---

General Data Protection Regulation - 2018 (GDPR)

To comply with the GDPR you need to be made aware that your Toutless account will, at a bare minimum, contain a uniquely identifiable name (hereinafter “your user name”), a personal password used for logging into your account (hereinafter “your password”) and a personal, valid email address (hereinafter “your email”). Your information for your account at Toutless is protected by data-protection laws applicable in the country that hosts us. Any information beyond your user name, your password, and your email address required by Toutless during the registration process is either mandatory or optional, at the discretion of Toutless. In all cases, you have the option of what information in your account is publicly displayed. Furthermore, within your account, you have the option to opt-in or opt-out of automatically generated emails.

Furthermore we will store all of the IP address that you use to post with. Depending on your preferences Toutless may send you emails to the email address that Toutless holds in your account which will either be that you used when you registered or one that you have subsequently changed, but you are able to change these preferences from your User Control Panel (UCP) at any time should you wish to stop receiving them.

The personal details that you gave us when you signed up, or added later, will be used solely for the purposes of Toutless board functionality. They will not be used for anything else and neither will they be passed on to any third party without your explicit consent. An exception to this is a situation where law enforcement have requested information in accordance with allowances made by the GDPR for investigative purposes. You can check, at any time, the personal details Toutless is holding about you from the Profile section of your UCP.

The only other information about you is that which you decide to post in the fora, whereupon it is considered to be “publicly available” as it will have been indexed by search engines as well as on-line archive sites.

Data Retention policy
Due to the nature of the forum as long as your account is active your posts and private messages and information related to the will be retained for this period.

Account deletion maybe requested via email from your registered address. A confirmation will be sent to confirm you are in control of the address which will need to be responded to. Deletion is not possible without completing this verification step. We will endeavour to respond to account deletion requests within 5 working days.

On receipt of a request, as information maybe requested by law enforcement for subsequent investigations, our policy is to retain account data for a maximum of 3 months after the latest Event that a user has used the site in relation to has taken place. This is regardless of wether a transaction took place or not. Your account will be disabled for this period.