⚠️ This document uses placeholder values marked in yellow that must be substituted before publishing.

Privacy Policy

Last updated: June 2025

This Privacy Policy explains how Big Beach Productions Ltd collects, uses, and protects your personal data when you use One Shot. We are committed to protecting your privacy and handling your data transparently and in accordance with applicable law.

1. Data Controller

The data controller responsible for your personal data is Big Beach Productions Ltd, [REPLACE WITH ADDRESS]. If you have any privacy-related questions, contact us at privacy@[REPLACE WITH DOMAIN].

2. What We Collect

We collect the following categories of personal data:

  • Account information: your name, email address, and a hashed version of your password (we never store your password in plain text).
  • Content: photos, videos, captions, comments, and other content you upload or create within One Shot.
  • Usage data: information about how you interact with the app, such as features used, groups created, and posts viewed.
  • Device and browser information: device type, operating system, browser type, IP address, and similar technical identifiers collected automatically when you use One Shot.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Providing the service: to operate One Shot, authenticate your account, and deliver your content to the groups you have shared it with.
  • Security: to detect and prevent fraud, abuse, and unauthorised access.
  • Legal obligations: to comply with applicable laws and respond to lawful requests from authorities.
  • Service improvement: to understand how the app is used (in aggregate and anonymised form where possible) and make it better.

We never use your data for advertising purposes. We do not sell, rent, or trade your personal data to any third party for commercial purposes.

4. Legal Basis (GDPR)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

  • Contractual necessity (Article 6(1)(b)): processing required to provide you with the One Shot service under our Terms & Conditions.
  • Legitimate interests (Article 6(1)(f)): security monitoring, fraud prevention, and service improvement, where these interests are not overridden by your rights.
  • Legal obligation (Article 6(1)(c)): compliance with applicable law, including law enforcement requests and reporting obligations.
  • Consent (Article 6(1)(a)): for optional analytics cookies, where you have provided consent via the cookie banner.

5. Data Retention

  • Account data is retained for as long as your account is active, plus 30 days after account deletion (to allow for recovery and legal obligations).
  • Content you have uploaded is deleted immediately upon your request or upon account deletion, subject to any legal hold obligations.
  • Usage and log data is retained for up to 90 days for security and diagnostic purposes.

6. Sharing Your Data

We do not sell your data. We share it only in the following limited circumstances:

  • Infrastructure providers: we use third-party hosting and CDN services to operate One Shot. These providers act as data processors under data processing agreements and may process your data only as directed by us.
  • Law enforcement: where we are legally required to disclose data by a court order, regulatory authority, or other lawful demand, we will comply. Where permitted by law, we will notify you.
  • Child protection: content that constitutes child sexual abuse material (CSAM) will be reported to the National Center for Missing & Exploited Children (NCMEC), the Internet Watch Foundation (IWF), and relevant authorities, without prior notice.

7. International Transfers

[REPLACE WITH DETAILS IF APPLICABLE — e.g., describe any transfers outside the UK/EEA and the safeguards in place, such as Standard Contractual Clauses or adequacy decisions]

8. Your Rights (GDPR)

If you are in the UK or European Economic Area, you have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: ask us to correct inaccurate or incomplete data.
  • Erasure: request deletion of your personal data (“right to be forgotten”).
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interests.
  • Restriction: request that we restrict processing of your data in certain circumstances.
  • Complaint: lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or your local supervisory authority.

To exercise any of these rights, contact us at privacy@[REPLACE WITH DOMAIN].

9. Cookies

One Shot uses cookies and similar technologies. See our Cookie Policy (Section 10) for full details. You can manage your cookie preferences via the cookie banner shown on first visit.

10. Cookie Policy

We use the following categories of cookies:

  • Strictly necessary cookies: these are essential for One Shot to function. They include session cookies and authentication tokens that keep you logged in. These cookies cannot be disabled.
  • Optional analytics cookies: with your consent, we may use analytics cookies to understand how One Shot is used in aggregate. These cookies help us improve the service. You can decline these via the cookie banner.

We never use third-party advertising cookies. No advertising network ever has access to your data through cookies or any other means.

11. Security

We take the security of your data seriously. All data is encrypted in transit (TLS) and at rest. We maintain strict access controls, conduct regular security reviews, and follow industry-standard practices to protect your information. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected users.

12. Children

One Shot is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13 without appropriate consent, we will delete that account and its associated data promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you within the app or by email before they take effect. Your continued use of One Shot after the effective date of an updated Policy constitutes your acceptance of the changes.

14. Contact

For any privacy-related questions or to exercise your rights, contact us at privacy@[REPLACE WITH DOMAIN], or write to us at [REPLACE WITH ADDRESS].