Privacy Policy

ZipLocal is operated by Alexandra Kathleen Hind trading as ZipLocal. We are the data controller for personal information collected through this website.

Correspondence address: [INSERT APPROVED BUSINESS CORRESPONDENCE ADDRESS — confirm before publishing]

Contact email for data protection matters: [INSERT BUSINESS EMAIL — confirm before publishing]

You can also reach us using the contact form on this website.

We collect only the information that is genuinely needed for the purposes described in this policy. The categories are:

a) Contact form submissions

• Your name
• Your email address
• The subject and content of your message

b) Launch list sign-ups

• Your name (optional)
• Your email address
• Town or postcode (optional)
• Areas of interest you select (optional)
• A record of your marketing consent, including the date and time it was given

c) Business registration submissions

• Contact name and email address of the person submitting the listing
• Business name, address, phone number, website and description
• Business category and any images or logos submitted
• A record of the submitter's agreement to the Business Listing Terms and acknowledgement of this Privacy Policy
• A record of marketing consent if given, including the date and time

d) Technical information

When you visit this website, our hosting platform (GoDaddy Airo) may automatically collect standard server log data, which can include your IP address, browser type, device type, pages visited, and the date and time of your visit. This information is collected as part of normal website operation and is not used to identify you individually.

We also use a first-party analytics cookie to understand how visitors use the site. This is only set with your consent. Please see our Cookie Policy for full details.

We do not collect sensitive personal data (such as health information, financial details, or government identifiers) through this website.

The table below explains each purpose, the lawful basis under UK GDPR, and how long we keep the data.

We do not sell your personal data. We do not share your data with third parties for their own marketing purposes.

The following service providers may process personal data on our behalf as part of operating the website:

• GoDaddy Airo — the platform on which this website is hosted and operated. GoDaddy processes data in accordance with their own privacy policy and data processing terms. Data may be processed in the United States. GoDaddy participates in the UK–US Data Bridge and uses standard contractual clauses where applicable.
• Stripe — used to process payments for paid business listing plans. Stripe processes payment data in accordance with their own privacy policy and PCI DSS standards. We do not store card details. Stripe may process data in the United States under appropriate safeguards.

We do not currently use any email marketing platform, advertising network, or social media pixel. If this changes, this policy will be updated before any such service is activated.

Some of our service providers are based outside the UK. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place — such as the UK International Data Transfer Agreement, standard contractual clauses approved by the ICO, or reliance on an adequacy decision.

Our website uses cookies. Essential cookies are necessary for the site to function and are set automatically. Optional analytics cookies are only set after you give your consent through our cookie banner. Please see our Cookie Policy for a full list of cookies, their purposes, and how to manage them.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you (a Subject Access Request).
• Right to rectification — you can ask us to correct inaccurate or incomplete data.
• Right to erasure — you can ask us to delete your personal data in certain circumstances.
• Right to restrict processing — you can ask us to limit how we use your data while a dispute is resolved.
• Right to data portability — where processing is based on consent or contract, you can ask for your data in a portable format.
• Right to object — you can object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds.
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at the email address shown in section 1. We will respond within one calendar month. We may ask you to verify your identity before acting on a request.

If you have signed up to the ZipLocal launch list or opted in to business marketing emails, you can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us directly at the address in section 1. We will process your request promptly and no later than within 10 working days.

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the matter.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. Where changes are material, we will take reasonable steps to bring them to your attention. We encourage you to review this policy periodically.