Privacy Policy

This Privacy Policy explains what personal data this Book Exchange platform collects, why, and what rights you have over it, in line with the EU General Data Protection Regulation (GDPR).

Who is responsible for your data?

The data controller for this platform is [organisation/school name], [street address], [postal code and city], [country]. Contact: [privacy contact email].

What data we collect

Account data: your display name, school email address, school, and role (student, parent, moderator, or admin).

Content you create: book listings and offers, messages you send to other users, and any reports you submit.

Technical data: the essential and functional cookies described in our Cookie Policy, used to keep you signed in and remember your language.

Why we process your data

To run the book exchange for your school community (creating your account, showing your listings, delivering messages), to keep the platform safe (reviewing reports, enforcing our content rules), and to remember your sign-in and language preference.

Legal basis

Processing is based on performing our contract with you (providing the service you signed up for) and our legitimate interest in keeping the platform safe and functioning (content moderation, security). We don't rely on cookie consent, because we don't use non-essential cookies.

How long we keep your data

We keep your account and content for as long as your account is active. If you delete your account, personal fields are anonymised rather than the whole record removed, so other users' past conversations and listings keep working. See our account deletion flow for details.

Students under the age of digital consent

This platform is intended to be used within a school context. Where a student is below the age at which they can consent to data processing on their own under their country's law, enrolment and use is expected to be mediated by the school, in line with the school's own arrangements with students and parents.

Who we share data with

Your listings, offers, and messages are only visible to other members of your own school community, never across schools, and never to third parties. We don't sell data or use advertising or analytics trackers of any kind. Data is hosted with [hosting provider/infrastructure placeholder].

Your rights

Under the GDPR you have the right to access, correct, delete, or export your data, to restrict or object to certain processing, and to lodge a complaint with your local data protection supervisory authority. To exercise these rights, contact us using the details above, or use the account settings and deletion tools built into the platform.

How we protect your data

We use reasonable technical and organisational measures (access control, encrypted connections) to protect your data, appropriate to the kind of information this platform handles.

Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect a change in the law or in how the platform works. We recommend checking back here occasionally.

Contact

For any questions about this Privacy Policy or your data, contact [privacy contact email], or reach out through your school's Book Exchange moderators or administrators.