1. Introduction
LBL Network ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
LBL Network is the data controller for the personal data we process. If you have any questions about how we handle your data, please contact us via the contact details on the Platform.
3. What Data We Collect
We may collect and process the following personal data:
- Account information: Full name, email address, phone number, county, password (encrypted)
- Business information: Business name, address, contact details, services offered, business type
- Profile data: Biography, profile photo, business logo, cover images
- Content: Posts, comments, marketplace listings, photos you upload
- Usage data: Pages visited, features used, timestamps, device and browser information
- Communication data: Messages sent through the Platform
4. How We Use Your Data
We use your personal data for the following purposes:
- To create and manage your account
- To display your business listing in the trade directory
- To enable social features (posts, comments, likes)
- To facilitate marketplace transactions between members
- To send you relevant notifications about your account and the Platform
- To improve the Platform and develop new features
- To ensure the security and integrity of the Platform
- To comply with legal obligations
5. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract: Processing necessary to provide you with our services
- Consent: Where you have given specific consent (e.g. optional cookies)
- Legitimate interests: To improve the Platform, prevent fraud, and ensure security
- Legal obligation: Where we are required to process data by law
6. Data Processors
We use the following third-party services to process data on our behalf:
- Supabase: Database hosting, authentication, and file storage (data stored in the EU/UK)
- Vercel: Website hosting and content delivery
These processors are contractually bound to process data only on our instructions and to implement appropriate security measures.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.
8. Your Rights
Under the UK GDPR, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your personal data ("right to be forgotten")
- Right to restrict processing: Request that we limit how we use your data
- Right to data portability: Request a copy of your data in a machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us through the Platform. We will respond to your request within one month.
9. Cookies
We use cookies to provide essential site functionality and, with your consent, to understand how you use the Platform. For full details, see our Cookie Policy.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, access controls, and regular security assessments.
11. International Transfers
Your data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions by the UK Government.
12. Children
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the Platform or email. The "Last updated" date at the top of this page indicates when the policy was last revised.
14. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
15. Contact
For any questions about this Privacy Policy or to exercise your data rights, please contact us through the Platform or via the contact details provided on our website.