Who We Are
heyLOKAL is a business directory platform that connects local businesses with customers in Greenwich, Deptford, Lewisham, and Woolwich. Your privacy is important to us, and this Privacy Policy explains how we collect, use, and protect your personal data in compliance with UK GDPR and the Data Protection Act 2018.
Contact Information
Data Controller: heyLOKAL
Email: privacy@heylokal.com
Address: London, United Kingdom
Information We Collect
Personal Information You Provide
- Account Information: Name, email address, phone number, and password when you create an account
- Business Information: Business name, description, address, contact details, operating hours, and services offered
- Booking Information: Appointment details, preferences, and special requirements
- Payment Information: Billing address and payment method details (processed securely by Stripe)
- Communications: Messages you send us through contact forms, email, or customer support
Information Automatically Collected
- Usage Data: Pages visited, time spent on site, and user interactions
- Device Information: Browser type, operating system, and IP address
- Cookies: Small files stored on your device to improve your experience (see our Cookie Policy)
How We Use Your Information
Legal Basis for Processing
Legitimate Interests
- Operating and improving our platform
- Connecting businesses with customers
- Analysing website usage and performance
- Preventing fraud and ensuring security
Contract
- Processing bookings and payments
- Providing customer support
- Delivering our services as agreed
Consent
- Sending marketing communications (you can opt out anytime)
- Using non-essential cookies
Legal Obligation
- Complying with tax and accounting requirements
- Responding to legal requests
How We Share Your Information
We do not sell your personal data. We only share information in the following circumstances:
- Service Providers: Trusted third parties who help us operate our platform (e.g., payment processors, email services, hosting providers)
- Business Listings: Business information is displayed publicly to help customers find and contact local services
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In the event of a merger, acquisition, or sale of assets
International Data Transfers
Some of our service providers may be located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the UK authorities.
How Long We Keep Your Data
- Account Data: Until you delete your account, plus 7 years for tax purposes
- Booking Records: 7 years for business and tax purposes
- Marketing Data: Until you unsubscribe or withdraw consent
- Website Analytics: 26 months (Google Analytics default)
Your Data Protection Rights
Under UK GDPR, you have the following rights:
Right of Access
Request a copy of the personal data we hold about you
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data in certain circumstances
Right to Restrict Processing
Limit how we use your data in certain situations
Right to Data Portability
Receive your data in a portable format
Right to Object
Object to processing based on legitimate interests
To exercise your rights: Email us at privacy@heylokal.com with your request. We'll respond within one month.
Cookies
We use cookies to improve your experience on our website. These include:
- Essential Cookies: Required for the website to function properly
- Analytics Cookies: Help us understand how you use our website
- Marketing Cookies: Used to show you relevant advertisements
For more information, please see our Cookie Policy.
Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL encryption for data transmission
- Secure payment processing via Stripe
- Regular security assessments and updates
- Access controls and staff training
- Data backups and disaster recovery procedures
Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of any significant changes by email or through a notice on our website. The latest version will always be available on this page.
Contact Us & Complaints
Contact Information
If you have any questions about this Privacy Policy or how we handle your data:
- Email: privacy@heylokal.com
- Phone: +44 20 XXXX XXXX
- Post: heyLOKAL, London, United Kingdom
How to Complain
If you're not satisfied with how we've handled your personal data, you can lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113