<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Privacy Policy — Something Borrowed</title>
<style>
:root {
--ink: #1c2321;
--ink-soft: #4a534f;
--paper: #faf8f4;
--line: #e3ddd2;
--accent: #2f6f5e;
--accent-soft: #eaf1ee;
}
* { box-sizing: border-box; }
body {
margin: 0;
background: var(--paper);
color: var(--ink);
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif;
line-height: 1.65;
}
.wrap {
max-width: 760px;
margin: 0 auto;
padding: 64px 24px 120px;
}
header.top {
margin-bottom: 48px;
padding-bottom: 32px;
border-bottom: 1px solid var(--line);
}
.eyebrow {
text-transform: uppercase;
letter-spacing: 0.12em;
font-size: 12px;
color: var(--accent);
font-weight: 600;
margin-bottom: 12px;
}
h1 {
font-size: 34px;
margin: 0 0 12px;
letter-spacing: -0.01em;
}
.meta {
color: var(--ink-soft);
font-size: 14px;
}
.placeholder-note {
margin-top: 24px;
padding: 14px 16px;
background: var(--accent-soft);
border-radius: 8px;
font-size: 13.5px;
color: var(--ink-soft);
}
.placeholder-note strong { color: var(--ink); }
nav.toc {
background: #fff;
border: 1px solid var(--line);
border-radius: 10px;
padding: 20px 24px;
margin-bottom: 48px;
}
nav.toc p {
margin: 0 0 10px;
font-size: 13px;
text-transform: uppercase;
letter-spacing: 0.08em;
color: var(--ink-soft);
font-weight: 600;
}
nav.toc ol {
margin: 0;
padding-left: 20px;
columns: 2;
column-gap: 24px;
font-size: 14.5px;
}
nav.toc li { margin-bottom: 6px; }
nav.toc a { color: var(--ink); text-decoration: none; }
nav.toc a:hover { color: var(--accent); text-decoration: underline; }
section { margin-bottom: 40px; }
h2 {
font-size: 20px;
margin: 0 0 14px;
padding-top: 4px;
scroll-margin-top: 24px;
}
h2 .num {
color: var(--accent);
margin-right: 8px;
font-variant-numeric: tabular-nums;
}
h3 {
font-size: 15.5px;
margin: 20px 0 8px;
}
p { margin: 0 0 14px; color: var(--ink); }
ul { margin: 0 0 14px; padding-left: 22px; }
li { margin-bottom: 6px; }
table {
width: 100%;
border-collapse: collapse;
margin: 12px 0 20px;
font-size: 14px;
}
th, td {
text-align: left;
padding: 10px 12px;
border: 1px solid var(--line);
vertical-align: top;
}
th {
background: var(--accent-soft);
font-weight: 600;
}
a { color: var(--accent); }
.fill {
background: #fff3cd;
border-radius: 3px;
padding: 0 4px;
}
footer.bottom {
margin-top: 60px;
padding-top: 24px;
border-top: 1px solid var(--line);
font-size: 13px;
color: var(--ink-soft);
}
</style>
</head>
<body>
<div class="wrap">
<header class="top">
<div class="eyebrow">Something Borrowed</div>
<h1>Privacy Policy</h1>
<div class="meta">Last updated: <span class="fill">[DATE]</span> · Applies to <a href="https://findsomethingborrowed.uk/">findsomethingborrowed.uk</a> and the Something Borrowed app</div>
<div class="placeholder-note">
<strong>Before you publish this:</strong> fields highlighted like <span class="fill">this</span> are placeholders — swap in your legal entity name, contact details, and any processors you actually use. This draft is written to be UK GDPR-aligned given your .uk domain, but it isn't legal advice; have a solicitor sanity-check it before it goes live, especially once the app itself launches.
