Privacy Policy

1. Who controls your information

MakeThatTwo is the controller of personal information processed for the platform.

Contact: hello@thecommonsociety.co.uk

Operator: MakeThatTwo
Business address:
Suite A
82 James Carter Road
Mildenhall
IP28 7DE

2. Information we may collect

We may collect account and contact details; date of birth; legal identity details; identity document and selfie images submitted for verification; verification status; public display name; profile text and photographs; location information you choose to provide; booking, messaging, check-in/check-out and cancellation records; payment and payout references; reports, complaints and support communications; device, security and technical logs; and information required for tax or legal reporting.

Payment providers may process card, bank and payout information under their own privacy terms. MakeThatTwo does not need users to send card details through platform messages.

3. Public profile information

Information deliberately added to a public profile may be visible to other users, including a display name, photographs, public location, profile description, interests and other profile fields.

A user's legal name and verification images are not intended to appear on the public profile merely because they were supplied for verification.

4. Why we use information

We use information to create and operate accounts and profiles; provide booking and messaging features; verify identity and age; process payments and payouts; operate check-in/check-out; prevent fraud and misuse; investigate reports and disputes; enforce platform rules; provide support; comply with legal, tax and regulatory duties; and establish, exercise or defend legal claims.

Where required, we rely on an appropriate lawful basis under UK data-protection law, including performance of a contract, legal obligation, legitimate interests and consent where consent is the appropriate basis.

5. Identity and age verification

Identity and age verification is used to confirm a user's identity and that they are aged 18 or over for access to booking features.

Verification images are intended to be held for up to 30 days after the relevant verification process and then securely deleted, unless a longer period is reasonably necessary because of a legal obligation, active fraud/safety investigation, dispute or legal claim. Verification status and limited audit records may be retained for longer where necessary.

6. Sharing

We may share information with service providers that support hosting, databases, authentication, identity verification, payments, communications, security and professional advice; with another user where necessary to operate a booking; and with regulators, HMRC, law enforcement, courts or other authorities where required or permitted by law.

We do not sell personal information to advertisers.

7. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, tax, accounting, fraud, safety, dispute and claims requirements. Retention periods are reviewed and information should be deleted or anonymised when it is no longer required.

8. Security

We use proportionate technical and organisational measures intended to protect personal information. No online service can guarantee absolute security. Users must keep login credentials secure and should report suspected unauthorised access promptly.

9. Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict personal information, object to certain processing, receive certain data in portable form, and complain to the Information Commissioner's Office.

Some requests may be limited where information must be retained or processed for legal obligations, fraud prevention, safety, disputes or legal claims.

10. Contact

Privacy requests: hello@thecommonsociety.co.uk.

This policy may be updated to reflect changes to the service, law or processing activities. Material changes will be communicated where required.