Effective Date: February 20, 2025
Last Updated: April 30, 2025
At SnappyHour, we are committed to protecting the privacy and personal data of our users, partners, employees, and stakeholders. This Data Protection Policy outlines how we handle, process, store, and protect personal information in accordance with applicable laws, including the General Data Protection Regulation (GDPR) and other international standards.
1. Scope
This policy applies to:
- All personal data processed by SnappyHour across our platforms (mobile apps, websites, internal systems)
- Employees, contractors, partners, and service providers handling personal data on our behalf
- Data subjects whose information we collect or manage
2. Principles of Data Processing
We adhere to the following principles:
- Lawfulness, Fairness, and Transparency: Data is processed legally and transparently.
- Purpose Limitation: Data is collected for specific, explicit, and legitimate purposes.
- Data Minimization: We collect only what is necessary.
- Accuracy: Data is kept accurate and up-to-date.
- Storage Limitation: Data is retained only as long as necessary.
- Integrity and Confidentiality: Data is processed securely.
3. Legal Basis for Processing
We process personal data based on:
- User consent
- Fulfillment of a contract
- Legitimate interest of SnappyHour or our partners
- Compliance with legal obligations
4. Data We Process
We may collect and process:
- User account data (name, email, profile details)
- Location data (for venue offers and app personalization)
- Communication data (support messages, feedback)
- Technical data (device type, app usage logs)
- Business partner data (venue information, contacts)
See our Privacy Policy for more details on data collection.
5. Data Subject Rights
Under GDPR and other laws, you have the right to:
- Access your personal data
- Correct or update data
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Withdraw consent at any time
- Data portability (receive data in a usable format)
To exercise these rights, email us at [email protected].
6. Data Security
We implement appropriate technical and organizational measures to ensure the security of data, including:
- Encryption of data in transit and at rest
- Role-based access controls
- Regular audits and security reviews
- Secure coding and system patching
7. Data Sharing and Third Parties
We may share data with:
- Service providers (e.g., hosting, analytics, marketing tools)
- Business partners (e.g., venues using the SnappyHour platform)
- Legal authorities if required by law
All third parties are bound by data processing agreements (DPAs) to ensure GDPR compliance.
8. Data Retention
We retain personal data only as long as:
- Necessary to fulfill the purpose it was collected for
- Required by law or contractual obligation
Data is securely deleted or anonymized after this period.
9. International Data Transfers
If personal data is transferred outside the EU/EEA, we ensure:
- Adequate safeguards (e.g., Standard Contractual Clauses)
- User consent where applicable
10. Roles and Responsibilities
We are committed to maintaining a strong culture of data protection:
- A Data Protection Contact Point is available at [email protected]
- Employees receive regular training on privacy and data handling
- Contractors and partners are reviewed for compliance
11. Breach Notification
In the event of a data breach:
- We will notify relevant authorities within 72 hours
- Affected users will be informed where there is a high risk to their rights and freedoms
12. Updates to This Policy
We may revise this policy from time to time. Any changes will be posted at this URL with a revised date. Significant changes may also be notified via email or app notification.
Contact
If you have questions or concerns about this policy or your data, please contact:
SnappyHour Privacy Team
Email: [email protected]