Privacy Policy

This Privacy Policy explains how Sidetrack London (“Sidetrack”, “we”, “us”, or “our”) collects, uses, and shares personal information when you use www.sidetrack.london and related services (the “Service”).

Sidetrack is a London discovery magazine covering places, events, people, photography, and member tools such as personal maps, lists, follows, and updates.

If you have questions, contact us at info@sidetrack.london.

1. Who we are

The Service is operated by Sidetrack London. For privacy requests, email info@sidetrack.london.

2. Information we collect

2.1 Account information

When you create or update a Sidetrack account, we may collect:

• Email address
• Name or display name
• Password (stored as a secure hash, not plain text)
• Profile details you choose to add (for example location, date of birth, website, Instagram, TikTok)
• Profile photo you upload

Date of birth, if provided, is used to help show age-appropriate content and is not displayed publicly.

2.2 Sign-in with third parties

If you sign in with a third-party provider (for example Google, Facebook, X/Twitter, or Instagram), we receive information those providers share with us according to your settings with them. This typically includes your name, email address (where available), and profile image.

We do not receive your third-party password. Use of those providers is also governed by their own privacy policies.

2.3 Content and activity you create on Sidetrack

Depending on how you use the Service, we may store:

• Places you save (for example bucketlist, done, favourite)
• Ratings and reviews you leave on places
• People, members, and places you follow
• In-app updates/notifications related to follows
• Browser push notification subscriptions, if you enable them
• Map-related place data you add while using your personal map
• Email addresses submitted for event or gallery update lists

Some of this information may appear on public pages (for example published reviews and public member profiles).

2.4 Automatically collected technical information

Like most websites, we and our service providers may collect:

• IP address, browser type, device type, and general usage data
• Pages viewed, referring URLs, and approximate location derived from IP
• Cookies or similar technologies used for sessions, preferences, analytics, and advertising

2.5 Photos and media

Event and people photography on Sidetrack is primarily served via PhotoShelter and related image services. Purchase or rights for images may involve PhotoShelter and our communications with you. Images on the site remain subject to photographer and Sidetrack copyright.

3. How we use information

We use personal information to:

• Provide, maintain, and improve the Service
• Create and manage accounts, sign-in, and password resets
• Personalise content (including age-based visibility where applicable)
• Power member features such as maps, lists, follows, reviews, and updates
• Send transactional messages (for example password reset emails)
• Send optional updates you request (for example event or gallery updates)
• Deliver browser notifications if you opt in
• Measure site usage and improve performance
• Show advertising (where enabled)
• Protect the Service, prevent abuse, and comply with legal obligations
• Respond to support requests

4. Legal bases (UK / EEA users)

Where UK GDPR or EU GDPR applies, we process personal data on these bases as appropriate:

• Contract — to provide the Service you request (accounts, saved places, follows, etc.)
• Legitimate interests — to operate, secure, and improve Sidetrack, and to understand how the Service is used
• Consent — where required (for example optional marketing-style update lists, certain cookies/ads, or browser notifications)
• Legal obligation — where we must process data to comply with law

5. How we share information

We may share information with:

• Service providers who help us run the Service (hosting, email delivery, analytics, advertising, image hosting, authentication). These providers process data on our instructions or under their own terms where they act as independent controllers.
• Other users, when you choose to publish content (for example reviews on place pages or public profile details).
• Professional advisers or authorities, if required by law or to protect rights, safety, and security.
• A buyer or successor, if we are involved in a merger, acquisition, or asset sale (we will take reasonable steps to keep personal data protected).

We do not sell your personal information as a standalone product.

5.1 Examples of third-party services we may use

• Hosting and infrastructure (for example Heroku / cloud hosting)
• Email delivery for password resets and similar messages
• Google Analytics (usage measurement)
• Google AdSense (advertising)
• PhotoShelter (image galleries and related media)
• OAuth providers for social sign-in (Google, Facebook, X/Twitter, Instagram)
• Map / geocoding providers when resolving locations
• Browser push services (via your browser’s push infrastructure) if you enable notifications

These services have their own privacy policies. We encourage you to review them.

6. Cookies and similar technologies

We use cookies and similar technologies for:

• Essential site functions (for example keeping you signed in)
• Preferences and security
• Analytics
• Advertising (where enabled)

You can control cookies through your browser settings. Blocking some cookies may affect how the Service works (for example remaining signed in).

7. Public content

Content you choose to make public — such as reviews, ratings, and public profile fields — can be seen by other visitors and may be indexed by search engines. Do not post information you do not want to be public.

8. Data retention and deletion

We keep personal information for as long as needed to provide the Service and for legitimate business, legal, and security purposes.

You can request deletion of your personal data at any time:

• Signed-in members: use Delete my account & data on your account page
• Instructions and email requests: sidetrack.london/data-deletion
• Email: info@sidetrack.london

Facebook Login also uses our automated data deletion callback when you remove the app from Facebook. Deletion is subject to any legal retention requirements.

9. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS) in production and hashed passwords. No method of transmission or storage is completely secure.

10. International transfers

Our service providers may process data in the United Kingdom, European Economic Area, United States, or other countries. Where required, we rely on appropriate safeguards or provider mechanisms for international transfers.

11. Children

Sidetrack is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

12. Your rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Data portability, where applicable
• Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner’s Office)

To exercise these rights, email info@sidetrack.london. We may need to verify your request.

13. Social platforms and Instagram / Facebook

If you connect or interact with Sidetrack through Meta products (Facebook Login, Instagram, or related APIs), we process only the data those platforms provide or allow for the features we operate (for example account sign-in, or Instagram-related content features if enabled).

We use that data to provide the relevant Sidetrack features and not to sell it. You can manage permissions in your Facebook/Instagram account settings and disconnect access there.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after an update means you accept the revised policy, except where consent is required by law.

15. Contact

Sidetrack London
Email: info@sidetrack.london
Website: https://www.sidetrack.london

Public policy URL for app reviews and platform requirements:
https://www.sidetrack.london/privacy