Privacy Policy

Privacy Policy – Chat Buddy

Effective Date: 24 September 2025
Last Updated: 24 September 2025
Policy Version: 3.1

1. Introduction

Chat Buddy (“Chat Buddy”, “we”, “us”, “our”) operates the online chat service available at https://chat-buddy.com

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Chat Buddy is a 16+ service. We do not knowingly permit children under the age of 16 to use the service.

2. Age Restriction

  • Chat Buddy is strictly for users aged 16 years and over.

  • We do not knowingly collect or process personal data relating to children under 16.

  • If we become aware that a user is under 16, we will take steps to remove the account and associated data, subject to legal and safeguarding obligations.

3. Information We Collect

Information You Provide

  • Account details: username and email address (if you register)

  • Messages: content sent in public and private chat rooms

  • Profile information: any optional details you choose to provide

  • Support communications: information you provide when contacting us

Information Collected Automatically

  • Technical data: IP address

  • Usage data: chat activity metadata (e.g. timestamps, chat participation)

  • Session data: login and logout times

We do not collect payment data and do not sell personal data.

4. Lawful Bases for Processing (UK GDPR)

We process personal data under the following lawful bases:

  • Performance of a contract – to provide chat functionality

  • Legitimate interests – moderation, abuse prevention, service security

  • Legal obligation – compliance with UK law or lawful requests

  • Consent – where required (e.g. optional features)

5. How We Use Your Information

We use personal data to:

  • Operate and maintain the chat service

  • Authenticate users and manage accounts

  • Prevent spam, harassment, abuse, and misuse

  • Enforce our Terms of Service and community rules

  • Investigate safety, safeguarding, or legal issues

  • Comply with legal obligations

Messages may be automatically or manually reviewed in limited circumstances for moderation, safeguarding, abuse prevention, or legal compliance. Access is restricted to authorised personnel only and is not used for advertising or profiling.

6. Data Sharing

We only share personal data in the following circumstances:

  • With service providers who assist in operating the service (under contractual safeguards)

  • When required by law, court order, or lawful authority

  • In connection with a business transfer or restructuring

We do not share personal data with advertisers, data brokers, or social media platforms.

7. Safeguarding & Law Enforcement

Chat Buddy takes safeguarding seriously.

  • We may preserve data where required for safety or legal reasons.

  • Personal data is disclosed to law enforcement only where legally required or authorised, and in accordance with UK law.

  • We do not voluntarily provide user data without appropriate legal authority.

8. Data Retention

We retain personal data only for as long as necessary:

  • Public chat messages: retained for up to 24 hours

  • Private messages: retained for up to 30 days

  • Unverified accounts: automatically deleted after 12 hours of inactivity

  • Account metadata / logs: retained only as necessary for security and legal compliance

Once retention periods expire, data is automatically deleted or anonymised unless required to be preserved by law.

9. Data Security

We implement appropriate technical and organisational measures, including:

  • Encryption in transit and at rest where appropriate

  • Access controls and limited staff access

  • Regular security monitoring

  • Secure backups

No system is completely secure, but we take reasonable steps to protect personal data.

10. Your Rights (UK GDPR)

Under UK data protection law, you may have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent where applicable

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made by emailing [email protected]

11. International Data Transfers

Your data may be processed outside the UK. Where this occurs, appropriate safeguards are applied to protect your information in accordance with UK GDPR.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Continued use of the service constitutes acceptance of the updated policy.

13. Contact Us

Email: [email protected]