← Back to home

Privacy Policy (Partners)

Last updated: July 2026 · Version 2.0

This Privacy Policy explains how Find a Local UK ("we", "us", "our") collects, uses, discloses and safeguards personal data of refurbishment companies, their staff and account holders ("Partners", "you") when you access findalocaluk.com and any related services (the "Platform"). It is issued to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

By registering an account, submitting information or otherwise using the Platform, you confirm you have read this Policy and, where consent is the lawful basis, expressly consent to the processing described below.

1. Data controller & contact

Find a Local UK is the data controller. For any privacy question, request or complaint contact us at office@find-a-local.uk or call +44 7488 899638. You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

2. Personal data we collect

  • Identity & contact: company name, trading name, contact name, job title, email, phone number, postal / registered address, company number, VAT number.
  • Account & billing: login credentials (hashed), coverage areas, service categories, credit balance, transaction history, invoicing details. Card data is collected and processed directly by Stripe — we never see or store your card number.
  • Communications: emails, WhatsApp / SMS, phone-call notes, support tickets.
  • Technical & usage: IP address, device / browser info, log data, pages viewed, referrers, session recordings (Contentsquare/Clarity-style), first-party and third-party cookies (see §9).
  • Marketing data: your preferences for our nurture / marketing emails.

3. Purposes & lawful bases

PurposeLawful basis (UK GDPR Art. 6)
Create your account, verify your company, allocate surveys, take payment, provide the Platform.Performance of a contract (Art. 6(1)(b)).
Fraud prevention, security monitoring, network integrity, analytics to improve the Platform.Legitimate interests (Art. 6(1)(f)).
Sending transactional emails (allocation, receipts, account changes) and required service notices.Performance of a contract & legal obligation.
Sending onboarding / nurture / marketing emails and using session-replay & advertising cookies.Consent (Art. 6(1)(a)) — withdrawable at any time.
Meeting accounting, tax, anti-money-laundering and other legal duties.Legal obligation (Art. 6(1)(c)).

4. Who we share data with

We disclose personal data only as described here. We do not sell personal data.

  • Homeowners: when you claim / are allocated a survey, we release your company name, contact number and address details to the matched homeowner so they can identify you and let you into the property.
  • Processors (acting on our instructions): Supabase (managed database, auth, storage — data hosted in the EU), Stripe (payments, PCI-DSS certified), Resend / our transactional email provider, Meta / Google / Contentsquare / Microsoft Clarity (analytics & ad measurement — consent-based only), cloud hosting and CDN providers. Each processor is bound by a written Data Processing Agreement.
  • Professional advisors: accountants, lawyers, auditors, insurers, subject to confidentiality.
  • Authorities & law enforcement: where legally required or to protect our rights.
  • Successors: a buyer or successor in a merger, acquisition or business restructuring.

5. International transfers

Where a processor stores or accesses data outside the UK or EEA (e.g. certain analytics or support providers in the US), we rely on UK Addendum to the EU Standard Contractual Clauses, adequacy decisions or equivalent safeguards under Art. 46 UK GDPR. Contact us for a copy of the safeguards in place.

6. Retention

  • Account data: for the life of the account and up to 6 years after closure (limitation & tax records).
  • Transaction / invoicing records: 6 years (Companies Act & HMRC).
  • Marketing consent records & suppression list: until you opt out plus a minimal record of the opt-out to honour your choice.
  • Server logs & analytics: typically 12–26 months, then aggregated or deleted.
  • Backups: purged on rolling schedules, no longer than 90 days beyond primary deletion.

7. Your rights

Under the UK GDPR you have the right to: access, rectification, erasure, restriction, portability, objection (including to processing based on legitimate interests and to direct marketing), and the right not to be subject to solely automated decisions with legal effect. To exercise a right email office@find-a-local.uk. We respond within 30 days. We may need to verify your identity first.

8. Security

We use TLS in transit, encryption at rest, hashed passwords, role-based access, row-level security in the database, principle-of-least-privilege for staff, and continuous logging. No system is 100% secure; we will notify affected users and the ICO of any personal-data breach where required by law within 72 hours.

9. Cookies & tracking

We use strictly necessary cookies for authentication / session management and, subject to your consent, analytics, session-replay and advertising cookies (including the Meta Pixel and Google Analytics). You can withdraw consent or adjust preferences at any time via your browser settings or by emailing us. Blocking non-essential cookies will not affect access to the Platform.

10. Marketing & email opt-out

Transactional emails are necessary to operate the service and cannot be disabled while your account is active. Non-transactional (nurture, marketing, promotional) emails are sent under the "soft opt-in" for existing customers or with your explicit consent and can be stopped via the unsubscribe link in any such message or by emailing office@find-a-local.uk.

11. Children

The Platform is not intended for and not marketed to persons under 18. We do not knowingly process children's data.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by email and/or a prominent notice on the Platform at least 14 days before they take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

See also our Terms & Conditions.