Privacy Policy
1. Who We Are
Juzt-Tap is operated by DreamDynamics by H&S. We are the data controller for personal data collected through the Platform. Our contact details are at the bottom of this policy.
2. Data We Collect
| Category | What we collect | When |
|---|---|---|
| Account data | Full name, email address, password (hashed), professional type, language preference | At registration |
| Profile data | Job title, bio, skills, portfolio items, intro video URL, location, social links, cover photo, avatar | When you edit your profile |
| Verification data | Government-issued ID (front and back), selfie holding ID, submission notes | When you request verification |
| Consent data | Date, time, IP address and version of Terms & Privacy Policy accepted | At registration |
| Communication data | Messages sent and received on the Platform | When you use messaging |
| Usage data | Pages visited, features used, NFC card scans (time, approximate location) | During Platform use |
| Technical data | IP address, browser type, operating system, session identifiers | Automatically on access |
| Payment data | Billing name, email; card details are processed directly by our payment processor and never stored by us | When you subscribe |
3. How We Use Your Data
- To provide the Platform - create and manage your account, display your profile, enable messaging, deliver NFC card features
- To verify identity and credentials - review submitted documents, assign verification levels and badges
- To personalise your experience - recommend connections, suggest opportunities, surface relevant content
- To communicate with you - send account emails (verification, security alerts, password resets), service updates and, with your consent, marketing communications
- To ensure safety and security - detect fraud, abuse, spam and malicious activity; enforce our Terms
- To comply with legal obligations - respond to lawful requests from authorities; maintain required records
- To improve the Platform - analyse usage patterns, diagnose bugs, run A/B tests
- To evidence consent - record that you accepted our Terms at the specific date, time and IP for legal compliance
4. Legal Basis for Processing
| Processing activity | Legal basis |
|---|---|
| Creating and managing your account | Performance of contract |
| Displaying your public profile | Performance of contract / Legitimate interests |
| Identity verification (documents) | Explicit consent (you choose to submit) |
| Sending transactional emails | Performance of contract |
| Marketing communications | Consent (you may opt out at any time) |
| Fraud detection and security | Legitimate interests / Legal obligation |
| Recording terms acceptance | Legal obligation / Legitimate interests |
| Analytics and Platform improvement | Legitimate interests |
5. Data Sharing and Third Parties
We do not sell your personal data. We share data only in the following circumstances:
- Other users: Your public profile information is visible to other Platform users according to your privacy settings
- Service providers: Hosting providers, email delivery services, payment processors - all bound by data processing agreements and prohibited from using your data for their own purposes
- NFC card fulfilment: Your name and delivery address are shared with our card manufacturing and courier partners
- Legal authorities: We disclose data when required by law, court order or to protect the safety of users or the public
- Business transfers: In the event of a merger or acquisition, your data may be transferred; we will notify you in advance
All third-party processors are carefully selected and bound by appropriate data protection agreements.
6. Data Retention
| Data type | Retention period |
|---|---|
| Account and profile data | For the life of your account, plus 90 days after deletion request |
| Identity verification documents | Deleted within 30 days of final verification decision |
| Messages | For the life of your account; deleted with your account |
| Consent records (terms acceptance) | 7 years (legal compliance requirement) |
| Audit and security logs | 2 years |
| Payment records | 7 years (tax and financial regulation) |
| NFC scan events | 2 years from scan date |
After the retention period, data is securely deleted or anonymised.
7. Security
We implement technical and organisational measures to protect your data, including:
- Passwords stored using bcrypt hashing - we cannot read your password
- HTTPS/TLS encryption for all data in transit
- Verification documents stored with restricted access, deleted after 30 days
- Regular security reviews and access controls for staff
- CSRF protection on all forms, rate limiting on authentication endpoints
No system is completely secure. If you discover a security vulnerability, please disclose it responsibly to legal@juzt-tap.com.
8. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies: Session management, CSRF tokens, language preference - required for the Platform to function
- Preference cookies: Theme (light/dark mode) - stored locally
- Analytics: We may use privacy-respecting analytics to understand Platform usage; no data is sold to advertisers
You can manage cookies through your browser settings. Disabling essential cookies may prevent the Platform from functioning correctly.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
To exercise any right, contact us at legal@juzt-tap.com. We will respond within 30 days. Identity verification may be required before we process your request.
10. Children's Privacy
Juzt-Tap is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us immediately and we will delete the account and all associated data within 72 hours.
11. International Data Transfers
Your data may be processed on servers located outside your country of residence. Where we transfer data internationally, we apply appropriate safeguards such as standard contractual clauses or equivalent mechanisms to ensure your data receives an equivalent level of protection.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days before they take effect and display a notice on the Platform. The "Last updated" date at the top always reflects the current version.
13. Contact and Complaints
For privacy enquiries, data subject requests or complaints:
DreamDynamics by H&S
Email: legal@juzt-tap.com
Response time: within 30 days (legal requirement)
If you are in the European Union and we are unable to resolve your complaint, you have the right to lodge a complaint with your local data protection authority.