Privacy Policy (UK GDPR)

1. Who we are

Coeliac-Key is a community platform that helps people with coeliac disease find safer eating venues. This policy covers how we handle your personal data in compliance with UK GDPR.

2. What we collect

• Email address and username (required for account)
• Optional: hometown, age range, coeliac status, dining frequency
• GPS co-ordinates when vouching for a venue (not stored beyond the verification record)
• IP address for rate limiting and abuse prevention

3. How we use it

We use your data to operate the platform, send verification emails, and display your username on contributions. We do not sell your data. We do not share it with third parties except where required by law.

4. Your rights

You have the right to access, correct, or delete your data. Contact us to exercise these rights. Accounts can be deleted on request.