication | Contract (Art. 6(1)(b)) |
| Location data | City, zone (coarse — you choose it; no GPS tracking) | Show locally relevant content | Consent (Art. 6(1)(a)) |
| User content | Posts, stories, business listings, talent showcases | Community platform functionality | Contract (Art. 6(1)(b)) |
| Advertising identifiers | Device ad ID (anonymised), web cookies | Serving ads via Adsterra (web) | Consent (Art. 6(1)(a)) or Legitimate interests |
| Usage data | Session duration, features used | Platform improvement | Legitimate interests (Art. 6(1)(f)) |
| Technical data | Device type, OS version, crash logs | Stability and support | Legitimate interests (Art. 6(1)(f)) |
3. Location Privacy
Town Wall uses your self-selected city or zone to show locally relevant content. We do not track your precise GPS location, real-time movements, or share location data with any third party. You can change or remove your location at any time in Settings.
4. User-Generated Content
Posts, stories, listings, and showcases you create are stored on our servers and may be visible to other users in your zone. You retain ownership of content you post. You grant us a limited licence to store and display it within the platform. You may delete your content at any time. Upon account deletion, all your content is permanently removed within 30 days.
5. Advertising
The web version uses Adsterra for display advertising. Adsterra may use cookies or device identifiers to serve contextual or interest-based ads. You can manage cookie preferences via the cookie consent banner or your browser settings. Your posts and community content are never used for ad targeting.
6. Data Retention
| Data type | Retention period |
|---|---|
| Account and profile data | Until account deletion; deleted within 30 days of request |
| User-generated content | Until you delete it or your account is deleted; removed within 30 days |
| Usage data | Anonymised after 90 days |
| Moderation logs | 12 months for community safety purposes |
7. Third-Party Services
| Processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Supabase | Account and content storage | European Union | EU-hosted; DPA in place |
| Adsterra | Web advertising | Cyprus/EU | EU-based; GDPR compliant |
| Expo | Push notifications | USA | Standard Contractual Clauses |
| Apple / Google | App distribution | USA | Apple/Google's own privacy policies |
8. Your Rights Under UK GDPR
- •Right of access – request a copy of all personal data we hold
- •Right to rectification – correct inaccurate or incomplete data
- •Right to erasure – delete your account and all content
- •Right to restriction of processing – limit how your data is used
- •Right to data portability – receive your data in a portable format
- •Right to object – object to processing based on legitimate interests or for direct marketing
- •Right to withdraw consent – withdraw location or advertising consent at any time
- •Rights related to automated decision-making – we do not make solely automated decisions with significant effects
Email andyblewett991@gmail.com. Response within one calendar month.
9. Right to Lodge a Complaint
Information Commissioner's Office (ICO)
ico.org.uk · 0303 123 1113
10. Age Restrictions
Town Wall is intended for users aged 13 and over. Users aged 13–15 must have verifiable parental consent. We do not knowingly process data from children under 13.
11. Data Security
- •All data in transit encrypted with TLS 1.2+
- •Passwords hashed using bcrypt
- •Supabase row-level security restricts access to account owners
- •Content moderation tools to detect and remove prohibited material
12. Changes to This Policy
Material changes communicated via in-app notification at least 14 days before taking effect.