This Privacy Policy explains how Love Derby Limited ("we", "us" or "our") uses personal information when you visit or use Love Nottingham at https://lovenottingham.co.uk, including its accounts, place listings, reviews, community features and business tools. Contact us about privacy at [email protected]. Our registered office is [Registered address not configured] and company number is [Company number not configured].
Before publication: this document must match a verified data inventory for the particular publication. Review every [CONFIRM] item; do not publish them as placeholders or assume all suppliers or features are enabled on every website.
1. Who controls your information
Love Derby Limited currently operates Trooguide, Love Derby and Love Nottingham. For personal data that we decide to collect and use for those publications, Love Derby Limited is the data controller. Independent providers, including payment provider Stripe and Google advertising services, may act as separate controllers for some of their processing; consult their notices. Should a publication move to a different operator, we will update its legal and privacy information as appropriate.
2. Information we collect
For a standard user account we primarily store your name, email address and public profile name, together with the authentication information necessary for login (such as a securely hashed password), account settings and security records. We may also process information you choose to add to your profile or publish in place submissions, photographs, reviews, ratings, questions, answers, comments or itineraries. If you contact us, report content or apply to manage a business, we may retain relevant messages, moderation records and verification details.
Payments are handled by Stripe. We may store Stripe customer and subscription identifiers, plan information, invoice/payment status, receipts and transaction references so we can administer subscriptions, but our application does not store full card numbers or card security codes. Stripe handles payment-card information under its own arrangements.
Like other websites, we may process technical information such as IP addresses, device and browser details, session identifiers, security logs, cookie-consent choices and Google advertising identifiers where the relevant technology is enabled and lawfully used.
If you voluntarily supply precise location for nearby results, we may process that location to provide the feature. We should not require precise location where it is unnecessary. Uploaded photographs may contain location metadata or identifying people; please check images before uploading.
3. Purposes and legal bases
We use personal information to provide accounts, publish user-requested contributions, deliver business tools and complete paid orders (contract, where applicable); protect the platform, prevent fraud, detect fake reviews, investigate abuse, respond to disputes and improve reliability (legitimate interests, balanced against individuals' rights, and/or legal obligations where appropriate); keep financial and compliance records (legal obligation); and respond to questions, complaints and rights requests (contract, legitimate interests or legal obligation, depending on context).
We may send operational emails necessary to administer accounts, bookings of our own services and subscriptions. Optional marketing communications require the appropriate lawful basis and compliance with electronic marketing rules; you can opt out through the provided mechanism. Non-essential cookies and related tracking are subject to the Cookie Policy and consent or any applicable statutory exemption.
4. Public contributions and profiles
Information you publish in a public profile, review, photo, question or place page can be viewed, shared, indexed or copied by others. Your chosen public name may appear beside contributions. We may maintain a record of moderation decisions and content provenance for safety, accountability and review integrity. Removal from our Site does not guarantee immediate removal from third-party search caches or recipients who lawfully received the information.
Don't include sensitive or unnecessary personal information in public posts. For details about ownership and removal of submitted content, see our Terms of Service and Copyright & Takedown Policy.
5. Where information comes from
We collect information from you when you register, submit a contribution, contact us or manage a business. We may also receive transaction status from payment providers; place details from third-party mapping or business-information services; business verification information from authorised representatives; and reports from other users or organisations about content or account activity.
6. Sharing and service providers
We use selected suppliers to operate the site. These include Stripe for secure payments, stored card details and subscriptions; Google AdSense for advertisements and, where enabled, Google Tag Manager and related Google services; and hosting, email, storage and security suppliers (which may include Cloudflare). These suppliers receive or process only information relevant to their services, subject to appropriate arrangements and law. In connection with advertising, Google and its partners may collect device, cookie or usage information in line with the choices offered and applicable consent rules.
We may also disclose information to authorities where legally required, to respond to valid legal claims or emergencies, or as part of a properly managed business reorganisation. Business representatives can see relevant public listing information and permitted account records but do not receive reviewers' private account details simply by paying for a plan.
7. International transfers
Some hosting and technology providers may process data outside the UK. Where UK data protection law requires safeguards, we rely on an applicable adequacy decision or approved transfer mechanism and additional measures where necessary.
8. Retention and account deletion
We retain information only for as long as needed for the purpose, including ongoing accounts, publication history, fraud prevention, legitimate disputes and statutory financial or tax records. When no longer needed, personal data should be deleted, anonymised or securely archived under an appropriate schedule.
Account closure requests do not necessarily require immediate deletion of every contribution or record, particularly where others' rights, lawful public discussions, fraud evidence or statutory duties apply. Each request is assessed under the law, and personal identifiers should be removed where required.
9. Your privacy rights
Subject to the conditions and exceptions in applicable law, you can request access, correction, deletion, restriction, portability and information about your data, and object to certain processing. You can object to direct marketing at any time. Where processing is based on consent, you can withdraw consent without affecting processing that was lawful before withdrawal. Contact [email protected] to make a request. We may need to verify your identity before disclosing protected account information.
You can complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your personal information has been handled unlawfully; we welcome the opportunity to address your concern first.
10. Security, children and changes
We use proportionate technical and organisational measures to protect information, though no online system is risk-free. Do not submit information about children unless it is appropriate and lawful.
We may update this policy to reflect changed services or legal requirements and will give appropriate notice, including advance notice where required before using data for a new purpose.
Effective 31 October 2026. Contact: [email protected].