Privacy Policy

Effective Date: 14th May 2025

1. Introduction

Coco is operated by a UK-based sole trader. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

We are committed to ensuring that your privacy is protected and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following types of information:

• Account Information: Email address, hashed password, and account preferences
• Search Data: Keywords, filters, and search parameters you create and save
• Usage Information: How you interact with our service, including frequency and timing of searches

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and maintain our service, including processing your searches and delivering notifications
• To improve and personalize your experience with Coco
• To analyze usage patterns and optimize our service's functionality
• To communicate with you about your account, service updates, or support requests
• To prevent fraud and ensure the security of our platform

4. Lawful Basis for Processing

Under the UK GDPR, we process your personal data on the following legal bases:

• Contract: Processing necessary for the performance of our contract with you (our Terms of Use)
• Legitimate Interests: Processing necessary for our legitimate interests in providing, improving, and securing our service
• Consent: Where you have given specific consent for particular processing activities

5. Data Storage and Security

Your data is stored in secure PostgreSQL databases hosted on AWS. We implement appropriate security measures:

• Passwords are securely hashed using industry-standard algorithms
• All data is transmitted over secure HTTPS connections
• Database access is restricted to authorized personnel only
• Regular security assessments and updates are performed

6. Sharing Your Information

We do not sell or rent your personal information to third parties. We may share your information with:

• Service Providers: Third parties that help us deliver our service (AWS for hosting)
• Legal Requirements: When required by law or to protect our rights

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you close your account, we will retain your data for up to 30 days before deletion, unless retention is required by law or for legitimate business purposes.

8. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request a copy of your data in a portable format
• Withdraw any consent you've provided

To exercise these rights, please contact us using the details in the Contact section below. You also have the right to complain to the Information Commissioner's Office (ICO) if you believe we have not complied with data protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date." We recommend checking this policy periodically for updates.

10. Contact Us