Privacy Policy

Last updated: 14/08/2025

Who We Are

heyLOKAL is a business directory platform that connects local businesses with customers in Greenwich, Deptford, Lewisham, and Woolwich. Your privacy is important to us, and this Privacy Policy explains how we collect, use, and protect your personal data in compliance with UK GDPR and the Data Protection Act 2018.

Contact Information

Data Controller: heyLOKAL
Email: privacy@heylokal.com
Address: London, United Kingdom

Information We Collect

Personal Information You Provide

  • Account Information: Name, email address, phone number, and password when you create an account
  • Business Information: Business name, description, address, contact details, operating hours, and services offered
  • Booking Information: Appointment details, preferences, and special requirements
  • Payment Information: Billing address and payment method details (processed securely by Stripe)
  • Communications: Messages you send us through contact forms, email, or customer support

Information Automatically Collected

  • Usage Data: Pages visited, time spent on site, and user interactions
  • Device Information: Browser type, operating system, and IP address
  • Cookies: Small files stored on your device to improve your experience (see our Cookie Policy)

How We Use Your Information

Legal Basis for Processing

Legitimate Interests

  • Operating and improving our platform
  • Connecting businesses with customers
  • Analysing website usage and performance
  • Preventing fraud and ensuring security

Contract

  • Processing bookings and payments
  • Providing customer support
  • Delivering our services as agreed

Consent

  • Sending marketing communications (you can opt out anytime)
  • Using non-essential cookies

Legal Obligation

  • Complying with tax and accounting requirements
  • Responding to legal requests

How We Share Your Information

We do not sell your personal data. We only share information in the following circumstances:

  • Service Providers: Trusted third parties who help us operate our platform (e.g., payment processors, email services, hosting providers)
  • Business Listings: Business information is displayed publicly to help customers find and contact local services
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In the event of a merger, acquisition, or sale of assets

International Data Transfers

Some of our service providers may be located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the UK authorities.

How Long We Keep Your Data

  • Account Data: Until you delete your account, plus 7 years for tax purposes
  • Booking Records: 7 years for business and tax purposes
  • Marketing Data: Until you unsubscribe or withdraw consent
  • Website Analytics: 26 months (Google Analytics default)

Your Data Protection Rights

Under UK GDPR, you have the following rights:

Right of Access

Request a copy of the personal data we hold about you

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data in certain circumstances

Right to Restrict Processing

Limit how we use your data in certain situations

Right to Data Portability

Receive your data in a portable format

Right to Object

Object to processing based on legitimate interests

To exercise your rights: Email us at privacy@heylokal.com with your request. We'll respond within one month.

Cookies

We use cookies to improve your experience on our website. These include:

  • Essential Cookies: Required for the website to function properly
  • Analytics Cookies: Help us understand how you use our website
  • Marketing Cookies: Used to show you relevant advertisements

For more information, please see our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • SSL encryption for data transmission
  • Secure payment processing via Stripe
  • Regular security assessments and updates
  • Access controls and staff training
  • Data backups and disaster recovery procedures

Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of any significant changes by email or through a notice on our website. The latest version will always be available on this page.

Contact Us & Complaints

Contact Information

If you have any questions about this Privacy Policy or how we handle your data:

  • Email: privacy@heylokal.com
  • Phone: +44 20 XXXX XXXX
  • Post: heyLOKAL, London, United Kingdom

How to Complain

If you're not satisfied with how we've handled your personal data, you can lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113