Privacy Policy
Effective 1 August 2026
Herd Planner (“Herd”, “we”, “us”) is the controller of personal information processed through herdplanner.com. Contact us at privacy@herdplanner.com.
Information we collect
- Account details, including your name, email address, password hash and profile picture. If you use Google or Apple login, we also keep that provider’s unique account identifier and login status; Apple may issue an encrypted refresh credential.
- Event information you provide, including plans, attendance, travel, accommodation, polls, posts and comments.
- Cost and contribution records. Where an organiser uses bank-transfer instructions, routing details are encrypted before storage.
- Technical and security information such as request identifiers, coarse network information, authentication events and device/browser data needed to operate and protect the service.
- Messages you send to us for support or privacy requests.
Why we use it
We use personal information to provide and secure Herd, let groups plan events, deliver invitations and service emails, prevent abuse, investigate faults, comply with law and establish or defend legal claims. Our legal bases are performance of our contract, our legitimate interests in operating a safe service, compliance with legal obligations, and consent where the law specifically requires it.
Invitations and information supplied by others
An organiser may provide your email address to invite you to Herd or an event. We use it only to deliver and administer that invitation unless you create an account. You can ask us to remove an unused invitation.
Who receives information
We use service providers for hosting, storage, content delivery, transactional email and operational support, including Amazon Web Services and Vercel. If you choose provider login, Google or Apple processes the sign-in request and shares the verified account details you approve. Travel or map searches may send the search details you enter to the named search provider. Event information is shared with members of that event according to their role and access. We do not sell personal information.
International transfers
Some suppliers may process information outside the UK. Where required, we use an adequacy regulation or approved contractual safeguards and assess the protection available for the transfer.
Retention
We keep account and event information while it is needed to provide the service. Security support events are normally retained for 30 days. Financial, audit and dispute records may be retained longer where they are needed for legal, accounting, fraud-prevention or claim purposes. We delete or anonymise information when it is no longer needed, subject to those exceptions and normal backup expiry.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or a portable copy of your information, and may withdraw consent without affecting earlier processing. Email privacy@herdplanner.com; we may need to verify your identity. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
Cookies
Herd currently uses essential cookies to keep you signed in, protect your session, validate Google or Apple login responses and authorise private media. These are necessary to provide the service. We will ask for consent before using non-essential analytics or advertising cookies.
Security and children
We use access controls, encryption, short-lived tokens and monitoring appropriate to the information we hold. No internet service is completely risk-free. Herd is intended for adults and is not directed to children under 18.