Privacy Policy

1. Who is the data controller

We are the controller for the personal data described below. For any privacy question, or to exercise any right in section 8, email mail@locallisted.co.uk.

2. Data you give us

There are two forms on this site: a general enquiry form, and a form for a business owner to claim their listing. Both collect the name, email address, telephone number, postcode and message you enter, and nothing else.

We do not pass your details to any business. This site does not operate a quote service, a lead-matching service, or any other arrangement under which your enquiry is sent to a third party. If you want to contact a business listed here, every listing publishes the telephone number and website we hold for it, and you contact them directly.

• Purpose: to reply to you. Nothing else.
• Lawful basis: Article 6(1)(b) UK GDPR: taking steps at your request before entering a contract; and Article 6(1)(f), our legitimate interest in responding to people who contact us.
• Who sees it: only us. Your enquiry is stored on our system and read by the operator named in section 1. It is not shared, forwarded, sold or published.
• Retention: enquiries are deleted automatically 12 months after they are received.

We do not sell your data, and we do not add you to a marketing list.

3. Data about businesses, including sole traders

Listings are compiled from open data (see section 4). Most of it concerns companies, and data about a company is not personal data. However:

• where a business is a sole trader or a partnership, its trading name, address, telephone number and email address may be the personal data of an identifiable individual;
• a business address may also be a home address.

We treat that information as personal data and apply this policy to it.

• Purpose: to publish a directory that helps people find local businesses.
• Lawful basis:Article 6(1)(f) UK GDPR: legitimate interests. Our interest, and the public's, is in a usable index of businesses offering services to the public. We have weighed that against the individual's rights and consider it proportionate because the information was already published publicly, relates to their trading activity rather than their private life, is limited to business contact details, and because we remove any listing on request (section 8).

You can object at any time. If you would rather not appear here, tell us and we will remove the listing. We do not ask for a reason.

4. Where listing data came from

Because we did not obtain this information from you directly, Article 14 UK GDPR requires us to tell you its source. Listing data comes from:

• OpenStreetMap: a publicly editable map database, licensed under the Open Database License. Name, address, postcode, telephone, website, email, opening hours and category.
• Food Standards Agency: food hygiene ratings, under the Open Government Licence v3.0.
• Companies House: company number, status and incorporation date from the free public register, under the Open Government Licence v3.0.
• ONS Postcode Directory, via postcodes.io: the administrative ward, district and country a postcode falls in, under the Open Government Licence v3.0. Contains OS data © Crown copyright and database right, and Royal Mail data © Royal Mail copyright and database right.
• Wikimedia Commons: freely licensed images, where one exists.

All of these are publicly accessible sources. We do not buy data, and we do not combine it with data from data brokers or social media to build profiles of individuals.

5. Technical data

• Server logs. Our hosting records the usual technical information about requests: IP address, time, page requested, browser user-agent: to keep the service running and secure. Lawful basis: Article 6(1)(f), our legitimate interest in security and reliability.
• Cookies. This site sets no advertising, analytics or tracking cookies. The only cookie we set is a session cookie for the site administrator's login, which is strictly necessary and therefore exempt from the consent requirement in the Privacy and Electronic Communications Regulations 2003. It is never set for ordinary visitors.
• No analytics. We run no analytics platform, no advertising pixels and no third-party tag manager. If that ever changes, this page will be updated and consent obtained before anything non-essential is set.

6. Third parties your browser contacts

Some content is loaded directly from third parties, which means your IP address and browser details are sent to them as a normal part of fetching that content. We do not control what they do with it, and their own privacy policies apply:

• OpenStreetMap Foundation (tile.openstreetmap.org): map tiles, loaded only on pages that show a map.
• Unsplash (images.unsplash.com): city photographs used as page decoration.
• Google Analytics (googletagmanager.com): only if you agree. Nothing from Google is loaded until you accept the banner, and declining or ignoring it means your browser never contacts them on our behalf. If you do accept, Google receives your IP address and sets cookies, and is an independent controller of that data under its own privacy policy.

Neither the map tiles nor the photographs are used to track you across sites, and none of these three receives any information you type into this site.

Full detail of every cookie, and the switch to turn analytics on or off at any time, is in the Cookie Policy.

7. Where your data is stored, and for how long

This site runs on a server located in Manchester, United Kingdom. Enquiries you send, and everything else this site stores, are held there.

The operator named in section 1 is based outside the United Kingdom. That does not reduce your rights. UK GDPR applies to this site because it offers services to people in the UK, and every right set out in section 8 applies in full regardless of where we are.

• Enquiries are kept only as long as needed to deal with your message and any follow-up, and no longer than 12 months.
• Listing data is kept while the listing is published. Removal requests are recorded so that a later data import does not reinstate a listing you asked us to remove: this record holds the minimum needed for that purpose.
• Server logs are kept for a short period for security purposes.
• International transfers. We do not send your enquiry to anyone. Where a service provider we use processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement.

8. Your rights

Under UK GDPR you have the right to:

• be told what personal data we hold about you, and get a copy (access);
• have inaccurate data corrected (rectification);
• have data erased (erasure), including having a listing about you taken down;
• restrict how we use it;
• object to processing based on legitimate interests, which covers the listing data in section 3;
• receive data you gave us in a portable format;
• withdraw consent, where we relied on consent.

Email mail@locallisted.co.uk or use our contact form. We respond within one month. There is no charge.

We make no automated decisions producing legal or similarly significant effects, and we do not profile individuals.

9. Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office : Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113.

10. Children

This site is a business directory intended for adults. We do not knowingly collect personal data from children, and nothing here is directed at them.

11. Changes

We may update this policy. The date it was last changed is shown at the top of this page, and any material change will be reflected here before it takes effect.