Privacy Policy

1. Who we are

TownsPro™ is a trading name operated in England, United Kingdom. When we say “we”, “us” or “our” in this policy, we mean TownsPro™ as the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact us at hello@townspro.co.uk for any data protection queries.

2. What data we collect

Waiting list

When you join our waiting list we collect:

• Full name
• Phone number
• Email address
• Trade / profession (if provided)
• Town or area (if provided)

Trader profiles (when launched)

If you create a trader profile we will additionally collect your business name, services, profile photo, and any other information you choose to add to your public profile.

Automatically collected data

We collect anonymised analytics data including page views, contact clicks, and approximate location derived from IP addresses. IP addresses are salted and hashed before storage and cannot be reversed to identify you.

3. Lawful basis for processing

We process your personal data on the following lawful bases:

• Consent— When you join the waiting list or create an account, you consent to us storing and using your data as described in this policy. You can withdraw consent at any time.
• Legitimate interests— We may use anonymised, aggregated data to improve our platform. This does not override your rights.
• Contract— If you subscribe to a paid plan, processing is necessary to deliver the service you have paid for.

4. How we use your data

• To add you to the waiting list and notify you about our launch
• To create and maintain your trader profile (when launched)
• To process payments via our payment provider, Stripe
• To send you service-related communications (e.g. account updates, launch notifications)
• To improve our platform through anonymised analytics

We will never sell your personal data to third parties or use it for unrelated marketing without your explicit consent.

5. Data sharing

We share data only with the following categories of processor:

• Supabase Inc.— database hosting and authentication (data stored in the EU/UK region)
• Vercel Inc.— website hosting
• Stripe Inc.— payment processing (when payments are enabled)

Each processor is bound by data processing agreements and processes data only on our instructions. We do not transfer data outside the UK and EEA unless adequate safeguards are in place (e.g. Standard Contractual Clauses).

6. Data retention

• Waiting list data— retained until we launch and you either convert to a full account or ask us to delete it, whichever comes first.
• Account data— retained for the duration of your account plus 30 days after deletion to allow recovery.
• Payment records— retained for 7 years as required by UK tax law (HMRC).
• Analytics data— anonymised and retained indefinitely as it cannot be linked back to individuals.

7. Your rights

Under UK GDPR you have the right to:

• Access— request a copy of the personal data we hold about you
• Rectification— ask us to correct inaccurate data
• Erasure— ask us to delete your data (“right to be forgotten”)
• Restrict processing— ask us to limit how we use your data
• Data portability— receive your data in a structured, machine-readable format
• Object— object to processing based on legitimate interests
• Withdraw consent— at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, email hello@townspro.co.uk. We will respond within one month.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies. Essential cookies do not require consent under UK GDPR as they are strictly necessary for the service to function.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), row-level security on our database, and access controls limiting who can view your data.

10. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk/make-a-complaint

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or a notice on our website. The “last updated” date at the top of this page indicates when the policy was last revised.