Privacy Notice

This notice explains how personal information is used when you visit North Wales Finder, use a Friendly Explorer account, submit or manage a business listing, contact us, or use a paid plan.

Who is responsible for your information

VNPD Properties Limited is the data controller for North Wales Finder. It is registered in England and Wales under company number 15792102, with registered office at 66 Heysham Road, Southport, PR9 7EB. Contact us at hello@northwalesfinder.co.uk.

Information we collect

• Friendly Explorer account information, including email address, optional first name, adult confirmation, sign-in and security records;
• Explorer activity you choose to save or mark as experienced, including day-plan preferences, included business identifiers, completion dates, voluntary passport area, visit date, optional place name, partner QR visits, points and badges. Passport visits remain self-reported; a partner QR visit is recorded only when a signed-in Explorer scans that business’s unique code. The service does not request precise GPS coordinates or collect background location;
• business and account details, including business name, location, category, website and account email;
• optional public contact details, descriptions, visitor information, offers and uploaded images;
• application, verification, moderation, listing-change and support records;
• subscription identifiers, payment status and invoice information supplied by Stripe—we do not receive or store full card details;
• basic service activity such as signup steps, directory and planner appearances, listing views, outbound clicks, partner QR scans, referral source and reward claims;
• your email address, optional first name and chosen interests if you opt in to weekly weekend ideas, together with consent, confirmation, delivery and unsubscribe records;
• technical and security information processed by our hosting and service providers, such as IP address, device or browser information and request logs. The application service uses a short-lived, salted one-way connection fingerprint to limit abusive submission attempts; and
• public webpage titles and descriptions when a business asks the optional website assistant to suggest listing details. Suggestions are shown for review and are not submitted automatically.

Why we use it

For Friendly Explorer accounts, we use information to provide the account, secure passwordless sign-in, saved plans and the points and badge features requested by the account holder. Essential service emails contain sign-in links or security information and are not marketing.

If you opt in to weekly weekend ideas, we rely on your consent. We use double opt-in, include an unsubscribe link in every edition and stop sending after you unsubscribe. This optional email is not required to use the site or an Explorer account.

We use personal information to take steps at your request and perform our contract with you, including creating, reviewing, publishing, managing and billing for a listing. We also use information where necessary for our legitimate interests in operating, securing, measuring and improving the platform, preventing abuse, resolving disputes and communicating about an application or listing.

We use information to meet legal and accounting obligations where required. We will seek consent before sending optional marketing where consent is legally required. Operational messages about an application, listing, payment or security are not marketing.

Public listing information

Approved listing information is public and may be indexed by search engines. Account email addresses are not published unless you separately provide the same address as a public contact. Provisional previews are marked as pending verification and are excluded from directory search and search-engine indexing.

Who we share information with

We use service providers including Cloudflare for hosting, database and media storage, Stripe for payment and subscription services, and Resend for email delivery. They process information on our behalf or as an independent controller for their own regulated functions. We may also disclose information to professional advisers, authorities or another party where required by law, needed to protect legal rights, or connected with a properly managed business transfer.

The visitor directory offers an optional GetYourGuide activity panel. It does not contact GetYourGuide until you choose to load the live activities or follow a GetYourGuide link. GetYourGuide then receives ordinary connection information such as your IP address, browser details and referring page, and may process booking or tracking information under its own privacy notice. North Wales Finder participates in its affiliate programme and may receive commission and aggregated referral information following an eligible booking.

Some providers may process information outside the UK. Where UK data-protection law requires safeguards, we rely on an adequacy decision or approved contractual protections.

How long we keep it

• active Friendly Explorer account, saved-plan, voluntary passport-visit, partner QR-visit and reward records are kept while the account remains open; expired sign-in links are routinely removed, and a deletion request can be made using the contact address below;
• weekly-email subscriber records are kept while the subscription is active; after unsubscribe, a limited suppression and consent record may be retained so we can respect the choice and demonstrate compliance;
• active listing and account records are kept while the listing relationship continues and for a reasonable period afterward;
• withdrawn, rejected or incomplete application records are normally retained for no more than 24 months for review, dispute and abuse-prevention purposes;
• contract, invoice and payment records may be kept for up to six years after the relevant financial period where needed for legal, tax or accounting purposes;
• conversion and service-activity records are normally retained for no more than 24 months; and
• operational backups and provider security logs are retained for limited periods under the relevant provider schedule.

We may keep a record for longer where a legal claim, investigation or preservation obligation requires it.

Security

We use access controls, one-time email sign-in links, hashed session and login tokens, private business-management links, encrypted connections, restricted administrative access, submission-rate limits and managed provider security. Keep private links confidential and tell us promptly if you believe one has been exposed.

Your rights

Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent where processing relies on consent. Contact us using the email above. We may need to verify your identity before acting.

You can complain to the Information Commissioner’s Office, although we would appreciate the opportunity to address the issue first.

Children

Friendly Explorer and business partner accounts are for adults aged 18 or over. Adults may use Explorer features to plan family days, but children must not create or manage accounts. We do not knowingly collect account information from children.

Changes

We will update the date at the top when this notice changes materially.