Privacy notice

This notice covers The Ultimate Saffa Hub — Home & Away (“Saffa Hub”, “we”), the website you are reading. Saffa Hub is the data controller for the information described here.

Legal identity details (registered name, company number and registered address) are [Saffa Hub legal entity details — TO BE CONFIRMED]. No data protection officer has been appointed; if one is appointed, this notice must be updated.

We only collect information you give us through the features that exist on the site today.

• Account information. When you create an account we store your email address and, if you sign in with Google, the basic profile information Google returns (name and email). We also store a display name if you provide one. Purpose: to create and secure your account and to link your activity to you. Lawful basis: performance of a contract (providing the account you asked for).
• Business submissions. If you submit a business listing we store the business name, description, services, town, county, postcode and any contact details you enter (email, phone, WhatsApp, website), plus your user ID as the submitter. Purpose: to review the listing and, if approved, publish it. Lawful basis: performance of a contract, and our legitimate interest in running a moderated directory. Note that an approved listing, including any contact details you supply, becomes publicly visible.
• Business claims. If you claim a listing we store your claim message and the evidence of your connection to the business, along with your user ID. Purpose: to let a person check the claim manually. Lawful basis: legitimate interest in preventing false claims.
• Event submissions. We store the event details you enter, including organiser name, venue, address, dates and any link you supply, plus your user ID. Approved events are published publicly. Lawful basis: performance of a contract and legitimate interest in a moderated events listing.
• Saved items. We store which businesses, events, destinations and guides you save, so your saved list appears in My Saffa Hub. Lawful basis: performance of a contract.
• Trip planner information. We store the trips you save in Going Home — such as destination, dates and your own notes. These are private to your account. Lawful basis: performance of a contract.
• Authentication and technical data. Signing in creates a session stored in your browser. Our hosting and database providers process standard technical information such as IP address and request logs in order to serve and secure the site. Lawful basis: legitimate interest in security and reliability.

We do not run advertising or analytics profiling, we do not sell personal information, and we do not currently operate a newsletter or send marketing email.

We do not ask for special category data (such as health, ethnicity, religion or political opinions). Please do not include it in free-text fields. The site is not intended for children under 13.

Accounts, submissions, claims, saved items and trips are stored in a hosted PostgreSQL database with authentication provided through Supabase, used as our processor, and the site is served through our hosting provider. These providers process data on our instructions under their own terms and security measures. Data may be processed outside the UK; where that happens we rely on the providers’ standard transfer safeguards.

If you sign in with Google, Google handles the sign-in itself and receives the fact that you signed in to this site. Links to third-party sites — such as radio broadcasters or business websites — are outside our control and have their own privacy notices.

We share information with other people only where publication is the point of the feature (an approved listing or event), or where we are required to by law.

Account information is kept while your account exists. Published listings and events are kept while they remain relevant to the directory. Submissions and claims that are rejected, and saved items and trips, are kept while your account is active and are deleted with your account. If you ask us to delete your account we will delete your personal information, except anything we must keep for legal reasons or content already published where removal would be disproportionate — we will explain if that applies.

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it, or object to our use of it where we rely on legitimate interests;
• ask for a portable copy of information you gave us; and
• withdraw consent where we rely on it, without affecting anything done before.

You can see, save and remove much of this yourself in My Saffa Hub.

To exercise any of these rights, or to ask a question about this notice, contact us at [Saffa Hub contact email — TO BE CONFIRMED]. See the contact page for the ways to reach us that are available today. We aim to respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk/make-a-complaint or by calling their helpline. We would appreciate the chance to put things right first.

Saffa Hub is still being built, so features may change. When they do, this notice will be updated. It currently has no confirmed effective date — [effective date — TO BE CONFIRMED].