Privacy Policy for Dorlist

Effective date: 18 Jul 2026

This Privacy Policy explains how Dorlist ("we", "us") collects, uses, and protects your personal data.

1. Who We Are

Dorlist is operated by:
- A sole trader in the United Kingdom
- A sole trader in Romania

We are joint data controllers under the UK GDPR and EU GDPR.

Contact: contact@dorlist.com

2. What We Collect

  • Email address (required)
  • Display name (can be a nickname)
  • Date of birth (optional)
  • Wishlist content (items, links, instructions)
  • Payment details (only if you are a list owner or admin and choose to provide them)
  • Participation records, including which lists you have signed up to participate in
  • Technical/usage data (logs, browser/device info)

3. How We Use Your Data

  • Register and authenticate your account
  • Allow you to create and share wishlists
  • Notify participants about due dates and payment details
  • Enable list admins designated by the list owner to contact participants by email about lists they have signed up for
  • Send reminders (e.g. birthday notifications if enabled)
  • Improve and secure our service

We do not sell your data.

4. Legal Basis

  • Contract - to provide you the service
  • Consent - for birthday reminders and marketing
  • Legitimate interests - for service improvement and security

5. Sharing Your Data

  • Service providers (hosting, email delivery)
  • Other users, where necessary (e.g. showing admin payment instructions)
  • List admins designated by the list owner — your email address and participation details may be visible to list admins so they can contact you about lists you have signed up to participate in

We do not share your data with advertisers.

6. International Transfers

Your data may be processed in the UK, EU, or other jurisdictions with adequate safeguards under GDPR.

7. Retention

We keep your data only as long as needed to provide the service or comply with legal obligations. You may request deletion at any time.

8. Your Rights

You may exercise the following rights under UK/EU GDPR:

  • Access your data
  • Request corrections or deletion
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent (where consent applies)

Contact: contact@dorlist.com

9. Security

We take reasonable steps to protect your data, but no system is fully secure, so breaches may happen, and we shall inform you of any directly.

10. Children

Dorlist is not intended for children under 16. We do not knowingly collect data from them.

11. Changes

We may update this Privacy Policy. Updates will be posted here with a new effective date.