The Local Page

Draft for review before launch. This document is a template prepared during the build and must be reviewed against the actual operating model, registered details and data flows by the site operator before publication. It does not by itself make the website compliant.

Legal

Privacy notice

How The Local Page handles personal information under the UK General Data Protection Regulation and the Data Protection Act 2018.

Who we are

The Local Page is operated by [Operator legal name], [registered address]. For data protection questions or to exercise your rights, contact us through the website or at [data protection contact email]. Our ICO registration number is [ICO registration number — to be added].

What we collect and why

Business listings and submissions

When you submit a business listing we store the business details you provide, your contact name and email, and a one-way hashed record of your IP address (used only for spam protection). The business information is published as a listing; your contact details are not. We keep submissions while the listing exists, then for up to [retention period] for administration.

Claims and corrections

Claiming or correcting a listing stores your name, email, telephone number (optional) and the information you give us to verify the claim. We use it only to process the claim and manage the listing thereafter.

Jobseeker profiles

Your profile is under your control. We store a display name, your area, your headline, skills and the other fields you complete, your visibility setting, and — only if you upload one — your CV in private storage that is not web-accessible. Your full name, CV, contact details and address are never published. Profiles are kept until you deactivate or delete them. See the separate jobseeker privacy information.

Job vacancies and events

Submitters' names and email addresses are stored to administer the submission and are never published. Published vacancy and event content is the information you asked us to display.

Accounts

Accounts store your email address, name and a securely hashed password, plus records of when you sign in. We keep failed sign-in counts and short-lived lockouts for security.

Messages

Contact and advertising enquiry forms store your name, email, optional phone number and message so we can reply and keep a record of what was agreed.

Marketing consent

Our forms include a single, clearly-labelled email updates toggle covering The Local Page and its partner companies. It is switched on by default for convenience; switching it off is one tap and changes nothing about your listing or account. When you submit a form we record the email address, the choice you made, the exact wording in force, the date and how it was given — in an append-only ledger, so consent and withdrawal can be audited. You can withdraw consent at any time.

Technical records

We use one essential cookie (see the cookie notice) to keep your chosen area and sign-in. Rate-limiting and abuse protection store a one-way salted hash of your IP address for at most 48 hours. Our logs record errors, not browsing histories tied to individuals.

Who we share information with

We do not sell or rent personal information. We share personal data only with service providers strictly necessary to run the platform — our hosting and database provider, and our email delivery provider where used — on the basis of contracts that protect the data. Business contact details are never shared with third parties for their own marketing just because a listing was submitted.

Your rights

You can ask for access to your personal data, correction, deletion, restriction, or a copy (portability); object to processing; and withdraw marketing consent at any time. To do any of these, contact us. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Security

Passwords are stored only as salted hashes. Database access is restricted and encrypted in transit. Uploads are validated and re-encoded. Administrative actions are logged. We keep backups and can restore the platform after an incident.