Privacy Policy

The data controller responsible for your personal data is:

Our designated Data Protection Officer (DPO) is James R. Holbrook, who can be contacted at the address above or at dpo@calleaseuk-connect.com.

We collect personal data in the following ways:

Information you provide directly

• Account registration: name, email address, password (stored encrypted)
• Business listing: business name, address, phone number, website URL, description, photos, opening hours, and services
• Contact forms: name, email, phone number, and the content of your message
• Newsletter sign-up: email address
• Reviews: your name and the content of any review you submit
• Payment information: billing name and address for Priority Listing upgrades — card details are processed by our payment provider and never stored on our servers

Information collected automatically

• Usage data: pages visited, time spent, clicks, and search queries
• Device and browser data: IP address, browser type, operating system, screen resolution
• Referral data: the source that directed you to our platform
• Cookies and tracking technologies (see Section 5)

Information from third parties

• Publicly available business information used to pre-populate unverified listings
• Analytics data from providers such as Google Analytics

We use the personal data we collect for the following purposes:

We will never sell your personal data to third parties, and we will not use it for purposes incompatible with those listed above.

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Contract: Processing is necessary to fulfil our agreement with you — for example, creating your listing or processing a Priority Listing subscription.
• Legitimate interests: We process certain data to operate, improve, and secure our platform, provided your interests and rights are not overridden.
• Consent: Where we send marketing emails or use non-essential cookies, we will ask for your explicit consent first. You may withdraw consent at any time.
• Legal obligation: Where we are required by law, regulation, or court order to process your data.

We use cookies and similar tracking technologies on our platform. Cookies are small text files placed on your device that help us recognise you and improve your experience.

Types of cookies we use

• Essential cookies: Required for the platform to function, including keeping you logged in. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our site (e.g. Google Analytics). Only set with your consent.
• Marketing cookies: Used to show relevant advertising and measure campaign performance. Only set with your consent.
• Preference cookies: Remember your settings and preferences to personalise your experience.

We do not sell, rent, or trade your personal data. We may share your information with trusted third parties only in the following circumstances:

Service providers

• Payment processors (e.g. Stripe) to handle billing securely
• Email delivery providers to send transactional and marketing emails
• Analytics providers (e.g. Google Analytics) to understand platform usage
• Cloud hosting providers to store and serve our platform
• Customer support tools to manage support requests

All third-party processors are bound by data processing agreements and are required to handle your data securely and in accordance with UK GDPR.

Legal requirements

We may disclose your data if required by law, regulation, court order, or to protect the rights, property, or safety of CallEaseUK·Connect, our users, or the public.

Business transfers

In the event of a merger, acquisition, or sale of our business, your data may be transferred to the new owner. We will notify you in advance and provide choices regarding your data.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Account data: Held for the lifetime of your account, plus 30 days after deletion to allow recovery requests.
• Business listing data: Retained while your listing is active; removed within 30 days of a deletion request.
• Payment records: Retained for 7 years to comply with HMRC financial record-keeping requirements.
• Support correspondence: Retained for 2 years from the date of last interaction.
• Analytics data: Retained in anonymised or aggregated form for up to 26 months.
• Marketing consent records: Retained for 3 years from the date consent was given or last refreshed.

After the relevant retention period, your data is securely deleted or anonymised.

Under UK GDPR, you have the following rights in relation to your personal data:

To exercise any of these rights, contact us at privacy@calleaseuk-connect.com. We will respond within 30 days. We may need to verify your identity before processing your request.

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it. These include:

• SSL/TLS encryption for all data transmitted between your browser and our platform
• Encrypted storage of passwords using industry-standard hashing
• Access controls limiting who within our organisation can access personal data
• Regular security audits and vulnerability assessments
• Secure, access-controlled data centres operated by our hosting providers

In the event of a personal data breach likely to result in risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay, as required by UK GDPR.

Our platform contains links to third-party websites, including business websites listed in our directory. These websites have their own privacy policies which we do not control and are not responsible for. We encourage you to review the privacy policy of any third-party site you visit.

The inclusion of a link to a third-party website does not constitute an endorsement of that website or its privacy practices.

Our platform is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you are under 13, please do not use our platform or provide us with any personal information.

If we become aware that we have inadvertently collected data from a child under 13 without appropriate parental consent, we will delete it promptly. If you believe we may have collected data from a child, please contact us at privacy@calleaseuk-connect.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users by email where the changes materially affect how we handle their data
• Display a prominent notice on our platform for a period following the update

We encourage you to review this policy periodically. Your continued use of our platform after changes are posted constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please get in touch with our Data Protection team:

You can also use our Contact page to reach us, or visit our FAQ page for answers to common questions.