Privacy Policy

1. Who we are

Brighton Insider is a local directory and events guide for Brighton & Hove, operated from the United Kingdom. When we say "we", "us", or "our" in this policy, we mean the Brighton Insider team.

If you have questions about this policy or your personal data, contact us.

2. What data we collect

We keep data collection to the minimum needed to run the site.

Information you provide

• Contact form submissions (name, email, message)
• Business listing claim requests (name, email, business name, role)
• Newsletter sign-up (email address and subscription preferences)

Information collected automatically

• Anonymous usage analytics (pages visited, referral source, device type, country — no personal identifiers)
• Essential cookies required for site functionality

3. How we use your data

We use personal data only for the purpose it was provided:

• Contact form: to respond to your enquiry
• Claim requests: to verify business ownership and update listings
• Newsletter: to send you the updates you've opted into — a weekly events digest and/or a monthly editorial roundup (you can unsubscribe or change your preferences at any time)
• Analytics: to understand how the site is used and improve it

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal basis for processing

Under UK GDPR, we process your data on the following bases:

• Consent: newsletter subscriptions, non-essential cookies
• Legitimate interest: anonymous analytics, responding to contact enquiries, site security
• Contractual necessity: processing business listing claims

5. Cookies

We use a limited number of cookies. For full details, see our Cookie Policy.

Essential cookies are used for site functionality (e.g., remembering your cookie preferences). Analytics cookies are only set with your consent.

6. Third-party services

We use the following third-party services that may process data:

• Google Fonts: serves web fonts (Google may collect IP addresses — see Google's Privacy Policy)
• YouTube: embedded videos on some listing pages (loaded only with your interaction)
• Mailchimp (Intuit): processes newsletter subscriptions and sends email communications on our behalf. Mailchimp stores your email address and subscription preferences. See Intuit's Privacy Statement
• Analytics provider: anonymous, aggregated usage statistics
• Supabase: hosts the business and member account system (sign-in, your account details and anything you submit — listing changes, events, offers, news, photos). Data is stored in the EU (Ireland). See Supabase's privacy policy.
• Resend: sends account emails such as sign-in links and status updates on our behalf.

Business and member accounts. If you create an account, we store your name, email address and what you submit so we can review and publish it. Everything you send is checked by a person before it appears on the site. We never sell this data. You can delete your account at any time from your account settings (or by asking us); published listing content remains part of the directory.

We do not use social media tracking pixels, retargeting, or advertising cookies.

7. Data retention

• Contact form messages: deleted after 12 months unless an ongoing relationship exists
• Business claim requests: retained for the lifetime of the listing
• Newsletter subscribers: until you unsubscribe
• Analytics data: aggregated and anonymised; no personal data retained

8. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restrict processing — ask us to limit how we use your data
• Data portability — receive your data in a structured, common format
• Object — object to processing based on legitimate interest
• Withdraw consent — at any time, for processing based on consent

To exercise any of these rights, contact us. We will respond within 30 days.

9. Data security

We take reasonable measures to protect your data, including encrypted connections (HTTPS), secure hosting, and limited access to personal data. However, no method of transmission over the internet is 100% secure.

10. Children's privacy

Brighton Insider is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect changes. Continued use of the site after changes constitutes acceptance of the updated policy.

12. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.