Privacy Policy

1. General provisions

This Privacy Policy describes how KidsMap processes user information on https://kidsmap.az, including language versions of the site, forms, the catalog, place pages, events, reviews, personal dashboards, and related features.

By using the site, the user confirms that they have reviewed this Policy. If a separate consent is required for a specific type of processing, that consent is requested separately.

A mere visit to the site is not treated as consent for processing that legally requires a separate expression of will.

2. What KidsMap is for

KidsMap is an information platform and catalog for kids clubs, sports sections, courses, educational organizations, specialists, and temporary events.

• search for organizations and events;
• use filters and browse listing pages;
• save favorite places;
• publish reviews and ratings;
• contact organizations;
• submit place-ownership requests;
• create and edit listings when the user has the required rights;

Unless explicitly stated otherwise, KidsMap is not the organizer of listed clubs or events, does not provide those services on behalf of organizations, and does not guarantee availability, pricing, schedules, or conditions.

3. Categories of users

The site may be used by anonymous visitors, registered users, parents and legal guardians, business owners and representatives, owner-team members, moderators, and administrators.

The site is primarily intended for adult users.

Children should not submit personal data through the site without the involvement of a parent or legal guardian.

4. What data may be processed

5. Information about children

KidsMap does not aim to directly collect children's personal data.

• a child's full name without necessity;
• a child's personal phone number, email, or home address;
• documents, health information, or disability information;
• precise movement schedules;
• school or class information combined with identifying details;

Photos and videos showing children may be uploaded only by a person who has the necessary rights and permissions.

If KidsMap receives a substantiated complaint, it may hide or remove a photo or other information about a child.

6. Purposes of processing

• providing access to the site and account;
• authentication and email verification;
• operating the catalog, map, reviews, and favorites;
• content moderation and owner flow;
• processing ownership requests and managing owner teams;
• communicating with users and sending service notices;
• ensuring security and preventing spam or abuse;
• keeping technical statistics, analytics, and activity logs;
• improving the interface, fixing errors, and protecting the rights of users, KidsMap, and third parties;

7. Legal grounds for processing

• user consent where required;
• providing features requested by the user;
• performance of the user agreement and actions requested by the user;
• compliance with legal obligations;
• protecting the security of the site and preventing abuse;
• protecting the rights and legitimate interests of users and third parties;

If processing is based on consent, the user may withdraw that consent, but the withdrawal does not invalidate processing already carried out before the withdrawal.

8. Cookies and local storage

The site uses cookies and similar mechanisms necessary for sessions, form protection, language selection, and correct account operation.

• session and authentication cookies;
• cookies or values related to CSRF protection;
• cookies and local data related to interface language and session settings;

Google Analytics is enabled in the current site configuration, so analytics identifiers and browser technical data may be processed when pages load and supported events are triggered.

Disabling required cookies may break certain site features.

9. Analytics

KidsMap uses internal product analytics to understand how the catalog and core user journeys are used.

• per-session visits are recorded in SiteVisit;
• FunnelEvent records are stored for search, filters, listing opens, contact clicks, favorites, reviews, and owner-flow actions;
• some analytics events may be queued in the session before being exposed to the frontend;

Google Analytics is enabled in the current site configuration, so analytics identifiers and browser technical data may be processed when pages load and supported events are triggered.

10. Maps and geolocation

KidsMap uses place coordinates and supports map rendering, district-based discovery, and point-selection tools in owner forms.

When maps and coordinate pickers are opened, the site may load Google Maps, and Google as the map provider may receive technical data required to render the map.

Browser geolocation is requested only through the standard browser permission flow and only with the user's permission.

Refusing geolocation does not block the core catalog experience, except in flows where the user explicitly wants to determine a current point.

11. Email and service messages

• registration confirmation and email OTP delivery;
• OTP resend and verification flows;
• security notices and support replies;
• messages related to moderation, ownership requests, and owner-team invitations;
• password-reset emails provided through Django auth;

Service messages required for account operation and security are different from promotional messaging.

12. Reviews, ratings, and public content

Reviews, ratings, usernames or provided author names, and other published content may be visible to other visitors.

