Privacy Policy

Twncryr is a UK-based platform that connects local people with independent high street businesses in their town. We are the data controller for personal data collected through this website and our services.

You can contact us at: ignistech999@gmail.com

Consumers (local residents)

• No account is required to browse the directory or view posts
• If you submit an enquiry to a business: your name, email address, phone number (optional), and message

Business owners

• Account information: name, email address, and organisation details via Clerk (our authentication provider)
• Business listing information: business name, address, description, opening hours, photos
• Posts you create: deals, last-minute tables, events, announcements
• Community forum posts and replies
• Payment information processed by Stripe (we do not store card details ourselves)

All users

• Standard server logs including IP address and browser type
• Analytics data on how pages and features are used

• To operate and provide the Twncryr service
• To pass consumer enquiries to the relevant business
• To send transactional emails (enquiry confirmations, account notifications) via Resend
• To enable real-time features (live deal feeds) via Pusher
• To process subscription payments via Stripe
• To improve the platform based on usage patterns

We do not sell your personal data. We do not use your data for advertising.

• Contract: processing necessary to operate your business account and provide the service you have signed up to
• Legitimate interests: fraud prevention, service security, and platform improvement
• Legal obligation: where we are required to retain records for tax or legal compliance
• Consent: for any marketing communications (you can withdraw at any time)

We use the following sub-processors who may handle your personal data:

• Clerk — authentication and identity management
• Stripe — payment processing
• Resend — transactional email delivery
• Pusher — real-time messaging infrastructure
• UploadThing — file and image storage
• Railway — database hosting (PostgreSQL, hosted in the EU)

All third-party processors are contractually required to protect your data and may only use it to provide services to us.

• Business account data is retained for as long as you have an active account, and for up to 2 years after account closure for legal compliance
• Consumer enquiries are retained for 12 months and then deleted
• Server logs are retained for 90 days

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data (right to be forgotten), subject to legal retention obligations
• Restrict processing in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests

To exercise any of these rights, email us at ignistech999@gmail.com. We will respond within 30 days.

If you have a complaint about how we handle your personal data, please contact us directly first:

• Email: privacy.ignistech@gmail.com
• Subject line: Privacy Complaint

We will acknowledge your complaint within 5 business days and investigate it promptly. We aim to resolve all complaints within 30 days. If a matter is complex it may take longer, in which case we will keep you informed of progress.

If you are not satisfied with our response, or if we fail to respond within 30 days, you have the right to escalate your complaint to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We use essential cookies only — those required for authentication and session management. We do not use tracking or advertising cookies.

We may update this policy from time to time. If we make material changes we will notify business account holders by email. The date at the top of this page shows when it was last updated.

For any privacy-related questions: ignistech999@gmail.com