</div>
</header>
<nav class="toc">
<p>Contents</p>
<ol>
<li><a href="#who-we-are">Who we are</a></li>
<li><a href="#info-we-collect">Information we collect</a></li>
<li><a href="#how-we-use">How we use your information</a></li>
<li><a href="#legal-basis">Our legal basis for processing</a></li>
<li><a href="#sharing">Who we share information with</a></li>
<li><a href="#location">Location data</a></li>
<li><a href="#international">International transfers</a></li>
<li><a href="#retention">How long we keep information</a></li>
<li><a href="#security">Keeping information secure</a></li>
<li><a href="#rights">Your rights</a></li>
<li><a href="#cookies">Cookies and similar technologies</a></li>
<li><a href="#children">Children's privacy</a></li>
<li><a href="#changes">Changes to this policy</a></li>
<li><a href="#contact">Contact us</a></li>
</ol>
</nav>
<section>
<p>Something Borrowed is a peer-to-peer platform that helps people borrow and lend everyday items with others nearby. This policy explains what personal information we collect — whether you're joining our waitlist today or using the full app once it launches — why we collect it, and what rights you have over it.</p>
</section>
<section id="who-we-are">
<h2><span class="num">1.</span>Who we are</h2>
<p><span class="fill">[Company legal name]</span> ("Something Borrowed", "we", "us", "our") operates findsomethingborrowed.uk and the Something Borrowed app. We are the data controller for the personal information described in this policy.</p>
<table>
<tr><th>Registered address</th><td><span class="fill">[Registered company address]</span></td></tr>
<tr><th>Company number</th><td><span class="fill">[Companies House number, if incorporated]</span></td></tr>
<tr><th>Contact email</th><td><span class="fill">[privacy@findsomethingborrowed.uk]</span></td></tr>
<tr><th>ICO registration</th><td><span class="fill">[Registration number, once registered with the Information Commissioner's Office]</span></td></tr>
</table>
</section>
<section id="info-we-collect">
<h2><span class="num">2.</span>Information we collect</h2>
<h3>Waitlist and early access</h3>
<ul>
<li><strong>Email address</strong> — when you join the waitlist, so we can send launch updates and early access invitations.</li>
</ul>
<h3>Once you create an account in the app</h3>
<ul>
<li><strong>Profile information</strong> — name, photo, and any bio details you choose to add, so other users can identify you before a handoff.</li>
<li><strong>Verification information</strong> — details used to confirm you're a real person (for example, phone number or ID checks), which may be processed on our behalf by a verification provider.</li>
<li><strong>Listings and items</strong> — descriptions, photos, and availability of items you list to lend.</li>
<li><strong>Messages</strong> — chats between borrowers and owners arranging a handoff, so we can provide support if something goes wrong.</li>
<li><strong>Ratings and reviews</strong> — feedback left about you or by you after a borrowing exchange.</li>
<li><strong>Location data</strong> — see <a href="#location">Section 6</a>.</li>
<li><strong>Payment information</strong> — if borrowing involves a fee or deposit, payment details are collected and processed by our payment provider; we do not store full card numbers ourselves.</li>
<li><strong>Support communications</strong> — anything you tell us when you contact our team.</li>
</ul>
<h3>Collected automatically</h3>
<ul>
<li><strong>Device and usage data</strong> — IP address, device type, browser, app version, and how you interact with the app or site.</li>
<li><strong>Cookies and similar technologies</strong> — see <a href="#cookies">Section 11</a>.</li>
</ul>
</section>
<section id="how-we-use">
<h2><span class="num">3.</span>How we use your information</h2>
<ul>
<li>To operate the waitlist and let you know when Something Borrowed launches near you.</li>
<li>To create and manage your account, and verify you're a genuine user.</li>
<li>To show you relevant items nearby and connect borrowers with owners.</li>
<li>To facilitate messaging, scheduling, and handoffs between users.</li>
<li>To maintain ratings and reputation so the community stays accountable.</li>
<li>To process payments, deposits, or fees where applicable.</li>
<li>To provide customer support and resolve disputes between users.</li>
<li>To keep the platform secure, prevent fraud, and enforce our terms.</li>
<li>To improve the product, understand usage patterns, and develop new features.</li>
<li>To comply with legal obligations.</li>
</ul>
</section>
<section id="legal-basis">
<h2><span class="num">4.</span>Our legal basis for processing</h2>
<p>Under UK GDPR, we rely on the following legal bases:</p>
<ul>
<li><strong>Contract</strong> — to provide the app's core functionality, such as creating your account, matching you with nearby items, and facilitating borrowing.</li>
<li><strong>Consent</strong> — for the waitlist, marketing emails, and precise location access, which you can withdraw at any time.</li>
<li><strong>Legitimate interests</strong> — for fraud prevention, service improvement, and keeping the community safe, balanced against your rights.</li>
<li><strong>Legal obligation</strong> — where we need to retain or disclose information to comply with the law.</li>
</ul>
</section>
<section id="sharing">
<h2><span class="num">5.</span>Who we share information with</h2>
