Privacy policy

Last updated: 4 October 2026 (draft)

This policy explains what personal information Bring Bobby collects, why, and what your rights are. We keep it to what we actually need, and we don’t sell personal information.

1. Who we are

The data controller is Joshua James, trading as Bring Bobby. Contact us at hello@bringbobby.co.uk.

2. What we collect and why

If you just browse the Site

We don’t ask you to create an account, and we don’t use advertising trackers. The public pages set no cookies unless you choose to accept analytics cookies (see section 5). Our hosting providers keep standard server logs (such as IP address, browser type and the pages requested) to keep the Site secure and working.

If you accept analytics cookies, Google Analytics collects information about how you use the Site, such as the pages you view, roughly where in the world you are, and the type of device and browser you use, so we can see what is popular and improve the Site. We rely on your consent for this and you can change your mind at any time.

If you submit a place

The suggestion itself: the place name, type, address or area, website, your comments and your suggested rating.
Your email address (optional): only so we can ask you a question about your suggestion. It is never shown on the Site.
Photos (optional): up to three, plus a confirmation that you took them and an optional name to credit you.

We use this to review and, if it checks out, publish your suggestion on the Site. Our lawful bases are our legitimate interests in running and improving an accurate directory and, for your email address and credit name, your consent (you choose whether to provide them).

Photos you upload are first stored privately and are only seen by our team. If we use a photo, a copy is published on the Site, with the credit name if you gave one, and the private copy is deleted. If we don’t use it, the private copy is deleted.

If you sign up for our newsletter we collect your email address. We use it to send you the Bring Bobby newsletter, and our lawful basis is your consent, which you give by entering your address and clicking Sign up. You can withdraw it at any time with the unsubscribe link in every email, or by emailing us. The list is managed for us by Brevo, an email service provider (see section 3).

If you contact us

If you email us we’ll use your email address and message to reply and keep a record of the conversation (legitimate interests).

Our own team

People who manage the Site sign in with an email address and password. A cookie that is strictly necessary for keeping them signed in is set on those admin pages only.

3. Who we share information with

We use trusted service providers (“processors”) who handle information on our behalf under contract:

Supabase, for our database, file storage and sign-in (our data is stored in London);
Vercel, for hosting the Site;
Brevo (a French email service provider), to send our newsletter and manage the mailing list;
Google (Google Analytics), to measure how the Site is used, but only if you accept analytics cookies;
Namecheap, for our domain name and email forwarding (emails you send us pass through their systems on the way to our inbox).

Some of these providers may process information outside the UK, for example in the United States. Where they do, we rely on safeguards the law recognises, such as the UK International Data Transfer Addendum or an adequacy arrangement.

We may also disclose information if the law requires it, or to protect our rights or the safety of others.

4. How long we keep it

Published places, text and photos stay on the Site until we update or remove them, or you ask us to remove something you submitted.
Your email address from a submission is kept until we have dealt with the submission, and then for no more than 12 months unless you ask us to delete it sooner.
Declined submissions are deleted automatically after 3 months.
Your mailing list sign-up is kept until you unsubscribe.
Server logs are kept by our providers for a limited period that they set.

5. Cookies

The Site uses two kinds of cookie:

Strictly necessary: a sign-in cookie that is set only on our team’s admin pages. It isn’t used on pages you visit as a member of the public.
Analytics (only with your consent): Google Analytics cookies, which start with “_ga”. They are not set unless you click Accept on the cookie banner. They help us count visitors and see which pages are used, and usually expire within two years.

You can accept or reject analytics cookies on the banner shown on your first visit, and change your choice at any time with the “Cookie settings” link at the bottom of every page. Refusing has no effect on how the Site works. We don’t use advertising cookies. If we add other features that use cookies, such as a newsletter, we will update this policy and ask first where the law requires it.

6. Your rights

Under UK data protection law you can ask us to:

tell you what personal information we hold about you and give you a copy;
correct anything that is wrong or incomplete;
delete your information, or restrict how we use it;
stop using it where we rely on legitimate interests;
withdraw your consent at any time, where we rely on consent;
give you your information in a portable format, where that applies.

To use any of these rights, email hello@bringbobby.co.uk. We may need to check who you are first, and we will reply within one month. If you’re unhappy with how we’ve handled your information you can complain to the Information Commissioner’s Office at ico.org.uk, though we’d appreciate the chance to put things right first.

7. Security

We use reputable providers, encrypted connections, restricted access for our team and private storage for unreviewed uploads. No system is perfectly secure, but we take reasonable steps to protect your information.

8. Children

The Site isn’t aimed at children under 13 and we don’t knowingly collect their personal information. If you think a child has given us information, please contact us and we will delete it.

9. Changes to this policy

We may update this policy as the Site changes, for example if we add accounts or a newsletter. The date at the top shows when it was last updated, and we’ll make any significant change obvious.

10. Contact

Questions about privacy? Email hello@bringbobby.co.uk. Our Terms of service also apply to your use of the Site.