1. Who We Are
OQN is operated by [company/trading name], based at [registered address], United Kingdom. We are the data controller for personal data collected through this platform.
If you have any questions about how we handle your data, contact us at [contact email].
↑ Back to top2. Data We Collect
2.1 Account Data
When you register, we collect your email address, chosen username, and a hashed password. You may optionally add a display name or venue name.
2.2 Activity Data
We record actions you take on the platform: questions and bundles created or purchased, ratings and validations submitted, token transactions, reputation events, and quiz sessions run.
2.3 Technical Data
We automatically collect IP address, browser type and version, device type, pages visited, and timestamps. This is used for security, fraud prevention, and analytics.
2.4 Communications
If you contact us by email or through the platform, we retain a record of that correspondence.
2.5 Payment Data
If you request a cash payout, we collect the bank or payment details you provide. We do not store full payment card details; any card processing is handled by our payment provider.
↑ Back to top3. How We Use Your Data
| Purpose | Data used |
|---|---|
| Providing and managing your account | Account data, activity data |
| Running the token economy and marketplace | Activity data, transaction records |
| Sending operational emails (e.g. password reset, policy changes) | Email address |
| Sending marketing emails (only if opted in) | Email address |
| Fraud and abuse detection | Technical data, activity data |
| Platform analytics and improvement | Aggregated / anonymised activity and technical data |
| Processing cash payouts | Payment details, transaction records |
| Complying with legal obligations | Any data required by law |
4. Lawful Basis for Processing
| Processing activity | Lawful basis |
|---|---|
| Account creation and management | Contract (UK GDPR Art. 6(1)(b)) |
| Token economy and marketplace transactions | Contract (Art. 6(1)(b)) |
| Operational emails | Contract (Art. 6(1)(b)) |
| Security, fraud prevention, analytics | Legitimate interests (Art. 6(1)(f)) |
| Marketing emails | Consent (Art. 6(1)(a)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
5. Data Sharing
5.1 We Do Not Sell Your Data
We do not sell, rent, or trade your personal data to third parties.
5.2 Service Providers
We share data with trusted service providers who help us operate the platform, including hosting providers, email delivery services (Brevo or similar), and payment processors. These providers act as data processors under contract and may not use your data for their own purposes.
5.3 Legal Requirements
We may disclose data if required by law, court order, or to protect the rights and safety of OQN or others.
5.4 Business Transfers
If OQN is acquired or merges with another entity, your data may transfer to the new owner. We will notify you of any such change.
↑ Back to top6. Cookies
We use cookies and similar technologies to keep you logged in, remember your preferences, and collect analytics data. See our Cookie Policy for full details and how to manage your preferences.
↑ Back to top7. Data Retention
We retain your personal data for as long as your account is active. If you delete your account:
- Personal identifiers (name, email, hashed password) are deleted within 30 days.
- Content you published (questions, bundles) may remain in the marketplace in anonymised form unless you request full removal.
- Financial transaction records are retained for 6 years in anonymised form, as required by UK tax law.
- Aggregated analytics data that cannot identify you is retained indefinitely.
8. Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data (subject to legal retention requirements).
- Restriction — ask us to restrict processing in certain circumstances.
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interests or for direct marketing.
- Withdraw consent — withdraw consent for marketing at any time.
To exercise any of these rights, contact us at [contact email]. We will respond within one calendar month.
↑ Back to top9. Security
We use industry-standard security measures including bcrypt password hashing, HTTPS/TLS encryption in transit, and access controls on our servers. No system is completely secure; we will notify you promptly in the event of a data breach that affects your rights or freedoms.
↑ Back to top10. Children
OQN is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, please contact us at [contact email] and we will delete the account promptly.
↑ Back to top11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email and in-app notification at least 14 days before they take effect. The current version is always available at [platform URL]/legal/privacy-policy.html.
↑ Back to top12. Contact and Complaints
For any privacy-related queries, contact us at [contact email].
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority.
↑ Back to top