Privacy Policy

This policy explains what personal data Paddokk collects, why we collect it, how long we keep it, and the rights you have over it. Paddokk is operated from Sweden and processes personal data in accordance with the EU General Data Protection Regulation (GDPR).

Who we are

Paddokk ("we", "us") is the data controller for the personal data described in this policy. For any privacy questions, or to exercise the rights described below, contact us using the details in the Contact section.

Personal data we collect

We collect the following categories of personal data:

• Account data — the email address, username, and password hash you provide when you register, and any display name or avatar you add.
• Authentication data — when you sign in with Google or Facebook, we receive your name, email address, and a provider account identifier from that service.
• Content you create — cars, journeys, posts, comments, inventory items, marketplace listings, and any images or text you upload.
• Usage and technical data — IP address, browser type, device information, and interactions with the site, collected to operate and secure the service.
• Cookies and consent — a record of your cookie choices. You can review or change these at any time with the "Manage cookies" control in the site footer.

Legal basis for processing

We rely on the following legal bases under GDPR Article 6:

• Contract — to create and operate your account and provide the features you use.
• Consent — for non-essential cookies and any optional communications. You may withdraw consent at any time.
• Legitimate interests — to keep the service secure, prevent abuse, and improve the platform, balanced against your rights.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

How long we keep your data

We keep account data and the content you create for as long as your account is active. When you delete your account, we erase your profile, avatar, and associated personal data without undue delay, except where we are required to retain certain records to meet legal obligations or to resolve disputes. Backups are rotated on a limited schedule and purged in due course. Server logs containing technical data are retained only for a short period for security and troubleshooting.

Your rights as a data subject

Under GDPR you have the following rights, which you can exercise free of charge by contacting us:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data, much of which you can edit directly in your account settings.
• Erasure — delete your account and personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection and restriction — object to, or ask us to restrict, processing based on legitimate interests.

You also have the right to lodge a complaint with your supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Sharing and international transfers

We share personal data only with service providers that help us run Paddokk — such as hosting, storage, and authentication providers — acting as our processors under contract. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. We do not sell your personal data.

Security

We use industry-standard measures to protect personal data, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authority of any breach as required by law.

Children

Paddokk is not directed at children under the age of digital consent in their country of residence. We do not knowingly collect personal data from such children. If you believe a child has provided us with personal data, please contact us so we can remove it.

Changes to this policy

We may update this policy from time to time. When we do, we update the "Last updated" date below and, where the change is material, we re-request your cookie consent on your next visit.

Contact

For privacy questions or to exercise your rights, contact our data protection contact at privacy@paddokk.com. Your use of Paddokk is also governed by our Terms of Service.