Privacy notice · draft
Privacy notice
Draft for review, not a final approved notice. This notice describes the current Rontab service. Operator details, retention periods and processing arrangements still require confirmation before public launch.
Who operates the service
The operator information supplied is Rontaab, London. Some details have not yet been registered or recorded, including the full legal identity, postal address and any company registration details. Privacy enquiries can be sent to rontabuk@gmail.com.
Information used
The service uses account email addresses, authentication credentials, profile information and selected cities. Seller records may include shop details, private contact information and uploaded media. Product visits, eligible points, reward participation, notification read status and administrative actions are recorded to operate the service.
Why information is used
Information is used for account access and recovery, email confirmation, seller administration, publishing listings, click-credit accounting, loyalty rewards, support and security. The final notice must confirm the legal basis for each purpose; this draft does not treat using the service as consent to unrelated processing.
Service providers and external shops
Supabase provides authentication, database and media-storage services. Hosting, email-delivery providers, processing locations and any international-transfer safeguards must be confirmed for deployment. External shops operate separately and apply their own privacy notices when you visit them. Support emails are handled through the Gmail address shown on the contact page.
Cookies and local storage
Authentication cookies maintain sessions. Browser storage records notification read status for guests and synchronises notification views. These features are separate from optional marketing tracking. Any additional analytics or tracking must be assessed and, where required, consent obtained before enabling it.
Retention and account closure
Retention periods and the account-closure process are not yet finalised. The current design retains reward and administrative audit history rather than deleting transactions from the application. The final policy must specify justified retention periods and how deletion, legal obligations and audit needs are balanced. Do not assume this draft promises indefinite retention or immediate deletion.
Your privacy rights
You may contact rontabuk@gmail.com to request access, correction or deletion of personal data, or to raise an objection or restriction request where applicable. Rights are subject to applicable law and lawful exceptions. You may also raise concerns with the UK Information Commissioner's Office at ico.org.uk.
Security and updates
Access controls and authentication help protect account information, but no service can guarantee absolute security. Never share account passwords or recovery links. This draft must be reviewed against the deployed service and completed before being adopted as the final notice.