<p>We don't sell your personal information. We share it only where necessary:</p>
<ul>
<li><strong>Other users</strong> — your profile, ratings, and listing details are visible to nearby users so borrowing can happen; your exact address is never shared, only an approximate distance or area.</li>
<li><strong>Service providers</strong> — such as <span class="fill">[hosting provider, e.g. AWS]</span>, <span class="fill">[email provider, e.g. waitlist/mailing tool]</span>, <span class="fill">[payment processor]</span>, and <span class="fill">[identity verification provider]</span>, who process data on our behalf under contract.</li>
<li><strong>Legal and safety reasons</strong> — where required by law, or to protect the rights, safety, or property of our users or the public.</li>
<li><strong>Business transfers</strong> — if Something Borrowed is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.</li>
</ul>
</section>
<section id="location">
<h2><span class="num">6.</span>Location data</h2>
<p>Something Borrowed is built around finding items near you, so location is central to how it works:</p>
<ul>
<li>We use your approximate or precise location (with your permission) to show items nearby and let others find your listings.</li>
<li>You can control location access through your device settings at any time; turning it off will limit the app's core matching functionality.</li>
<li>We only ever show other users an approximate distance or general area — never your exact home address.</li>
</ul>
</section>
<section id="international">
<h2><span class="num">7.</span>International transfers</h2>
<p>Some of our service providers may be located, or store data, outside the UK. Where this happens, we put safeguards in place — such as the UK's International Data Transfer Addendum or adequacy regulations — to make sure your information stays protected to UK standards.</p>
</section>
<section id="retention">
<h2><span class="num">8.</span>How long we keep information</h2>
<ul>
<li><strong>Waitlist emails</strong> — kept until launch or until you unsubscribe, whichever is earlier.</li>
<li><strong>Account and profile data</strong> — kept while your account is active, and for a limited period afterward to resolve disputes, meet legal obligations, and prevent fraud.</li>
<li><strong>Messages and transaction records</strong> — kept for <span class="fill">[e.g. 2 years]</span> after an exchange, in case of disputes.</li>
<li>You can request deletion at any time — see <a href="#rights">Your rights</a> below.</li>
</ul>
</section>
<section id="security">
<h2><span class="num">9.</span>Keeping information secure</h2>
<p>We use appropriate technical and organisational measures — including encryption in transit, access controls, and regular reviews — to protect your information. No system is completely secure, but we work to minimise risk and will notify you and the ICO of any breach where required by law.</p>
</section>
<section id="rights">
<h2><span class="num">10.</span>Your rights</h2>
<p>Under UK GDPR, you have the right to:</p>
<ul>
<li><strong>Access</strong> the personal information we hold about you.</li>
<li><strong>Correct</strong> inaccurate or incomplete information.</li>
<li><strong>Erase</strong> your information ("right to be forgotten"), subject to certain exceptions.</li>
<li><strong>Restrict or object to</strong> certain processing.</li>
<li><strong>Port</strong> your data to another service in a portable format.</li>
<li><strong>Withdraw consent</strong> at any time, where processing is based on consent.</li>
<li><strong>Complain</strong> to the <a href="https://ico.org.uk/" target="_blank" rel="noopener">Information Commissioner's Office (ICO)</a> if you think we've mishandled your information.</li>
</ul>
<p>To exercise any of these rights, contact us at <span class="fill">[privacy@findsomethingborrowed.uk]</span>. We'll respond within one month, as required by law.</p>
</section>
<section id="cookies">
<h2><span class="num">11.</span>Cookies and similar technologies</h2>
<p>Our website uses cookies to remember your preferences, understand how visitors use the site, and — where you've consented — measure the effectiveness of our launch communications. You can control cookies through your browser settings. <span class="fill">[Add detail here once you finalise your analytics/cookie stack, e.g. Google Analytics, Framer analytics.]</span></p>
</section>
<section id="children">
<h2><span class="num">12.</span>Children's privacy</h2>
<p>Something Borrowed is intended for users aged 18 and over. We don't knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.</p>
</section>
<section id="changes">
<h2><span class="num">13.</span>Changes to this policy</h2>
<p>We may update this policy as Something Borrowed evolves — particularly as we move from waitlist to full app launch. We'll post the updated version here with a new "last updated" date, and where changes are significant, we'll let you know directly.</p>
</section>
<section id="contact">
<h2><span class="num">14.</span>Contact us</h2>
<p>If you have questions about this policy or how we handle your information, reach out to us at <span class="fill">[privacy@findsomethingborrowed.uk]</span> or write to us at <span class="fill">[registered address]</span>.</p>
</section>
<footer class="bottom">
Something Borrowed · Borrow nearby. Share more.
</footer>
</div>
</body>
</html>