NODE UNION · Company-owned review site
Privacy notice
Updated
Controller and scope
Node Union Data Solutions (BVI) Ltd, registration BVIBC 6650239, OMC Chambers, Wickhams Cay 1, Road Town, Tortola, British Virgin Islands, operates this website and determines its processing. For privacy enquiries contact legal@nodeunion.io. Ownership details are disclosed in NODE UNION’s company disclosure. This notice covers the review service at reviews-node-union.com, not an investment or payment account on another domain.
What is collected and why
- Account service
- Email, display name, password hash, confirmation status and account creation date enable sign-in, recovery, moderation history and contact about your account. Email and password are not public. Required account fields are needed to provide the service; you can read public pages without registering.
- Publication
- A submitted review, rating, reported figures, dates, moderation decisions and photos are stored. After approval, the public display name, review and approved attachments are public and may be indexed or copied. Photos are optional. Submitting content for publication is your express choice; do not include someone else’s private or sensitive data.
- Imports
- Legacy content came from the original supplied site; manual transfers record an original author name, source and date when known. These records are not active sign-in accounts. An imported person can contact us without registering to request access, correction or removal. The source of a particular transfer is available with the entry when known.
- Security
- Necessary session identifiers, temporary hashed request counters and administrator audit records protect accounts and the service. Host and proxy operational records can contain IP addresses, request paths, times and technical errors. Passwords are hashed; administrator authenticator secrets are encrypted and recovery codes hashed. No advertising profile or automated eligibility decision is made by this review application.
- Correspondence
- When you email the published contacts, the operator receives your address, message and any files you choose to send, to answer the enquiry and handle complaints.
Purposes and legal grounds
Account and requested publication services are provided at your request in connection with the service terms. Optional public contributions and any consent-based use depend on your affirmative choice; you may ask to withdraw consent. Security and complaint handling support provision of the service and compliance with applicable obligations. Where GDPR applies, account administration can rely on contract, security and abuse prevention on legitimate interests, and legal disclosures on legal obligations; rights to object and other applicable protections remain available. We do not rely on a cookie banner as blanket consent to personal-data processing.
Who receives data and where
The operator and authorized administrators can access account and moderation records. Approved content is accessible to everyone. Hosting is supplied through Njal.la; an operator-controlled computer holds a restricted backup copy. When email is configured, the selected mail provider processes delivery information. At present account services are closed pending mail setup. This app contains no advertising or third-party analytics integrations and does not sell personal data.
The operator is in the BVI, and infrastructure, backup storage or providers may be in other countries. Appropriate contracts, transfer safeguards or other legally available arrangements must be in place where applicable. You can ask legal@nodeunion.io for the countries and safeguards applying to your data; this notice does not claim an adequacy decision or a particular transfer contract has been verified.
Retention
Account and publication records remain while needed to provide the service, preserve the applicable publication and moderation record, handle a complaint or meet an applicable legal duty. A review of necessity and any access, correction or deletion request is handled by the operator; there is no fixed automatic deletion period for these records in this version. Records should not be kept after their purpose or a justified retention need ends.
Sign-in cookies last at most seven days for members or eight hours for administrators; sessions also expire after 30 or 15 minutes of inactivity respectively. Temporary administrator verification lasts five minutes. Password-reset links expire after 30 minutes and email-confirmation links after 24 hours. Expired security records are cleared during startup or the hourly cleanup; unattached uploads are removed after about 24 hours plus the cleanup interval. Server backups have no automatic expiry in this version and require controlled review and deletion by the operator. Erasure requests must be considered for retained copies as well, including preventing deleted material from being republished after a restore.
Your choices and rights
Contact legal@nodeunion.io to ask about access, correction, deletion, withdrawal of consent, restriction, objection or a portable copy where applicable. We may verify identity proportionately and explain any lawful exception. You may complain to a competent data-protection authority, including the BVI Information Commissioner or, where GDPR applies, your local supervisory authority. If your data is processed while you are in Nigeria, protections under the Nigeria Data Protection Act may apply even though the operator is abroad; you may contact the Nigeria Data Protection Commission. No submission consent prevents you exercising a statutory right. See how to make a request.
Cookies and updates
See the cookie notice for exact names, purposes and lifetimes. We will update this dated notice when providers, purposes or storage arrangements change. No public page asks you to supply identity documents, bank credentials or authenticator codes.