Privacy Policy

The Grand Send ("we", "us", "our") is a tool that helps people organise stag and hen weekends - building a plan, splitting costs, and tracking who has paid. This policy explains what personal data we collect, why, and what rights you have. It is written to comply with UK data protection law (UK GDPR and the Data Protection Act 2018).

The Grand Send is operated by Spartickles Limited, based in the United Kingdom.

What we collect

We only collect what we need to run an event:

• Your name - the first name you enter when you create or join a trip.
• Your email address - used to sign you in and, if you organise a trip, to let you get back into it from another device.
• Event details - trip dates, destination, the plan, cost items, and payment status (who has paid and who hasn't) for the trips you organise or join.

We do not collect payment card details, bank details, or any financial account information. See the note on money below.

How we use it

We use this information to:

• Create and run the trips you organise or join.
• Sign you in using a one-time link sent to your email (a "magic link").
• Show the group who's coming, what the plan is, and who has paid.
• Send reminders that you choose to send (these go out through your own messaging apps - we don't email or message your group on your behalf).

Legal basis. We process your data on the basis of our legitimate interest in providing the service you have chosen to use, and, where relevant, your consent (for example, when you enter your email to join a trip). You can withdraw consent at any time by asking us to delete your data.

Analytics

We use Lovable's privacy-friendly, cookieless visitor analytics. It collects aggregate data such as visitor counts, page views, session duration, top pages, approximate country and device type. IP addresses are used transiently to derive that high-level information and are not stored to profile or identify individuals.

We use this analytics data on the basis of our legitimate interest in understanding how the app is used and improving it. It is not tied to your email address or other account information, and we do not use it to track you across other websites.

A note on money

The Grand Send does not hold, process, or transfer any money. When a group collects money for a trip, payments are made directly to the organiser using the organiser's own payment method (for example, their bank or payment-app handle). The app only records who has paid and who hasn't, as entered by the organiser. We never see, touch, or handle the group's money, and we do not collect card or bank details.

Who we share it with

We don't sell your data or share it for advertising. We use the following service providers ("data processors") to run the app:

• Supabase - database and authentication (stores your account and event data securely).
• Lovable - hosting, email delivery for sign-in links, and cookieless visitor analytics.

These providers process data on our behalf, under their own data protection terms. We share your data with them only as needed to run the service. We may disclose information if required by law.

How long we keep it

We keep your data for as long as you have an active event, and for a reasonable period afterwards so you can return to past trips. We aim to delete event data within 12 months of a trip's end date unless you ask us to keep or remove it sooner. You can ask us to delete your data at any time (see below).

Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Delete it ("right to erasure").
• Object to or restrict how we use it.
• Complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

To exercise any of these, email us at hello@thegrandsend.com and we'll respond within the timeframes the law requires (normally one month).

Data security

We use reputable providers (Supabase, Lovable) that apply industry-standard security. No system is perfectly secure, but we take reasonable steps to protect your information.

Children

The Grand Send is intended for adults organising adult events. It is not directed at anyone under 18, and we don't knowingly collect data from children.

Changes to this policy

We may update this policy as the service develops. We'll post the updated version here with a new "last updated" date.

Contact

Questions or requests about your data: hello@thegrandsend.com