This policy structure must be reviewed against the platform’s final data flows and approved by qualified legal counsel before production launch.
This policy explains the categories of personal information Screaming may process and the controls that must govern that processing.
1. Information we collect
- Account and profile information
- Age and identity-verification information
- Booking, service, availability, and session metadata
- Payment and payout references supplied by payment providers
- Reports, support requests, reviews, and communications
- Device, security, diagnostic, and usage information
2. Why we use information
- Create, verify, and protect accounts
- Operate bookings, checkout, rooms, reviews, and payouts
- Prevent fraud, enforce safety rules, and investigate reports
- Provide customer support and service notices
- Meet legal, accounting, security, and regulatory obligations
- Improve platform reliability and performance
3. How information is shared
- With the other booking participant when necessary for the service
- With identity, payment, communication, hosting, monitoring, and security providers
- With professional advisers, auditors, or insurers where appropriate
- With public authorities when legally required or necessary to address serious harm
- During a properly managed business reorganization or transfer
4. Payments and identity verification
- Payment-card details should be collected directly by the approved payment provider and not stored in general Screaming browser state.
- Identity documents require restricted access, encryption, retention controls, and approved verification workflows.
5. Retention
- Information is kept only for the period required for service delivery, safety, dispute resolution, accounting, legal compliance, or legitimate operational needs.
- Different records may have different retention periods. Data should be securely deleted or de-identified when retention is no longer justified.
6. User choices and rights
- Users may update permitted account and preference information.
- Applicable rights may include access, correction, deletion, restriction, objection, portability, or withdrawal of consent, subject to legal limitations.
- Privacy requests must be verified before protected account information is released or changed.
7. Security
- Screaming uses administrative, technical, and organizational safeguards appropriate to the sensitivity of the information.
- No system is completely secure. Users should protect their credentials and report suspected account compromise promptly.
8. International processing and changes
- Where information crosses borders, appropriate legal and contractual safeguards must be applied.
- Material policy changes will be communicated as required, and the effective date will be updated.