Privacy notice
Privacy notice
Draft for legal review. This notice describes how the service is built and what it does with personal information. The parts marked as to be confirmed, such as the legal entity and its registered address, must be completed and the whole reviewed by a qualified adviser before the service opens to members.
Who we are
Obsidian Concierge is operated by [legal entity to be confirmed], registered at [address to be confirmed]. We are the controller of the personal information described here. You can contact us about it at [privacy contact to be confirmed].
What we collect
When you request an invitation
The username you choose, a one way hash of your password and of your recovery code (never the password or code themselves), and the note to our team if you add one. We do not ask for your name, email address or phone number. We record the version of this notice you agreed to and when.
When you are a member
- Your username, and the security details needed to sign you in: hashes of your password and recovery code, your passkeys' public keys, and, if you use one, your authenticator secret, which is encrypted. A name to call you, a phone number or a city only if you choose to add them.
- Your requests, the messages and files exchanged about them, quotes, and delivery details.
- Places you save, preferences you give us (which may include dietary needs), and people you authorise to act for you. Addresses, locations and preferences are encrypted before they are stored.
- Your balance: the amount and date of each top up and each charge. Top ups are made in Monero; we see the amount that arrives at the address we gave you, never your wallet or its other activity. Nothing about what a charge paid for is kept once the request it belonged to has been erased.
- The address your Obsidian phone is delivered to, and the name for the parcel if you give one, used for that delivery only. Both are encrypted, seen only by the staff who send the phone, and erased the moment it is marked delivered.
- A note of which member of our team opened your account or changed one of your requests, and when. It holds no content.
What we do not collect
Our servers do not record internet addresses or browser details, for visitors or for members. We use no analytics, advertising or tracking technology, and no third party scripts, on this site or in the app. We do not take card or bank payments. The only cookies are those needed to keep you signed in and to protect your session from forgery.
Why we use it, and on what basis
- To consider your request for an invitation, with your consent, which you may withdraw at any time.
- To provide the service you have asked for, under our contract with you: carrying out requests, communicating with you inside the app, and managing your balance.
- To keep accounts and the service secure, in our legitimate interest and yours.
- To meet legal obligations, such as keeping the bare record of top ups and charges.
Who we share it with
Only what each needs, and only to carry out what you have asked for: suppliers and partners who fulfil a request (for example, a driver is given a pick up point and what to collect). We hold no email address for you, so nothing is sent to you outside the app. We do not sell personal information, and do not share it for advertising. [List of processors to be confirmed.]
How long we keep it
- Requests, with their messages, files, locations, quotes and delivery details: erased thirty days after the request is completed or cancelled.
- Notifications, and the note of our team's access: erased after thirty days.
- Invitation requests: erased thirty days after they are decided. A request that is not accepted has its account deleted at once.
- The delivery address and the name for the parcel: erased the moment your phone is marked delivered. The bare note that a phone was sent goes thirty days later.
- Your account, preferences and saved places: for as long as you are a member, then [period to be confirmed], or sooner if you ask us to delete them.
- The record of top ups and charges: as long as the law requires.
- Encrypted backups, which hold a copy of all of the above: seven days, so anything erased is gone from them within a week too.
Your rights
You may ask for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, and withdraw consent where we rely on it. Members can download a copy of their information from the app at any time and make these requests there. You also have the right to complain to a data protection authority.
Where it is kept
[Hosting location to be confirmed.] Where information is transferred outside the UK or EEA, it is protected by appropriate safeguards.
Changes
If this notice changes, the new version will be published here with its date. Version: 2026-10-draft.