Privacy notice
Draft for owner review. This is a starting draft for a UK site. It is not legal advice and it is not a finished policy. Add the operator’s legal name and address, then have it checked, before relying on it.
This notice explains how glutenfreerestaurantsnearme.org handles personal information. It is written for UK data protection law, including the UK GDPR and the Data Protection Act 2018.
Who we are
The site is run by its operator, who is based in the United Kingdom. The operator is the controller for any personal information the site collects. For privacy requests, email hello@glutenfreerestaurantsnearme.org. The legal name and postal address will be added here.
What the site does
The site is a public directory of gluten-free restaurants. Venue pages are built from information we have checked on the venue’s own website. That information is about places, not about you.
What we collect at launch
There is no account system. We do not ask you to sign in.
- The venue form does not store what you type. Until it is connected, nothing you enter is saved by us.
- The email signup is not switched on. We do not collect email addresses for a newsletter.
- We do not use advertising cookies or an analytics product at launch, so we do not build a profile of how you browse the site.
Hosting and connection logs
The site is hosted on Vercel. Vercel processes connection logs in order to deliver and protect the service. Those logs can include your IP address, browser type, and the page you requested. A Cloudflare proxy may be placed in front of the site later and would process similar connection data. The operator should have a data processing arrangement with each host before launch. We do not sell these logs.
Fonts are included with the site. They are not fetched from Google when you visit.
Cookies
At launch the site does not set its own tracking or advertising cookies. The host, and later Cloudflare, may use strictly necessary cookies or similar technical measures to run the service and to resist abuse. If a non-essential cookie is added later, this notice will be updated first and, where the law requires it, we will ask before setting it.
If the form or newsletter is switched on
If venue submissions are later stored, we expect to keep the details you send (such as the venue, the source link, and your name and email if you give them) so we can check the tip and reply. The lawful basis would be our legitimate interests in running an accurate directory, or your consent if we rely on that instead. We will name the basis in an updated notice before collection starts.
If a newsletter is added, through a tool such as Beehiiv or Substack, we will collect your email only if you choose to join, and we will name that provider here. You will be able to unsubscribe from the provider’s own message.
How long we keep information
We do not hold venue submissions or newsletter addresses, because we do not collect them yet. Host logs are kept for the host’s own retention period. If we later store a submission, we will keep it only as long as we need it to check the listing and handle any follow-up, then delete it or cut it down.
Who we share information with
We do not sell personal information. Hosting providers process connection data for us. If a form store or an email tool is added, that provider would be a processor or, in some cases, its own controller. Booking buttons leave this site and go to the venue or its booking company. What happens there is covered by their notice, not this one.
Transfers outside the UK
Vercel may process connection data outside the United Kingdom. Before launch, the operator should record the safeguard used for that transfer, such as the UK International Data Transfer Addendum or an adequacy regulation. The same applies to any later email or form tool.
Your rights
Under the UK GDPR you can ask for a copy of your personal information, ask us to correct it, erase it, or restrict how it is used, and you can object to some processing. Where the basis is consent, you can withdraw consent. You can also complain to the Information Commissioner’s Office at ico.org.uk. Because we collect almost nothing directly at launch, we may have little or nothing to show you beyond what a host log still holds.
Children
The site is a restaurant directory. It is not aimed at children, and we do not knowingly collect personal information from children.
Changes and contact
If this notice changes in a way that matters, the page will say so. The date of the last real update will be added once the owner has approved a version.
For privacy requests, email hello@glutenfreerestaurantsnearme.org.