Privacy Policy
Draft: not yet reviewed by a solicitor.
Bracketed items (company number, registered address, ICO registration) need real values before this goes live. See CLAUDE.md “Known placeholders”.
Last updated: [DATE]
Who we are
EveryVillage [Ltd, company number [COMPANY NUMBER], registered office [REGISTERED ADDRESS]] (“EveryVillage”, “we”, “us”) is the data controller for the personal data described below. We connect homeowners with local service providers, currently operating for Silchester, Hampshire, with plans to grow into more local areas. You can contact us about anything in this policy at hello@everyvillage.co.uk.
The two kinds of data we handle
This policy covers two different groups, because the data and the legal basis for each is different: people who visit this website looking for a service, and local businesses we contact or list.
Site visitors
We do not currently use analytics or tracking cookies. The contact form on this site is not yet connected to a backend, so no submissions are stored yet. This section will be updated, and this policy re-dated, once it is.
Local businesses and service providers
We maintain a private list of local businesses compiled from public sources (the Silchester Magazine and Google Places listings) to assess and contact as potential providers. For limited companies, this is business data, not personal data. For sole traders and partnerships, a name, phone number or email address identifies a real person and counts as personal data under UK GDPR.
If a business agrees to list with us, we publish some of that information on this site: business name, category, description, services, accreditations, contact details, and address (where supplied), as agreed with the business as part of their listing. Nothing is published without the business's agreement.
Our legal basis for processing
- Contacting prospective providers (sole traders and partnerships): legitimate interests: we only use minimal, publicly sourced business contact details for this purpose, and where someone is an individual we contact by phone or in person rather than unsolicited email, in line with PECR.
- Publishing a provider's listing: consent and contract: a business agrees to their listing, including what's published, as part of signing up.
What we don't do
We don't sell personal data to third parties, and we don't share it beyond what's needed to run the directory and process listing payments (via Stripe).
How long we keep it
Prospective-provider records are kept only while relevant to outreach and reviewed periodically; records for businesses that decline or never respond are deleted or anonymised on request. Published listing data is kept for the life of the listing and removed on cancellation, except where we need to keep billing records for legal or accounting reasons.
Your rights
Under UK GDPR you can ask us to access, correct, delete, or restrict use of your personal data, and you can object to us processing it. Email hello@everyvillage.co.uk and we'll respond within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Changes to this policy
We'll update this page if what we collect or how we use it changes, and update the date at the top.