Privacy Policy

1. Data Controller

BinBosh is operated by Dan Dadovic Digital, a sole trader. If you have any questions about this policy or your data, contact us at privacy@binbosh.co.uk.

2. What Data We Collect

• Anonymous user ID — generated by Firebase Anonymous Auth. No personal information is attached unless you choose to link an account.
• Postcode and street name — street-level only. We never collect house numbers or exact addresses.
• Bin collection schedules — schedules you create or adopt, including bin type, colour, collection day, and recurrence.
• Notification preferences — push notification tokens and reminder time settings.
• Email address— only if you opt in to email reminders (a Premium feature) or link your account. May also be used for essential account communications.
• Feedback submissions — bug reports and data corrections you submit.
• Analytics data — pages visited, time on site, device type, and approximate location (city-level, not precise). Collected via Google Analytics 4 only if you accept cookies. No personally identifiable information is sent to Google.
• Payment data— if you subscribe to BinBosh Premium, we store your Stripe customer ID, subscription ID, subscription status, and subscription dates in your user profile. We do NOT store your card number, CVV, or full payment details — these are handled entirely by Stripe.

3. Legal Basis

We process data under the following legal bases under UK GDPR:

• Legitimate interest — for core functionality: storing schedules, sending bin day reminders, and improving the service.
• Consent— for optional features such as email notifications and analytics cookies. You can withdraw consent at any time.
• Contract— for processing payments when you subscribe to BinBosh Premium.

4. Cookies

• Firebase auth session cookie — essential for the app to function. No consent required under PECR (strictly necessary).
• Google Analytics cookies (_ga, _ga_*) — non-essential cookies used to distinguish unique visitors and understand how the site is used. These are only set if you accept cookies via the consent banner.
• We do not use any advertising or marketing cookies.

You can change your cookie preference at any time by clearing your browser's localStorage for this site (the consent banner will reappear). You can also use Google's opt-out browser add-on to block Google Analytics across all websites.

5. Analytics

We use Google Analytics 4 to understand how visitors use BinBosh — which pages are visited, how long people spend on the site, what devices they use, and approximate location (city-level). This helps us improve the service.

No personally identifiable information is sent to Google. Analytics data is retained for 14 months. Google Analytics only loads if you accept cookies via the consent banner shown on your first visit.

For more information, see Google's privacy policy and how Google uses data from sites that use their services.

6. Data Sharing

We do not sell your data to anyone. We share data only with:

• Firebase / Google — hosting, authentication, database, and analytics.
• Vercel— web hosting and serverless functions.
• Upstash— rate limiting to prevent abuse.
• Stripe— payment processing, only if you subscribe to BinBosh Premium. See Stripe's privacy policy.
• Resend— email delivery for reminders and admin notifications. Only processes emails if you opt in to email reminders.
• ImprovMX— inbound email forwarding for @binbosh.co.uk addresses. See ImprovMX's privacy policy.

7. Data Retention

Anonymous data is kept while your account is active. You can delete your subscriptions at any time from the Settings page. Full account deletion is available via the “Delete my data” button in Settings. If you have trouble, email privacy@binbosh.co.uk and we will handle it for you.

8. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (right to be forgotten)
• Data portability — receive your data in a portable format
• Object to processing
• Withdraw consent at any time for consent-based processing

To exercise any of these rights, email privacy@binbosh.co.uk or use the “Delete my data” function in Settings. We will respond within 30 days.

9. Children

This service is not directed at children under the age of 13. We do not knowingly collect data from children.

10. Changes to This Policy

Any changes will be posted on this page with an updated effective date.

11. Contact

For any questions or concerns, email privacy@binbosh.co.uk.