🚀 Soft Launch - Still in BETA! Play around and explore local services, local produce and pre-loved treasures. Report bugs to help us improve!

GDPR Compliance

Our commitment to protecting your personal data under the General Data Protection Regulation (GDPR)

Last updated: January 2025

Your Rights Under GDPR

Right of Access

You have the right to request copies of your personal data and information about how we process it.

Request Your Data
Right to Rectification

You can request that we correct any personal data you think is inaccurate or incomplete.

Correct My Data
Right to Erasure

You can request that we delete your personal data in certain circumstances.

Delete My Data
Right to Portability

You can request that we transfer your data to another organization or provide it in a machine-readable format.

Export My Data

What Data We Collect

Data Type Purpose Lawful Basis Retention Period
Personal Identifiers
Name, email, phone number
Account creation, communication, service delivery Contract, Legitimate Interest Duration of relationship + 2 years
Business Information
Company details, addresses, services
Business directory listings, search functionality Contract, Legitimate Interest Active listing period + 1 year
Usage Data
IP address, browser info, page views
Website analytics, security, performance Legitimate Interest 12 months
Marketing Preferences
Communication preferences, interests
Targeted communications, relevant offers Consent Until consent withdrawn
Financial Data
Payment information, billing details
Payment processing, invoicing Contract 7 years (legal requirement)

How We Protect Your Data

Encryption

All data transmission uses SSL/TLS encryption

Access Controls

Strict authentication and role-based access

Secure Storage

Data stored in encrypted UK-based servers

Third Party Data Sharing

Limited Data Sharing

We only share your personal data with third parties in the following circumstances:

  • Service Providers: Payment processors (Stripe), email services (SendGrid), hosting providers
  • Legal Requirements: When required by law or to protect our legal rights
  • Business Transfers: In the event of a merger or acquisition (with your consent)
  • With Your Consent: When you explicitly agree to data sharing

All third-party processors are required to meet GDPR compliance standards and are bound by data processing agreements.

Contact Our Data Protection Officer

For any data protection questions or to exercise your rights under GDPR, please contact our Data Protection Officer:

Data Protection Officer

Email: dpo@beelocal.uk
Phone: 0330 123 4567
Post: Data Protection Officer, Bee Local Ltd, Alloa Business Centre, Whins Road, Alloa, Clackmannanshire, Scotland, FK10 3SA

Response time: We aim to respond to all data protection requests within 30 days as required by GDPR.

Making a Complaint

Information Commissioner's Office (ICO)

If you're not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the ICO:

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

The ICO is the UK's independent authority set up to uphold information rights in the public interest.

Policy Updates

Version 2.0 - January 2025

Updated data retention periods and third-party processor information.

Previous version available upon request
Stay Informed

We'll notify registered users of any material changes to this GDPR compliance statement via email or platform notification.

Questions About Data Protection?

Our Data Protection Officer is here to help with any GDPR-related questions or requests.

Contact Our DPO