Privacy Notice

Your next walk is operated by Joshua Justin Thomas Mounsey, who is the data controller for the personal data described in this notice.

We collect the following categories of personal data:

• Account data — your email address and login credentials, used to create and secure your account (legal basis: contract performance).
• Usage data — your walk preferences, the areas you search, how many walk searches you have used, and your saved walks, used to provide the service and enforce plan limits (legal basis: contract performance).
• Location data — only if you choose "Use my location" or start GPS trail tracking; used solely to centre searches and draw your walked trail, and not stored on our servers (legal basis: consent).
• Support messages — if you contact us, to respond to you (legal basis: legitimate interests).
• Technical data — IP address, device and browser identifiers, used for security, fraud prevention and product improvement (legal basis: legitimate interests).

Payment details are collected and processed by Paddle, our Merchant of Record, and are not stored by us.

• Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, tax compliance and invoicing.
• Service providers — hosting, database and analytics providers who process data on our behalf under contract.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law.

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep your data for as long as your account is active and as long afterwards as needed for legal, tax and accounting purposes. Data is deleted or anonymised when no longer needed.

Under UK GDPR you have the right to access, rectify, erase, restrict or port your personal data, to object to processing, and to withdraw consent at any time. We respond to requests within one month. You also have the right to complain to the Information Commissioner's Office (ICO).

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

We use essential cookies only — those needed to keep you signed in and run the service. We do not use analytics or marketing cookies, so there is nothing to manage; essential cookies cannot be switched off without breaking sign-in.