Privacy Policy

1. Who We Are

Bimmerly is an independent UK-focused BMW enthusiast forum. Bimmerly is a community platform and not affiliated with, endorsed by, or sponsored by BMW AG or BMW UK. For privacy queries, contact law@bimmerly.co.uk.

2. Scope of This Policy

This Privacy Policy explains how Bimmerly collects, uses, stores, and protects personal data when you use the forum and related features. It applies to web pages, account services, moderation workflows, community tools, and integrated forum systems.

3. Data We Collect

Account data: username, email address, password hash, role and security settings.
Community data: threads, comments, reactions, reports, follows, bookmarks, saved searches, and achievements.
Operational/security data: login history, device/session indicators, anti-abuse signals, moderation records, and audit events.
Optional profile data: bio, social links, garage entries, media uploads, and custom profile content.
Transactional forum data: credits ledger entries, marketplace/vendor interactions, and related moderation actions.

4. How We Use Personal Data

To provide requested services (account access, posting, messaging, notifications, moderation, and personalization).
To keep the platform secure (abuse prevention, fraud monitoring, incident investigation, and policy enforcement).
To operate community systems (credits, trust/reputation, achievements, marketplace, vendor and fitment tooling).
To communicate service information (verification, account security notices, policy updates, optional notifications based on settings).

Where UK GDPR applies, processing is based on one or more lawful bases:

Contract: processing needed to provide forum services you request.
Legitimate interests: community safety, abuse prevention, platform reliability, and operational analytics.
Legal obligation: compliance with applicable legal and regulatory requirements.
Consent: where specific optional processing requires it (for example, optional communications and non-essential cookies where applicable).

6. Cookies and Similar Technologies (PECR)

We use necessary cookies/local storage for sign-in sessions, security controls, and core functionality.
Non-essential cookies or trackers should only run where valid consent is captured, where required by UK PECR/UK GDPR.
You can manage optional cookie preferences via platform controls when available.

We may use service providers for hosting, infrastructure, security, and communications support.
We may disclose information where required by law, legal process, or to protect users, rights, and platform integrity.
We do not sell personal data as a standalone commercial product.

8. International Data Transfers

Where data is processed outside the UK, we apply safeguards designed to protect personal data in line with UK data protection requirements.

9. Data Retention

We retain data only as long as reasonably necessary for service operation, security, moderation, legal compliance, and dispute handling.
Retention periods vary by dataset (for example: account records, moderation logs, notifications, and audit history).
Where possible, data is deleted, anonymized, or archived when no longer required.

10. Your Data Protection Rights

Subject to applicable law, you may have rights to:

access your personal data;
rectify inaccurate data;
erase data in certain circumstances;
restrict certain processing;
object to processing based on legitimate interests;
request portability for data you provided;
withdraw consent where processing relies on consent.

You can also submit a complaint to the UK Information Commissioner's Office (ICO): Make a data protection complaint

11. Automated Decisions and Profiling

Bimmerly may use scoring and risk signals (for example anti-abuse, moderation queueing, trust/risk systems) to support moderation and platform safety. Material enforcement decisions are subject to policy and moderator/admin review workflows.

12. Policy Updates and Contact

We may update this policy as features, legal requirements, and operational practices evolve. Current contact points:

General contact: bimmbrfd@bimmerly.co.uk
Support: support@bimmerly.co.uk
Legal/privacy: law@bimmerly.co.uk