We may collect and use the following personal information to provide and operate Pramble:

• Account information, including your name, email address, username or display name and registration details.
• User-generated content and contributions, including path ratings and classifications, place ratings, reviews or comments, saved places, added points of interest and other information you choose to contribute to the Pramble map or community.
• Location information and GPS data, where you choose to use location-based features or record or mark a path.
• Website and app usage information, including information about how you interact with Pramble and technical information needed to operate and secure the service.
• Payment and transaction information, where you make a payment or support contribution. Payment card details are processed by our payment service providers. Pramble does not store full payment card details.
• Information you provide when contacting us, including correspondence, enquiries, complaints and related records.
• Information relating to your use of Pramble, including saved places, contributions and activity associated with your account.

We use this information to:

• provide and operate Pramble and its features;
• create and manage user accounts;
• provide map, location and geospatial features;
• allow users to contribute ratings, classifications, reviews and places;
• process payments, contributions and subscriptions;
• maintain the security and integrity of the service;
• prevent misuse, fraud and unauthorised access;
• respond to enquiries and complaints;
• improve the functionality, performance and user experience of Pramble;
• send service-related communications; and
• where you have provided the necessary consent, send optional marketing or promotional communications.

Some Pramble features use location information.

When you use Locate Me, your device provides your location to your browser so that Pramble can show your position and centre the map. For this feature, the location is used on your device and is not sent to Pramble's backend or to our routing or place-search providers as part of the Locate Me request.

When you record a path, your device provides GPS location information while recording. This information is sent to Pramble and to OpenRouteService (ORS) so that the recorded route can be matched to the footpath network. Location information used during recording is not intended to be permanently stored simply because you start recording.

If you save a recorded path, the resulting route geometry is stored as part of your contribution and may be displayed publicly on the Pramble map. Public route geometry may remain available after an account is closed where it forms part of the Pramble community map or route database.

When you mark a path manually, the points you select are sent to Pramble and may be sent to OpenRouteService so that the selected route can be matched to the footpath network. A saved marked path may form part of the public Pramble map.

When you view or search the map, Pramble may send the area of the map currently being viewed or searched, such as a map viewport or search area, to place-data providers such as Geoapify or Overpass so that relevant places can be displayed. This is the area of the map being viewed or searched and is not necessarily your device's GPS location.

When you add or confirm a place, the location of the place you select, and in some cases your device location when confirming a place, may be sent to relevant place-data or geocoding providers. The resulting place information and coordinates may be stored as part of the public Pramble map.

Pramble also uses OpenStreetMap/Nominatim for relevant geocoding and reverse-geocoding operations. For example, coordinates associated with a place may be used to obtain an address or nearby-location description.

You can control access to location information through your device or browser settings. If you do not provide location access, some location-based features, including Locate Me and route recording, may not be available.

Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the purpose, we rely on contract, legitimate interests, legal obligation or consent.

We rely on contract where processing is necessary to provide the Pramble service or features you have requested, including managing your account and providing account-related functionality.

We rely on legitimate interests where processing is necessary for purposes such as operating, maintaining, securing and improving Pramble; providing relevant map and location-based features; preventing misuse; protecting user accounts and the service; responding to enquiries; and understanding how the service is used.

When relying on legitimate interests, we consider whether the processing is necessary and proportionate and whether the interests or fundamental rights and freedoms of individuals override our interests.

We process information you submit to Pramble, such as ratings, classifications, reviews, saved places and added points of interest, because this is necessary to provide the community and mapping features you choose to use.

Where appropriate, information contributed to the public Pramble map may be displayed to other users. We aim to minimise the amount of personal information displayed publicly.

We rely on contract and legitimate interests to manage accounts, authenticate users, maintain security, prevent unauthorised access and protect the integrity of Pramble.

We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures may include access controls, authentication procedures, encryption in transit where available, monitoring, backups and other security practices appropriate to the nature of the information processed.

No method of transmission over the internet or electronic storage is completely secure. While we take reasonable steps to protect personal information, we cannot guarantee absolute security.

We process payment and transaction information where necessary to process contributions, subscriptions and other payments you choose to make.

Payment processing is provided by third-party payment providers. Pramble does not store full payment card details. Payment card information is processed directly by our payment service providers in accordance with their own privacy and security requirements.

We may send communications that are necessary to provide the service, such as account verification, password-reset messages, security notifications and other important service updates.

For optional marketing communications, we rely on your consent where consent is required. You can withdraw marketing consent at any time.

You also have an absolute right to object to direct marketing.

We may process personal information where necessary to comply with legal, tax, accounting or other legal obligations.

We may process information you provide when contacting us to respond to enquiries, investigate complaints, maintain appropriate records and establish, exercise or defend legal claims.

Depending on the circumstances, we rely on contract, legitimate interests or legal obligation.

Depending on the circumstances, you may have rights under UK data protection law including:

• the right to access your personal information;
• the right to have inaccurate personal information corrected;
• the right to have personal information erased;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability; and
• the right to withdraw consent where we rely on consent.

