Privacy notice

1. Who we are

The controller of your personal data is Duncan Sumter, a sole trader registered in the Netherlands (KvK 69928185), trading as BloeiWens and KnownDonor. Address and details are on our company details page. Contact for privacy questions: hello@bloeiwens.nl.

Because we are based outside the UK and offer our service to people in the UK, the UK GDPR and the Data Protection Act 2018 apply to how we handle your data.

2. What we collect

• Account: email address and sign-in data.
• Profile:role (intended mum or donor), first name or nickname, year of birth, town, country, text, what you're open to, visibility and photos.
• Special category data (UK GDPR Article 9): your profile and messages can reveal information about your health (for example your wish to have a child, tests) and your sex life or sexual orientation. We only process this because you choose to share it and give your explicit consent when you sign up (Article 9(2)(a)).
• Use of the service: likes, blocks, reports, messages, timestamps and technical logs.
• Technical: IP address, browser data and strictly necessary cookies for signing in and security.

3. Why, and our lawful bases

• To run your account and introduce you to members: contract (Article 6(1)(b)).
• Special category data: your explicit consent (Article 9(2)(a)).
• Safety, preventing abuse and handling reports: our legitimate interests in a safe service (Article 6(1)(f)).
• Where the law requires it: legal obligation (Article 6(1)(c)).

You can withdraw your consent at any time, for example by deleting your account. That doesn't affect processing before you withdrew it.

4. Who can see your profile

Only signed-in members. Visitors and search engines can't see profiles or photos. Messages are visible to the people in the conversation; we look at them only when needed to handle a report, keep the service safe or comply with the law.

5. Cookies

We only use cookies that are strictly necessary for signing in and security. We don't use advertising or tracking cookies on KnownDonor. If that ever changes we'll ask for your consent first, as the Privacy and Electronic Communications Regulations require.

6. Who we share data with

We never sell your data. We use processors for hosting and database (Supabase, Vercel) and for sending email (Resend), under contracts that protect your data. Our database is in the EU (Frankfurt); the UK recognises the EEA as providing adequate protection. Where a provider processes data in the United States, we rely on the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.

7. How long we keep it

As long as your account exists. After you delete it, we remove or anonymise your profile data within a reasonable time, unless we have to keep something by law or to deal with a report or abuse.

8. Your rights

You can ask for access, correction, deletion, restriction, data portability, and object to processing based on legitimate interests. Contact hello@bloeiwens.nl. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

9. Age

KnownDonor is only for adults (18+).