Privacy notice

1. Who we are

ProofLocal is operated by Blend Gacaferi. We are the data controller for the personal data described here. Contact: prooflocal.support@gmail.com.

When you use ProofLocal to collect feedback from your own customers, you are the controller of that customer data and we process it on your behalf as your processor.

2. What we collect and why

• Account data (name, email, login credentials): to create and secure your account and provide the service. Legal basis: performance of our contract with you.
• Business profile data (business name, trade, logo, review links): to run your review pages. Legal basis: contract.
• Your customers' data (name, email, phone, job description, ratings, comments) that you upload: to send review requests and store responses. Legal basis: contract with you; you are responsible for having a lawful basis to contact your customers.
• Support messages: to answer you. Legal basis: legitimate interests.
• Usage and device data (pages viewed, IP address, browser, timestamps): to keep the service secure, prevent fraud and improve the product. Legal basis: legitimate interests.

Payment card details are collected and processed by Paddle, not by us. We never see or store your full card number.

3. Who we share data with

• Hosting, database and email infrastructure providers who run the service for us.
• Paddle.com, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as accountants and lawyers, where needed.
• Authorities where we are legally required to disclose.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses to protect the data.

5. How long we keep it

Account and business data is kept while your account is open and for up to 12 months after closure, then deleted or anonymised. Billing records are kept for as long as tax law requires. You can ask us to delete your data sooner.

6. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent. Email us and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your supervisory authority.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database permissions so each account can only reach its own data.

8. Cookies

We use essential cookies and local storage to keep you signed in and remember which location you are viewing. We do not use advertising cookies. You can clear or block cookies in your browser, but the app will not work properly without the essential ones.

9. Changes

We will post any changes to this notice here and update the date above.