You also have the right to object to direct marketing.

To exercise your rights, contact pramble.io@gmail.com.

We will normally respond to a valid request without undue delay and within the applicable statutory time limit.

We may obtain personal information:

• directly from you;
• from your use of Pramble;
• from publicly available sources;
• from suppliers and service providers;
• from authentication providers when you choose to sign in using them; and
• from other third parties where necessary to provide, secure or maintain Pramble.

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

Account information is generally retained while your account remains active and for a reasonable period afterwards where necessary for security, legal, accounting or dispute-resolution purposes.

User-generated content and map contributions are generally retained while the contribution remains relevant to the Pramble map or community. Contributions may remain after an account is closed where they form part of the map, route database, community information or other content that supports the operation and usefulness of Pramble.

Saved route geometry and public place contributions may therefore remain available after an account is closed. Where appropriate, identifying information may be removed, contributions may be attributed to an anonymous or former user account, or the contribution may be anonymised.

Location information collected temporarily while using features such as Locate Me or route recording is not intended to be retained as a separate location history. Where location information forms part of a saved path, place or other contribution, it may be retained for as long as that contribution remains part of the Pramble map or community.

Payment and transaction information is retained for as long as necessary to meet applicable tax, accounting and legal requirements.

Information relating to enquiries and complaints is normally retained for a reasonable period after the matter has been resolved, taking account of any potential legal or regulatory requirements.

Security and technical information is generally retained for shorter periods appropriate to the security or operational purpose for which it was collected, unless longer retention is necessary to investigate an incident or comply with a legal obligation.

Marketing consent records are retained for as long as necessary to demonstrate and manage your consent and comply with applicable requirements.

Retention periods may vary depending on the nature of the information, how the service is used, and applicable legal, regulatory, accounting, security and dispute-resolution requirements. We aim not to keep personal information for longer than is necessary and periodically review retention practices to identify information that can be deleted or anonymised.

We periodically review the personal information we hold and delete or anonymise information when it is no longer necessary.

We may share personal information with organisations that provide services necessary to operate Pramble.

These may include:

• Base44 — application hosting, database, authentication and backend infrastructure;
• Wix / Wix Payments — payment processing;
• Geoapify — place, venue and geospatial services;
• OpenRouteService (ORS) — routing and route-matching services;
• OpenStreetMap / Nominatim — geocoding and reverse-geocoding services;
• Overpass — OpenStreetMap data queries used to obtain place information;
• OpenFreeMap — map tile services;
• Cloudflare — security and anti-abuse services; and
• Google, Apple, Microsoft and Facebook — authentication services when you choose to use the relevant sign-in option.

The information shared with a particular provider depends on the feature being used. For example, route-recording data is sent to OpenRouteService for route matching, while map-area information may be sent to place-data providers to display relevant places.

We may also use other technology and service providers where reasonably necessary to operate, secure and improve Pramble.

We may disclose personal information where necessary to comply with a legal obligation, respond to lawful requests from authorities, establish or defend legal claims, or protect the rights, property or security of Pramble, its users or others.

We may also share information with professional advisers where reasonably necessary, subject to appropriate confidentiality obligations.

Some information that you choose to contribute to Pramble may be displayed publicly or made available to other users, including information such as path classifications, saved route geometry, place ratings, added points of interest and reviews or comments.

Public route and place information may include geographic information such as the location of a path or place.

Public contributions may remain visible after an account is deleted where they form part of the community map, route database or other information that supports the operation and usefulness of Pramble.

Where appropriate, identifying information may be removed, contributions may be attributed to an anonymous or former user account, or contributions may be anonymised.

We encourage you not to include unnecessary personal information in public contributions.

Some of our service providers and their subprocessors may process personal information outside the UK.

Where a restricted international transfer takes place, we use an appropriate transfer mechanism or safeguard recognised under UK data protection law, such as an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism where applicable.

Information about the relevant safeguards can be obtained by contacting us at pramble.io@gmail.com.

Pramble is a family-friendly service and may be used in connection with activities involving children. We do not knowingly collect special-category personal information from children and do not intentionally request such information.

When designing and operating Pramble, we aim to take account of children's privacy interests and the principles set out in the Information Commissioner's Office Age Appropriate Design Code where relevant.

If we become aware that we have collected personal information relating to a child in circumstances requiring additional protection or parental involvement, we will take appropriate steps in accordance with applicable law.

Pramble may use cookies and similar technologies that are necessary for the operation, security and functionality of the website or app.

Where we use non-essential cookies or similar technologies, including analytics technologies, we will provide the appropriate information and obtain consent where required by applicable law.

Analytics technologies are not automatically exempt from the consent requirements simply because they are used for analytics.

If you have concerns about how we use your personal information, please contact us first:

Email: pramble.io@gmail.com

We will consider and respond to your complaint in accordance with our data protection obligations.

You also have the right to complain to the Information Commissioner's Office (ICO) if you are unhappy with how we have handled your personal information.

Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Telephone: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint