Privacy Policy

1. About Us

Townlet UK is the data controller for the personal data described in this policy. For privacy questions or to exercise your rights, email stephanie@townletuk.com. We may need to verify your identity before acting on a request concerning account data.

2. Information we collect

We collect and process the following information:

• Account Data: When you sign in by email or through an identity provider such as Google or Apple, we receive the account information needed to sign you in, such as your email address and display name.
• Profile & Preferences: Information you choose to provide such as your saved places, towns you follow, and notification preferences.
• User Content: Listings, events, edits, messages, reports, and business claims you submit.
• Town Suggestions: Town name, district, postcode area, reason, and your contact details if provided.
• Location Data: If you grant browser permission, we use your approximate location to show local results. It is not stored on our servers unless you explicitly save a location preference to your account.
• Technical Data: IP address, browser type, device information, and service logs needed to keep Townlet reliable, secure, and protected from misuse.

3. Why we use your information

Under the UK GDPR, we rely on the following lawful bases:

• Contract: To provide the account and features you request.
• Consent: For browser geolocation and communications that require your permission. You can withdraw consent at any time.
• Legitimate interests: To improve Townlet, answer enquiries, maintain security, prevent fraud, and keep public information accurate.
• Legal obligation: When we must keep or disclose information to comply with the law.

4. Data sharing and processors

We do not sell your personal data. We share only the information needed to provide Townlet with service providers acting on our instructions, including:

• Hosting and application delivery: Vercel.
• Database and authentication: Supabase.
• Identity providers: Google or Apple, only when you choose that sign-in method.
• Email delivery: The delivery provider configured for account and service messages.

Providers may process data outside the UK. Where required, we rely on recognised safeguards for international transfers.

5. Data retention

We keep account information while your account is active and for only as long afterwards as needed for security, dispute resolution, or legal obligations. Verified deletion requests are handled without undue delay. Limited information may remain temporarily in protected backups until those backups expire, and public contributions may be retained in anonymised form where appropriate.

6. Your rights

Depending on the circumstances, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing.
• Receive certain data in a portable format.
• Withdraw consent where processing relies on consent.

Email stephanie@townletuk.com to make a request. You will not usually have to pay a fee.

7. Cookies and local settings

We use essential cookies and similar local storage for authentication, security, theme settings, and location preferences. If Townlet introduces non-essential analytics or marketing cookies, we will provide the controls required by law before using them.

8. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

9. Changes to this policy

We may update this policy as Townlet changes. The date at the top shows when it was last updated. Material changes will be highlighted where appropriate.