Privacy Policy
Last updated: June 2026
Who we are
Warwick & Leamington (warwickandleamington.com) is a community platform connecting residents with local independent businesses in Warwick, Leamington Spa and Kenilworth. We are the data controller for personal information collected through this platform.
Contact us at hello@warwickandleamington.com.
What we collect and why
Account information
Name, email address, phone number (mobile app only), and postcode. We use this to create your account, verify you're a local resident, and communicate with you. Lawful basis: contract.
Location (postcode)
We check your postcode against CV-area codes to grant Verified Local status, which unlocks locals-only offers. We don't track your real-time location. Lawful basis: contract.
Activity data
Offers you've claimed, points earned, events and articles you've interacted with. Used to run the loyalty scheme and improve the service. Lawful basis: contract / legitimate interests.
Business information
If you claim a business listing: business name, address, phone, website, opening hours and photos. This is displayed publicly on the platform. Lawful basis: contract.
Marketing emails
Only if you explicitly opted in during signup. You can unsubscribe any time by emailing us or using the unsubscribe link. Lawful basis: consent.
Third parties we use
Firebase (Google)
Handles authentication (sign-in via Google, magic link email, phone OTP). Google processes your sign-in credentials. See Firebase Privacy.
Postcodes.io
We send your postcode to this free UK API to validate it. No personal data beyond the postcode is shared.
Email delivery
Transactional emails (verification, notifications) are sent via our own mail server at warwickandleamington.com. No third-party email marketing platform is used.
How long we keep your data
Active accounts: for as long as your account exists.
Deleted accounts: personal data (name, email, phone, postcode) is removed within 30 days of deletion. Anonymised transaction records (points, claims) may be retained for business records.
Business listings: removed when you request deletion or within 90 days of account closure.
Your rights (UK GDPR)
Access — request a copy of the data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your account and personal data.
Portability — receive your data in a machine-readable format.
Withdraw consent — unsubscribe from marketing at any time.
Object — object to processing based on legitimate interests.
To exercise any right, email hello@warwickandleamington.com. You also have the right to complain to the ICO.
Cookies
We use strictly necessary cookies (session management, authentication state) which do not require consent. We also use Google Analytics cookies to understand how visitors use the site — these are only set once you accept them via the cookie banner. You can change your choice at any time by clearing your browser's site data for this domain. We do not use advertising cookies.
Changes to this policy
We'll notify registered users of any material changes by email before they take effect. The "Last updated" date at the top of this page always reflects the current version.