Privacy Notice
This notice explains how personal information is used when you visit North Wales Finder, submit or manage a business listing, contact us, or use a paid plan.
Who is responsible for your information
VNPD Properties Limited is the data controller for North Wales Finder. It is registered in England and Wales under company number 15792102, with registered office at 66 Heysham Road, Southport, PR9 7EB. Contact us at hello@northwalesfinder.co.uk.
Information we collect
- business and account details, including business name, location, category, website and account email;
- optional public contact details, descriptions, visitor information, offers and uploaded images;
- application, verification, moderation, listing-change and support records;
- subscription identifiers, payment status and invoice information supplied by Stripe—we do not receive or store full card details;
- basic service activity such as signup steps, listing views, outbound clicks, referral source and reward claims; and
- technical and security information processed by our hosting and service providers, such as IP address, device or browser information and request logs.
Why we use it
We use personal information to take steps at your request and perform our contract with you, including creating, reviewing, publishing, managing and billing for a listing. We also use information where necessary for our legitimate interests in operating, securing, measuring and improving the platform, preventing abuse, resolving disputes and communicating about an application or listing.
We use information to meet legal and accounting obligations where required. We will seek consent before sending optional marketing where consent is legally required. Operational messages about an application, listing, payment or security are not marketing.
Public listing information
Approved listing information is public and may be indexed by search engines. Account email addresses are not published unless you separately provide the same address as a public contact. Provisional previews are marked as pending verification and are excluded from directory search and search-engine indexing.
Who we share information with
We use service providers including Cloudflare for hosting, database and media storage, Stripe for payment and subscription services, and Resend for email delivery. They process information on our behalf or as an independent controller for their own regulated functions. We may also disclose information to professional advisers, authorities or another party where required by law, needed to protect legal rights, or connected with a properly managed business transfer.
Some providers may process information outside the UK. Where UK data-protection law requires safeguards, we rely on an adequacy decision or approved contractual protections.
How long we keep it
- active listing and account records are kept while the listing relationship continues and for a reasonable period afterward;
- withdrawn, rejected or incomplete application records are normally retained for no more than 24 months for review, dispute and abuse-prevention purposes;
- contract, invoice and payment records may be kept for up to six years after the relevant financial period where needed for legal, tax or accounting purposes;
- conversion and service-activity records are normally retained for no more than 24 months; and
- operational backups and provider security logs are retained for limited periods under the relevant provider schedule.
We may keep a record for longer where a legal claim, investigation or preservation obligation requires it.
Security
We use access controls, private management links, encrypted connections, restricted administrative access and managed provider security. Keep a private management link confidential and tell us promptly if you believe it has been exposed.
Your rights
Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent where processing relies on consent. Contact us using the email above. We may need to verify your identity before acting.
You can complain to the Information Commissioner’s Office, although we would appreciate the opportunity to address the issue first.
Children
Business partner accounts are not intended for children, and we do not knowingly collect account information from children.
Changes
We will update the date at the top when this notice changes materially.