Privacy Policy

Last updated June 2026 · Draft pending solicitor review

This policy explains what personal data Wylts collects, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). Wylts is the data controller for the personal data described here. We host content on behalf of our community — we are not a data broker and we do not sell your data.

What we collect

• Account data — your name, email address, and (for businesses) a contact phone number and postcode, plus the area and village you choose.
• Content you submit — listing claims and edits, events, tips and saved items.
• Technical data — basic, privacy-friendly analytics about page visits. We do not use tracking or advertising cookies.

Why we use it (lawful basis)

• To run your account and the service — basis: performance of a contract.
• To send marketing emails / newsletters — basis: your consent, which you give by opting in and can withdraw at any time.
• To keep the platform safe and lawful (moderation, preventing abuse) — basis: our legitimate interests.
• Account-recovery and service emails (such as password resets) — basis: performance of a contract.

Who we share it with

We use a small number of trusted providers to run Wylts. They process data on our behalf:

• Supabase — database, authentication and hosting of account data.
• Google Places — public business information used to build listings.
• postcodes.io — converts postcodes to map locations.
• Anthropic (Claude) — automated moderation of submitted text/images.
• Plausible Analytics — privacy-friendly, cookieless visitor statistics. It does not use cookies, track you across sites, or collect personal data.
• Map tiles, weather and imagery — CartoDB (maps), Open-Meteo (weather), Wikipedia and Unsplash (place information and photos). These do not receive your account data.

If we add an email newsletter (Beehiiv) it will be listed here. We will never sell your personal data.

How long we keep it

We keep account data while your account is active. If you delete your account, we soft-delete it immediately and permanently erase your personal data after a 30-day grace period. Any document uploaded for verification (a last resort, never mandatory) is deleted or redacted within 12 months.

Your rights

You have the right to access, correct, delete, or restrict the use of your personal data, to object to processing, and to data portability. You can edit your profile and delete your account from your settings. To exercise any other right, contact us below.

Complaints about your data

If you have a concern about how we handle your data, email hello@wylts.co.ukand we will respond. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Contact

Data queries: hello@wylts.co.uk.