Privacy & Data

This notice explains what personal data we collect when you use Tetbury Hype, why we collect it, and what your rights are. We are the data controller for personal data processed through the Service. You can contact us at hello@tetburyhype.com.

1. What we collect

• Account data — email address, role (consumer / business / admin), and login timestamps.
• Business profile data — business name, logo, brand colour, and the updates you post.
• Waitlist data — email address if you join the launch waitlist.
• Messages and feedback — anything you send us through the in-app messaging or feedback tools.
• Push notification tokens — if you opt in to notifications on the app.
• Technical data — basic logs (IP, browser, errors) needed to run and secure the Service.

2. Why we use it (and the lawful basis)

• Running the Service — to create your account, show you the feed, and let businesses post updates. Lawful basis: contract.
• Service emails — sign-in, password reset, waitlist welcome, and other account emails. Lawful basis: contract / legitimate interests.
• Push notifications — only if you opt in. Lawful basis: consent.
• Security and abuse prevention — keeping the Service safe and working. Lawful basis: legitimate interests.
• Legal compliance — where we have to keep or disclose data by law.

3. Sharing

We do not sell your data. We share it only with trusted providers who help us run the Service, including our hosting and database provider (Supabase / Lovable Cloud) and our email delivery provider. They process data on our instructions and under appropriate contracts.

4. Retention

We keep account data while your account is active and for a reasonable period after closure for legal and security reasons. Waitlist emails are kept until launch and then deleted or moved into an account. You can ask us to delete your data at any time (subject to legal exceptions).

5. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted ("right to be forgotten");
• restrict or object to certain processing;
• withdraw consent for marketing or notifications at any time;
• complain to the UK Information Commissioner's Office (ico.org.uk).

6. Cookies and similar technology

We use only the cookies and local storage strictly needed to keep you signed in and to run the Service. We do not use third-party advertising or tracking cookies.

7. Children

The Service is not aimed at children under 13 and we do not knowingly collect their data.

8. International transfers

Some of our service providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy or Standard Contractual Clauses).

9. Changes

We may update this notice from time to time. Material changes will be notified through the Service.