Skip to main content
Grimsby Local

Privacy Policy

Last updated: 18 March 2026

Who we are

Rothenburg Limited (Company No. 16716499), trading as Grimsby Local, operates the website grimsbylocal.co.uk — a local business directory for North East Lincolnshire.

Children's data

This service is not directed at children. You must be at least 18 years old to create an account or list a business. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us at hello@grimsbylocal.co.uk and we will delete it.

What data we collect

Site visitors

We do not use cookies for tracking and we do not sell your data. No personal data is collected from casual browsing.

Business owners

When you create or claim a listing, we collect:

  • Your name and email address (for account and login)
  • Business details you provide: name, address, phone number, website, description, opening hours, and photos
  • Payment information processed by GoCardless (we do not store bank details ourselves)

Business details you submit are displayed publicly on your listing page.

Reviewers

When you leave a review, we collect your name and email address. Your email is used solely to verify your review and is never displayed publicly.

How we use your data

  • To display your business listing on the directory
  • To authenticate you via magic-link email login
  • To process subscription payments via GoCardless (Bacs Direct Debit)
  • To send essential transactional emails (login links, review notifications)
  • To verify and publish reviews

Cookies

We use a single session cookie (__session) when you are logged in to the business portal. This cookie is:

  • HttpOnly (not accessible to JavaScript)
  • Expires after 30 days
  • Used only for authentication — not for tracking or advertising

We do not use any third-party tracking cookies.

Third-party processors

We share data with the following third parties only as needed to operate the service:

  • GoCardless — payment processing via Bacs Direct Debit. GoCardless receives your name and bank details to collect subscription payments. See GoCardless Privacy Policy.
  • Resend — transactional email delivery. Resend receives your email address to send login links and notifications. See Resend Privacy Policy.
  • Cloudflare — website hosting (Workers), database (D1), and image storage (R2). All data is processed on Cloudflare infrastructure. See Cloudflare Privacy Policy.

We do not share your personal data with anyone else.

Data retention

  • Account data is retained while your account is active.
  • Business listing content is retained while your listing is published. Previous versions are pruned automatically (only the live version and last 10 edits are kept).
  • If you delete your account, your personal data is removed. Published listing content may be retained in anonymised form.

Your rights under GDPR

As a UK-based service, we comply with the UK General Data Protection Regulation (UK GDPR). These rights apply to your personal data (such as your name, email address, and payment details) — not to business listing information such as your business name, address, or opening hours. You are responsible for keeping your business listing accurate via the portal (see our Terms of Service).

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate personal data
  • Deletion — ask us to delete your personal data
  • Data portability — receive your data in a structured, machine-readable format
  • Object — object to processing of your data in certain circumstances
  • Withdraw consent — where processing is based on consent, withdraw it at any time

If you are a sole trader, your business details may also constitute personal data under GDPR, in which case these rights extend to that information.

To exercise any of these rights, email us at hello@grimsbylocal.co.uk. We will respond within 30 days.

Legal basis for processing

  • Contract — processing your data is necessary to provide the directory service and manage your listing
  • Legitimate interest — sending essential service communications and maintaining platform integrity
  • Consent — where applicable, such as optional communications

Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated by email at least 30 days before they take effect. The updated policy will be posted on this page with a revised "Last updated" date. Minor corrections (typos, formatting) may be made without advance notice.

Contact

If you have questions about this policy or wish to exercise your data rights, email us at hello@grimsbylocal.co.uk.