Privacy Policy

This Privacy Policy explains how locolie, operated by Locolie Limited ("we", "us", "our"), collects and uses your personal data, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the "data controller" for the personal data described here.

1. Who we are & how to contact us

Controller: Locolie Limited
Privacy contact: [email protected]

2. The data we collect

Category	Examples
Identity & contact	Name, email address, phone number, postcode
Account	Login email, hashed password, role, business you own
Business listing	Business name, address, description, photos, offers, Google Place details
Usage & redemptions	Offers you view and redeem, redemption codes, favourites
Consent & preferences	Marketing opt-ins, subscription topics, consent history, IP at consent
Technical	IP address, browser/device type, cookie identifiers, approximate location (if you allow it)

3. How & why we use your data (lawful bases)

Purpose	Lawful basis
Provide the Platform, your account and offer redemptions	Performance of a contract
Show offers and businesses near you	Legitimate interests (running the service)
Send marketing emails/SMS about offers and updates	Consent (and the "soft opt-in" for existing contacts, where it applies)
Keep the Platform secure and prevent fraud/abuse	Legitimate interests
Take payment for paid plans	Performance of a contract
Meet legal, tax and accounting obligations	Legal obligation

Where we rely on consent, you can withdraw it at any time without affecting processing already carried out. Where we rely on legitimate interests, you can object - see your rights below.

4. Marketing & your choices

We only send marketing where the law allows it and you can opt out at any time. You control exactly what you receive - offers near you, product updates, SMS alerts, and (for businesses) owner emails - through our preference centre, or by using the unsubscribe link in any email. Unsubscribing is honoured promptly and free of charge.

5. Who we share data with

• Businesses you interact with: if you redeem an offer or opt in to hear from a business, that business receives the details you provided and becomes a controller of them.
• Service providers (processors): hosting, email/SMS delivery, payment processing, analytics and mapping providers, who act on our instructions under contract.
• Authorities: where we are required by law, or to protect our rights or safety.
• Business transfers: if we reorganise, merge or are acquired, data may transfer to the new entity.

We do not sell your personal data.

6. International transfers

Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses.

7. How long we keep data

We keep personal data only as long as needed for the purposes above: account data while your account is active and for a reasonable period afterwards; redemption records for our and the business's legitimate records; consent and unsubscribe records for as long as needed to prove compliance; and financial records for the periods required by tax law (normally 6 years).

8. Your rights

Under UK GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to processing; data portability; and to withdraw consent. You also have the right not to be subject to solely automated decisions with legal effects. To exercise any right, email [email protected]. We will respond within one month.

9. Complaints

If you have a concern we'd like the chance to resolve it. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or 0303 123 1113.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

11. Children

The Platform is not intended for children under 16 and we do not knowingly collect their data.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the "last updated" date; material changes will be brought to your attention where appropriate.

This document is not legal advice. Please have it reviewed by a qualified data protection specialist before relying on it.