Privacy Policy

Last updated: 20 August 2026

This policy explains how My Lodge (referred to as “My Lodge”, “we”, “us” or “our”) handles personal information when you create an account, use the My Lodge website or connect a third-party service.

1. Information we collect

Depending on how you use My Lodge, we may collect:

• Account information, including your name, username, email address and securely hashed password.
• Lodge and meeting information, including lodge names, orders, roles, meeting dates and times, venues, subscriptions, notes, ceremony assignments and attendance-related information you enter.
• Ritual information, including uploaded source books, lodge-specific wording, learning preferences and progress.
• Files and media, including summonses, agendas, supporting documents, images and explanatory media you choose to upload.
• Technical and security information, such as IP address, browser information, session information, access times and diagnostic logs.
• Subscription information, such as your selected plan, payment status and transaction references. Payment-card details are handled by the relevant payment provider and are not intended to be stored by My Lodge.

2. Google Calendar and Google Drive

If you choose to connect your Google account, My Lodge receives your Google email address and OAuth access credentials. We use these credentials to:

• create and update My Lodge meetings and events in the Google Calendar you connect; and
• when you enable attachment syncing, upload the relevant My Lodge documents to Google Drive and attach them to the corresponding Google Calendar event.

My Lodge requests access to Calendar events and the limited Google Drive file permission. The Drive permission is used for files created by My Lodge or explicitly made available to it; it is not used to browse or collect unrelated Drive files. Google connection credentials are encrypted at rest. You can disconnect Google Calendar from Account Settings at any time. Disconnecting stops future access but does not automatically remove events or files already created in your Google account.

My Lodge’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, sell it, or allow people to read it except where necessary for security, legal compliance or providing the feature you requested.

3. How we use information

We use personal information to provide and secure your account; display and organise your lodges, calendar, documents and ritual learning; provide requested integrations; process subscriptions; respond to support requests; diagnose faults; prevent misuse; and improve the service.

4. Our legal bases

Where UK data-protection law applies, we process information because it is necessary to perform our contract with you, because you have consented to an optional feature such as Google integration, because we have legitimate interests in operating and securing the service, or because the law requires us to do so. You can withdraw consent for an optional connection by disconnecting it.

5. Sensitive and confidential information

Information about lodge membership, roles or ritual may be private and could, depending on context, reveal information afforded additional protection by law. Only add information you are entitled to hold and share. We use it only to provide the features you request and do not use it for advertising.

6. When information is shared

We may use carefully selected providers for website hosting, storage, email, payments, security and technical support. They may process information only as needed to provide their services to us. When you connect Google, information is also processed by Google under your Google account and Google’s own terms. We may disclose information where legally required or necessary to protect users, the service or others.

We do not sell your personal information.

7. International transfers

Some service providers, including Google, may process information outside the United Kingdom. Where required, we rely on recognised safeguards such as UK adequacy regulations or approved contractual protections.

8. Retention

We keep account information while your account remains active and for a reasonable period afterwards where needed for security, disputes, backups, accounting or legal obligations. Uploaded content is retained until you delete it, close your account, or it is removed under our retention procedures. Security logs and backups may remain for a limited period after deletion. Google event and Drive copies already created remain in your Google account until you remove them there.

9. Security

We use proportionate technical and organisational safeguards, including password hashing, access controls, protected file storage and encryption of Google credentials. No online service can guarantee absolute security, so please use a strong, unique password and protect your account.

10. Your rights

Subject to applicable law, you may ask us to provide a copy of your personal information, correct it, delete it, restrict or object to its processing, or provide portable information. You may also withdraw consent where processing relies on consent. We may need to verify your identity before completing a request.

You may complain to the UK Information Commissioner’s Office through ico.org.uk, although we would appreciate the opportunity to address your concern first.

11. Children

My Lodge is intended for adults and is not directed to children under 18. Please contact us if you believe a child has provided personal information.

12. Changes to this policy

We may update this policy as My Lodge develops or legal requirements change. The latest version will remain available on this page and its effective date will be shown above. Material changes may also be highlighted within the service.