Last updated: May 2026 · Effective date: May 2026
1. Who we are
LandedCity ("we", "our", "us") is an immigration peer-support platform that connects people who have moved abroad with mentors who have personal experience in the same destination. We are the data controller for personal data processed on landedcity.com.
2. What personal data we collect
We collect the following categories of data: • Account data — email address, display name, profile photo, password (bcrypt hash only). • Profile data — city, country, languages, bio, immigration topics. • Mentor data — mentor application content, uploaded verification documents, session preferences, pricing. • Contribution data — community posts, reviews, comments, points, trust level. • Analytics data — page views, feature events, anonymous session identifiers. No IP addresses are stored in analytics. • Support data — contact messages and abuse reports. • Technical data — session tokens (httpOnly cookies), rate-limit counters, error logs.
3. Lawful basis for processing (GDPR Art. 6)
We rely on the following legal bases: • Contract (Art. 6(1)(b)) — processing necessary to provide the platform, including account management, mentor onboarding, and session booking. • Legitimate interests (Art. 6(1)(f)) — analytics to improve the platform, security monitoring, spam/abuse prevention. • Consent (Art. 6(1)(a)) — analytics cookies (Google Analytics 4), which you can accept or reject via the cookie banner. • Legal obligation (Art. 6(1)(c)) — retaining data required by applicable law (e.g. financial records if paid features are introduced).
4. Data retention
• Account data: retained while your account is active; deleted within 30 days of account deletion request. • Analytics events: retained for 12 months, then purged. • Moderation evidence (reports, bans): retained for 18 months. • Mentor verification documents: retained while application is active; purged within 30 days of rejection or deletion. • Error logs: retained for 90 days. • Admin audit log: retained for 3 years for accountability purposes.
5. Your rights under GDPR
If you are in the EEA or UK, you have the right to: • Access — request a copy of all personal data we hold about you. • Rectification — correct inaccurate or incomplete data. • Erasure ("right to be forgotten") — request deletion of your account and associated data. • Restriction — ask us to stop processing your data while a dispute is resolved. • Portability — receive your data in machine-readable format (JSON export). • Object — object to processing based on legitimate interests. • Withdraw consent — withdraw analytics consent at any time via cookie settings. To exercise any of these rights, visit your account settings or contact us at privacy@landedcity.com. We will respond within 30 days. For urgent requests regarding a data breach, we will respond within 72 hours.
6. How to export or delete your data
You can download a full JSON export of your account data at any time from your Account Settings page. You can permanently delete your account and all associated data from the same page — deletion is irreversible and requires password confirmation.
7. Consent withdrawal
If you previously accepted analytics cookies, you can withdraw consent by clicking "Cookie settings" in the site footer or by clearing your browser's local storage for landedcity.com. Withdrawing consent stops future analytics tracking but does not erase previously collected anonymous events.
8. Sub-processors
We share limited data with the following processors under data processing agreements: • Hosting — VPS provider (server located in EU) — stores all platform data. • Email — transactional email provider — receives your email address to deliver account notifications. • AI services — used only for community moderation assistance; we do not send PII (name, email, user ID) to AI APIs. We do not sell your data to third parties. We do not use advertising networks.
9. International transfers
All data is stored on servers located within the European Union. If sub-processors are based outside the EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).
10. Minors
LandedCity is not intended for users under 16 years of age. We do not knowingly collect personal data from minors. If we discover an account belonging to a minor, we will delete it promptly.
11. PII minimisation in logs
Server logs and error tracking are configured to exclude sensitive personal identifiers (email, full name, password). Analytics events never store IP addresses. Admin actions are logged with user IDs only.
12. Security
Passwords are stored as bcrypt hashes (cost ≥ 12). Session tokens are httpOnly, Secure cookies. All data in transit is encrypted via TLS 1.2+. Access to production systems is restricted to authorised personnel via SSH key authentication.
13. Breach notification
In the event of a personal data breach, we will notify affected users and the relevant supervisory authority (where required) within 72 hours of becoming aware of the breach, as required by GDPR Art. 33–34.
14. Contact & complaints
For privacy enquiries: privacy@landedcity.com. If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority (e.g. the Dutch Autoriteit Persoonsgegevens).
15. Changes to this policy
We will notify users of material changes via email and by updating the "Last updated" date below. Continued use of the platform after changes constitutes acceptance.