• users must not publish third-party personal data without a lawful basis;
• users must not publish information about children without permission;
• users must not publish unlawful, false, abusive, or spam content;

KidsMap may moderate, hide, reject, or remove materials that violate site rules or applicable law.

13. Responsibility of listing owners

• accuracy of listing information;
• up-to-date address, pricing, schedule, and contacts;
• lawful use of photos, logos, and descriptions;
• having rights to publish staff data and images of children;

KidsMap may request authority confirmation, temporarily hide a listing, reject changes, or restrict user rights in case of abuse.

14. Disclosure to third parties

Data may be disclosed only to the extent necessary for the relevant purpose.

• hosting and infrastructure providers;
• email-service providers needed to deliver service emails;
• a map-service provider when maps are used;
• an analytics provider if enabled in the current configuration;
• competent public authorities when legally required;

KidsMap does not sell users' personal data.

15. Links to third-party resources

Listings and site pages may contain links to organization websites, social networks, and map services.

Once a user leaves KidsMap for a third-party resource, information processing is governed by that service's own rules, which KidsMap does not control.

16. Cross-border processing

Some technical providers may be located outside the Republic of Azerbaijan or may store data there.

When such services are used, KidsMap takes applicable cross-border transfer requirements into account to the extent required by law.

17. Retention periods

Information is kept no longer than necessary for the purposes of processing unless a longer period is required by law, security needs, or dispute resolution.

The project does not currently publish a single exact retention schedule for every data category.

• active-account data may be kept while the account is used or until a justified deletion request is processed;
• some information may remain temporarily in backups, security logs, and audit history;
• once the grounds for retention end, data is deleted, anonymized, or blocked within the technical model available to the project;

18. Protection of information

• access separation and user roles;
• authentication and email verification;
• password hashing through Django;
• CSRF protection and session-based security mechanisms;
• administrative and domain-specific logging of selected actions;
• moderation of user content;
• restricted access to administrative areas and infrastructure;

No storage or transmission method can provide absolute security.

19. Security incidents

If a leak, unauthorized access, or another incident is detected, KidsMap takes reasonable steps to limit consequences, remove the cause, document the incident, and make any legally required notifications.

20. User rights

• to know whether their data is being processed;
• to obtain information about processing purposes and categories;
• to request correction or update of inaccurate data;
• to request the cessation of unlawful processing;
• to withdraw consent where applicable;
• to request deletion where there are legal grounds;
• to challenge actions related to data processing;

21. How to submit a request

• name and account-related email;
• username, if available;
• the substance of the request;
• a link to the listing, review, photo, or other material;
• any details that help identify the relevant data;

To protect information, the administration may ask for reasonable proof of identity or authority.

22. Account and data deletion

The current site implementation does not include a separate public button for full self-service account deletion. Requests to delete an account and related data should be sent by email.

Deletion may include access termination and deletion or anonymization of profile data and some non-essential activity, where this is technically compatible with the project architecture and does not break ownership, moderation, or audit integrity.

23. Data correction

Users can edit some available data in their personal dashboard and owner sections, and they can also send a correction request by email.

Changes to place and event listings may go through moderation before becoming public.

24. Removal of photos and materials

A person who believes that a photo, description, review, or other material violates their rights or a child's rights may contact KidsMap by email.

During review, disputed material may be temporarily hidden.

25. Marketing messages

Marketing messages may be sent only where there is separate consent or another lawful basis.

At the time this Policy is published, marketing mailings are not a primary implemented feature of the site; email is used mainly for account, security, moderation, and owner-flow purposes.

26. Changes to this Policy

This Policy may be updated when laws change, site features change, new services are connected, or data-processing methods change.

The current version is published on this page, and the last updated date is shown at the top of the document.

27. Applicable law

This Policy is applied with due regard to the laws of the Republic of Azerbaijan.

Users may apply to a competent public authority or court in the manner provided by applicable law.

28. Contacts

For questions about privacy, data correction, account deletion, withdrawal of consent, removal of photos or materials, content complaints, and account security, contact: