1. Who we are

GuernseyFinds.com is a local business directory for the Bailiwick of Guernsey. We are the data controller responsible for your personal data. Contact us: hello@guernseyfinds.com

2. What data we collect

• Account data — name, email address, encrypted password
• Business listing data — business name, phone, website, photos, description, opening hours
• Payment data — processed by Stripe; we do not store card details
• Usage data — pages visited, browser type, IP address
• Communications — messages sent via our contact form

3. Legal basis for processing

Under the DPL 2017, we process your data on these lawful bases:

• Contract — to fulfil our agreement when you create an account or purchase a Premium listing
• Legitimate interests — to operate and improve GuernseyFinds.com and prevent fraud
• Consent — for marketing emails, which you may withdraw at any time
• Legal obligation — where required by Guernsey law

4. How we use your data

• To create and manage your account
• To publish and manage your business listing
• To process Premium subscription payments via Stripe
• To send transactional emails (confirmations, approvals, billing)
• To respond to support enquiries
• To improve our service and prevent abuse

We do not sell your personal data to third parties, and we do not use it for automated decision-making or profiling.

5. Who we share your data with

• Supabase (EU region) — database and authentication
• Stripe — payment processing
• Resend — transactional email delivery
• Vercel — website hosting

All processors are contractually bound to process your data only on our instructions.

6. Your rights under the DPL 2017

• Right of access — receive a copy of your personal data
• Right to rectification — have inaccurate data corrected
• Right to erasure — have your data deleted
• Right to restriction — limit how we process your data
• Right to data portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time, where processing is consent-based

Contact us at hello@guernseyfinds.com to exercise any of these rights. We will respond within 30 days.

7. Data retention

We retain your data while your account is active. Upon account closure, we delete your personal data within 90 days, unless retention is required by law.

8. Cookies

We use essential cookies only — necessary for authentication and security. We do not use advertising or tracking cookies. Our cookie use is governed by the European Communities (Implementation of Privacy Directive) (Guernsey) Ordinance, 2004.

9. Complaints

You may lodge a complaint with the Office of the Data Protection Authority (ODPA):
St Martin's House, Le Bordage, St Peter Port, Guernsey, GY1 1BR
www.odpa.gg

10. Changes to this policy

We may update this policy from time to time. Continued use of GuernseyFinds.com after changes constitutes acceptance of the updated policy.