Privacy policy

Who we are

InDeal (indeal.co.uk) is run by Paul Kidman, who is the data controller for the personal information described here. You can reach us using the "Contact us" link at the bottom of every page.

What we collect

• Account details: first and last name, username, email address and date of birth (to confirm you are 18 or over).
• Things you add: profile photo, bio, listings, posts, photos, events, sessions, business details and reports.
• Messages you send through the site, including contact form messages.
• Location you choose to share when reporting an issue.
• Usage information: which pages you look at, roughly how long you stay, the website that sent you here, your browser language, and an approximate country worked out from your IP address. A small analytics script our hosting provider adds to every page (~flock.js) collects this and sends it to an analytics service called Tinybird to be counted up. It isn't linked to your account or your name.
• Map requests: when a page shows a map, the map images come from OpenStreetMap, and OpenStreetMap sees your IP address as it sends them to you.
• Basic technical information needed to keep you signed in and keep the site secure.

Why we use it

To run your account and the community features you use (our lawful basis is contract), to keep the site safe and moderate content, to understand which parts of InDeal are useful and what to build next, and to meet legal obligations (our lawful basis for those is legitimate interests). We do not sell your information and we do not share it with advertisers.

Who can see it

Your username, display name, profile and anything you publish are public. Your email address and date of birth are never shown publicly. Town moderators and administrators can see what is needed to moderate content and help with support.

We use trusted companies who process data on our behalf: our hosting and analytics provider (Lovable), the analytics counting service behind it (Tinybird), OpenStreetMap for map images, and your chosen sign-in provider (Google or Apple if you use one).

Transfers outside the UK

Some of these providers store or process information outside the UK. Where they do, we rely on the legal transfer safeguards UK data protection law provides.

How long we keep it

We keep your information while your account is open. If you ask us to close your account we delete or anonymise your personal information within 30 days, unless we must keep it by law. Usage analytics is kept in aggregate form and isn't tied back to you.

Your rights

Under UK GDPR you can ask to access, correct, delete or export your information, or object to how we use it. Contact us to make a request. If you are unhappy you can complain to the Information Commissioner's Office at ico.org.uk.

Last updated: 8 October 2026.