Privacy Notice
How Notificity handles account details, community reports, private support and website services.
Updated 2026-10-19 · v0.9.3
1. Who this notice covers
This notice covers the Notificity platform and its country portals. The contact details shown above identify the operator details currently recorded for the service. Contact our privacy team about this notice or your data. Participating organisations and linked websites may be separate controllers for their own activities.
2. Information we collect
Account information includes your account name, email, name, phone, address, country and optional profile photo. We also process reports, locations, attachments, comments, ratings, follows, support requests, organisation membership, case conversations and moderation records. Security logs may include IP addresses, device information, request times and abuse signals. We obtain directory information from public organisation websites; editorial reports identify their public sources.
3. Purpose and lawful basis
We use account and workspace information to provide requested services and administer our relationship with users. Moderation, access control, fraud prevention, protecting people and maintaining reliable public records are legitimate interests, assessed against individual rights. We rely on consent for optional Analytics and optional anonymous support pins, and explicit consent for voluntarily supplied health or disability information in private support. Legal duties may require limited retention or disclosure. Being a civic platform does not make us a public authority.
4. What becomes public
Approved reports, approximate map locations, permitted attachments, reviews, organisation replies and public progress can be seen, copied and indexed by search engines worldwide. Personal contact details and profile photos are private. Your account name is public only where you choose its publication for a complaint or review. Do not include another person’s identity, home address, medical details, faces or identifiable criminal allegations in public submissions. Check file contents and metadata before uploading; not every file type has its metadata automatically removed.
5. Private requests and sensitive information
Private support descriptions and contact details are restricted to you and authorised Notificity administrators. Ordinary organisation membership does not grant access to them. Provide only the minimum information needed; do not upload medical records, identity documents, banking credentials or information about another person without authority. Health and disability information requires the separate explicit-consent choice. Non-sensitive practical requests do not require that choice. Withdraw that consent by contacting the privacy team; withdrawal does not make earlier lawful processing unlawful.
6. Organisations and case conversations
Assigned organisations can access the case information needed for their assigned work. Restricted conversations are visible to authorised participants, not to the public. Public progress summaries and evidence require review. Organisation managers can see their team’s names and account email addresses, but not private home addresses or profile photographs. Organisations may export permitted case statistics under their workspace permissions.
7. Service providers and international processing
Hosting, security and technical providers process information needed to operate the platform. Google provides Maps, reCAPTCHA and, only with permission, Analytics. Tawk.to provides chat when you open it. Maps or embedded services may contact their provider when loaded; a refusal of Analytics does not disable all functional services. Providers can process information outside your country. A local country portal is not a promise of local-only hosting. Contact us for destination and transfer-safeguard information applicable to your data; provider notices are linked in the Cookie Policy.
8. Retention and removal
Retention is determined by the purpose, account status, whether a case remains open or disputed, moderation appeals, security investigations and applicable legal requirements. We review requests for deletion or anonymisation individually. Closing a request or removing a public listing does not itself erase the underlying record, audit history, backups or copies held by third parties. We restrict retention to information still needed for a justified purpose; contact us to request a review of your information.
9. Your rights and objection
Depending on the law and processing basis, you may request access, correction, erasure, restriction, portability or withdrawal of consent. You may object specifically to processing based on legitimate interests, including public availability of information about you. Email the privacy team, describe the request and identify the relevant account or report. We may request proportionate identity checks and respond within applicable statutory deadlines, explaining any permitted extension. These rights can have legal exceptions.
10. Cookies and control
Analytics is optional and is not loaded before you accept. Change your choice through Cookie preferences. Session and security tools support login and abuse prevention. Our Cookie Policy explains cookies, browser storage and providers. Browser permissions control device location; entering a postcode or selecting a map point is an alternative to sharing GPS.
11. Children, automation and security
The platform is intended for adults aged 18 and over. Do not submit children’s identities or safeguarding details; contact the privacy team if such information is present. We use reCAPTCHA risk signals to prevent abusive submissions, which can block an attempt; contact us if you cannot use the service. We do not currently operate AI report analysis or automated decisions on entitlement to aid, employment, healthcare or other significant benefits. Security measures reduce risk but cannot guarantee absolute security.
12. Complaints and changes
You may complain to the UK Information Commissioner’s Office, the relevant German/EU supervisory authority, or Türkiye’s Kişisel Verileri Koruma Kurumu where applicable. You can contact us first without losing your right to complain to a regulator. We update this notice when the service changes and show the policy version and review date. We do not sell personal contact details or provide automatic forwarding of reports to authorities.