Privacy Policy

Cornvio ("we", "us", "our") is a free local item-sharing platform serving communities across Cornwall. This policy explains what personal information we collect, why we collect it, how long we keep it, and your rights over it. If you have any questions, contact us at hello@cornvio.co.uk.

1. Information we collect

When you register and use Cornvio, we collect the following:

• Identity: First name, last name, and your chosen public username.
• Contact: Email address, and optionally a phone number.
• Location: Your general town or area within Cornwall (selected from a list — not your exact address).
• Profile: An optional short bio you choose to share.
• Listings: Item titles, descriptions, photos, pickup location (town level), and condition information you provide when posting.
• Messages: Messages sent between users through the platform.
• Usage data: Your last active time, login timestamps, and IP address (used for security and moderation only).
• Security tokens: Hashed tokens used for "remember me" and trusted device features. We never store these in plain text.

We do not collect payment information. All items on Cornvio are free or for nominal exchange.

2. Why we collect it

• To operate the service: Your account details, listings, and messages are necessary to provide the platform.
• Safety and moderation: Real names (first and last) are held privately to assist with moderation, dispute resolution, and safety investigations. They are never displayed publicly.
• Two-factor authentication: We send a one-time code to your email address each time you log in to protect your account.
• Communication: We send transactional emails (login codes, listing removal notices, message notifications). We do not send marketing emails.
• Legal compliance: We may retain certain information if required by law.

3. Location and privacy

Your location is stored at town or area level only. Exact collection addresses for items should only be shared privately between users when arranging a collection — never posted publicly on a listing. We display your selected town on your public profile to help local users connect. We do not use GPS or device location.

4. How long we keep your data

• Account data is kept for as long as your account is active.
• When you delete your account, your personal data (name, email, phone, bio) is removed within 30 days.
• Messages associated with your account are anonymised upon deletion.
• Listings you posted may remain visible in anonymised form after account deletion.
• Security logs (IP addresses, login timestamps) are deleted after 90 days.

5. Who your data is shared with

We do not sell, rent, or trade your personal data. The following limited sharing applies:

• Other users: Your public username, town, bio, and listings are visible to other users. Your real name, email, and phone number are never shown publicly.
• Hosting provider: Your data is stored on servers operated by our web hosting provider, who process it only to run the service.
• Legal authorities: We may disclose information if required by law or to protect the safety of users.

6. Your rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate data be corrected. You can update most of your own data via your profile settings.
• Deletion: Request that your account and associated personal data be deleted.
• Restriction: Request that we limit how we use your data while a dispute is resolved.
• Portability: Request a copy of your data in a portable format.

To exercise any of these rights, email us at hello@cornvio.co.uk. We will respond within 30 days.

7. Cookies and local storage

We use only essential cookies: a session cookie to keep you logged in, and optional "remember me" and "trusted device" cookies if you choose those options at login. We do not use advertising or tracking cookies.

8. Contact

For any privacy-related questions or requests, contact us at:
hello@cornvio.co.uk