Privacy Policy - My Social Collection

Index

Controller
EU representative and privacy contacts
Data collected
Purposes and legal bases
Profiling and automated decisions
Recipients and sharing
International transfers
Retention
Your rights
Account deletion
Child protection
Security
Cookies
Changes
Complaints and contacts

1. Controller

MY SOCIAL COLLECTION LTD

Registered office: Flat 1, 61-63 Beckenham Road, London, BR3 4PS, United Kingdom — Companies House Number: 15706684

General email: info@mysocialcollection.com

My Social Collection Ltd is the controller for personal data collected through the My Social Collection mobile app and website.

2. EU representative and privacy contacts

2.1 EU Representative

Tomaso Buscema — representative in the European Union.

Email: eu-representative@mysocialcollection.com

Data subjects in the EEA may contact the EU representative about the processing of their personal data.

2.2 Privacy contact

For personal data requests: privacy@mysocialcollection.com.

3. Personal data we collect

3.1 Data you provide

Registration data: name, email, username, encrypted password, date of birth and profile photo.
Profile data: biography, interests, collection images, preferences and country of residence.
User content: posts, images, comments, reviews and sale listings.
Private messages between users.
Transaction data: purchases, sales, shipping addresses and order history.
Sale or payment data, where the function is available: identity, shipping, transaction, payment coordinates or Stripe account data. We do not collect data for professional seller registration because that function is not currently available.
Support communications, reports and complaints.

3.2 Data collected automatically

Device data, technical identifiers used for push notifications, usage data, IP address, approximate location from IP, authentication and security logs.
No GPS location is collected without explicit consent.

3.3 Data from third parties

Social login providers such as Google or Apple: name, email and profile image.
Payment providers such as Stripe: confirmations and transaction IDs. We do not store full card data.

4. Purposes and legal bases

Purpose	Legal basis	Data
Account management	Contract	Registration and profile data
Publishing content	Contract	Content and images
Transactions and payments	Contract or legal obligation	Transactions, shipping and payment data
Content moderation	Legal obligation and legitimate interest	Content, logs and reports
Fraud prevention and security	Legitimate interest	Logs, IP and transaction data
Service notifications	Legitimate interest	Email and push tokens
Feed personalization	Legitimate interest	Interests and interactions
Marketing communications	Consent	Email and preferences
Legal, tax and child safety obligations	Legal obligation	Data required by law or report handling

5. Profiling and automated decisions

We may use recommendation algorithms to personalize feeds, collector suggestions and searches. You can choose a non-personalized feed in the app settings or object by writing to privacy@mysocialcollection.com.

We do not make solely automated decisions that produce legal or similarly significant effects. Moderation or security decisions that may affect an account are subject to human review and may be challenged through the contacts listed here.

6. Recipients and sharing

We do not sell your personal data.

Category	Provider or recipient	Purpose
Payments	Stripe	Marketplace transactions
Hosting	Cloud providers	Data storage
Email and push	Email provider, Firebase, Apple APNs	Service notifications
Authentication	Firebase Auth	Email, Google and Apple login
Support	Support tools	Ticket handling
Other users and transaction counterparties	According to app functions and privacy settings	Social interaction and transactions
Competent authorities	Where legally required	Legal requests and safety reports

7. International transfers

Some providers may process data outside the UK or EEA. Where required, transfers rely on appropriate safeguards such as adequacy decisions, the EU-US Data Privacy Framework, standard contractual clauses or equivalent measures.

8. Retention periods

Category	Period	Reason
Active account data	For the duration of the account	Service delivery
Post-deletion operational data	Up to 30 days	Anti-fraud and disputes
Transactions, invoices and payment-related records	Up to 10 years	Tax, accounting and legal obligations
Security logs	12 months	Security and investigations
Support tickets	24 months	Complaints and disputes
CSAE reports	At least 12 months	Cooperation with authorities
Moderation records	5 years	Abuse prevention
Marketing consent	Until withdrawal	Consent management

9. Your rights

Access, rectification, deletion, restriction, portability and objection.
Withdrawal of consent at any time where processing is based on consent.

Privacy contact: privacy@mysocialcollection.com. We aim to respond within 30 days.

10. Account deletion

In the app: Profile → Account Settings → Delete Account. You can also use the Delete Account page.

Confirmation within 48 hours, a 14-day reconsideration period and final deletion within 30 days, unless legal retention obligations apply.

11. Child protection

Minimum age: 13. Users under 13 may not register. Dedicated protection measures apply to minors.

Minor accounts: messages can only be received from followed accounts.
No advertising based on profiling.
Marketplace use is prohibited for users under 18.
In-app reports are available through Profile → menu → Reports, including possible under-13 profiles.

CSAM and grooming: immediate removal, account suspension, evidence preservation and reporting to competent authorities. Contact: childsafety@mysocialcollection.com.

Full details: Child Safety Standards.

12. Security and data breaches

We adopt technical and organizational measures to protect personal data. Access is limited to authorized staff and necessary providers. Payment data is handled by specialized providers and we do not store full card details.

13. Cookies

The website uses technical cookies and similar technologies. Non-technical cookies require consent. The website loads Microsoft Clarity for analytics, heatmaps and session replay only after analytics consent, to improve user experience and diagnose technical issues.

We do not use marketing or profiling cookies such as Meta Pixel or Google Ads. With consent, Microsoft Clarity may process technical browsing and interaction data according to the service settings.

For details see the Cookie Policy.

14. Changes

Material changes are communicated at least 15 days in advance through in-app notice and/or email where appropriate.

15. Complaints and contacts

Role	Email
Controller, support and complaints	info@mysocialcollection.com
Privacy	privacy@mysocialcollection.com
EU Representative	eu-representative@mysocialcollection.com
Child Safety	childsafety@mysocialcollection.com

You may lodge a complaint with the competent authority in your country of residence, workplace or alleged infringement.