Privacy Policy for Dorlist

Effective date: 29 Mar 2026

This Privacy Policy explains how Dorlist ("we", "us") collects, uses, and protects your personal data.

1. Who We Are

Dorlist is operated by:
- A sole trader in the United Kingdom
- A sole trader in Romania

We are joint data controllers under the UK GDPR and EU GDPR.

Contact: contact@dorlist.com

2. What We Collect

  • Email address (required)
  • Display name (can be a nickname)
  • Date of birth (optional)
  • Wishlist content (items, links, instructions)
  • Payment details (only if you are a list administrator and choose to provide them)
  • Technical/usage data (logs, browser/device info)

3. How We Use Your Data

  • Register and authenticate your account
  • Allow you to create and share wishlists
  • Notify participants about due dates and payment details
  • Send reminders (e.g. birthday notifications if enabled)
  • Improve and secure our service

We do not sell your data.

4. Legal Basis

  • Contract - to provide you the service
  • Consent - for birthday reminders and marketing
  • Legitimate interests - for service improvement and security

5. Sharing Your Data

  • Service providers (hosting, email delivery)
  • Other users, where necessary (e.g. showing admin payment instructions)

We do not share your data with advertisers.

6. International Transfers

Your data may be processed in the UK, EU, or other jurisdictions with adequate safeguards under GDPR.

7. Retention

We keep your data only as long as needed to provide the service or comply with legal obligations. You may request deletion at any time.

8. Your Rights

You may exercise the following rights under UK/EU GDPR:

  • Access your data
  • Request corrections or deletion
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent (where consent applies)

Contact: contact@dorlist.com

9. Security

We take reasonable steps to protect your data, but no system is fully secure, so breaches may happen, and we shall inform you of any directly.

10. Children

Dorlist is not intended for children under 16. We do not knowingly collect data from them.

11. Changes

We may update this Privacy Policy. Updates will be posted here with a new effective date.