Privacy policy

Who is responsible for your information

Doncaster Business Advertising is the controller of personal information used to operate this directory. You can contact us at [email protected].

Information we collect

• Account details, including your name, email address, authentication and account-security information.
• Business listing information, owner edits, opening hours, contact details, images and map coordinates.
• Claim information, including your role, challenge records and private supporting evidence when manual review is needed.
• Billing and subscription records. Stripe processes payment-card details; we do not store full card information.
• Messages you send us and technical information such as IP address, browser information, security logs and session activity.
• Public or licensed business information from sources such as councils, OpenStreetMap, Companies House, business owners and manual research.

A business listing can contain personal information where a business is operated by a sole trader or from an individual’s public professional contact details.

How and why we use information

• To provide accounts, claims, listing management and Premium services under our contract with you.
• To maintain a useful, accurate local directory and prevent fraudulent claims, relying on our legitimate interests.
• To protect users, investigate misuse, keep audit records and secure the service, relying on legitimate interests and legal obligations.
• To process billing, bookkeeping and requests required by law.
• To send service and security messages. We will use consent where the law requires it for optional marketing.

Where we rely on legitimate interests, we balance those interests against the impact on the people concerned. You can object to this use by contacting us.

Who receives information

We use carefully selected providers for hosting, email delivery, private file storage, security and technical support. Stripe receives information needed to process subscriptions. Mapbox receives technical request data when a visitor loads an interactive map. We may also disclose information to professional advisers, regulators, courts or law-enforcement bodies where necessary and lawful.

Public listing fields are visible to anyone. Claim evidence and internal review notes are not public and are restricted to authorised reviewers.

International transfers

Some service providers may process information outside the UK. Where this happens, we require an appropriate transfer mechanism and safeguards recognised by UK data-protection law.

How long we keep information

We keep information only while it is needed for the purposes above. Claim evidence is scheduled for deletion 30 days after an approval, rejection or withdrawal, or 90 days after an abandoned claim. Claim decision records are retained for up to 24 months. Account, listing, revision, billing and security records are retained for as long as they are needed to provide the service, resolve disputes, prevent fraud and meet legal obligations.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or to object to our use of your information. You can withdraw consent where consent is the basis for processing. We may need to verify your identity before acting on a request.

If you are unhappy with our response, you can complain to the Information Commissioner’s Office.

Children and changes to this policy

This service is intended for adults and people acting for businesses, not children. We may update this policy as the directory and its providers change. Material changes will be highlighted through the service where appropriate.