Privacy notice

Last updated: 12 October 2026

Discover Seaford (this site, discoverseaford.uk) is run by James Pybus. This notice explains what personal data we collect when you submit a claim for a business listing or post on the community noticeboard, and how we use it.

Business and community group listings

Most businesses and community groups on Discover Seaford did not ask to be listed. We add them ourselves, using information they already make public, such as their own website, so that people can find local services and groups in one place.

We rely on “legitimate interests” under UK GDPR to do this. Helping people find local businesses and groups is a reasonable purpose, and we only publish details an organisation already shares publicly: its name, address, phone number, email, website and opening hours.

If you run a listed business or group and want a detail corrected, or the listing removed, email [email protected] and we will deal with it within 30 days. Business owners can also claim their listing and edit it themselves.

Community noticeboard

When you post a notice we collect:

  • The notice itself and the display name you choose (both published if approved)
  • Your email address (required) and phone number (optional)
  • The IP address that submitted the form, and the time you accepted the posting rules

Your email and phone number are never published. We use your email to tell you when the notice is live or why it was declined, and to send you any private replies to it. The full details stay in our private moderation queue and are deleted when the notice is deleted (30 days after it expires). The form uses Cloudflare Turnstile to keep bots out; it sets no tracking cookies. The posting rules explain how to get a notice removed.

Private replies to a notice

When you reply to a notice, or answer a reply to yours, we keep:

  • Your messages and the name you give (seen only by the other person in the conversation)
  • The email address of the person replying, to send them a confirmation link and the other person's messages
  • The IP address that sent the first reply, briefly, to limit how many replies one connection can start

Neither person ever sees the other's email address. We email each new message in full to the other person, from [email protected], through our email provider SMTP2GO. Nobody at Discover Seaford reads a conversation unless one of you reports it; a report sends us the whole conversation so we can deal with it. Every conversation, and the email addresses and links we hold for it, is deleted 30 days after its notice ends.

What we collect

When you submit a claim via the “Claim your listing” form, we collect:

  • Your full name
  • Your email address
  • Your phone number (if you provide one)
  • Your stated relationship to the business
  • The evidence you provide of your ownership / authority
  • Any free-text message you include
  • The IP address that submitted the form (for abuse prevention)

What we do with it

  • Verify that you are authorised to manage the listing.
  • Send you a verification email and (if approved) follow-up correspondence about your listing.
  • Maintain an audit log of claim and edit decisions so we can resolve disputes.

Approved claims publish only the fact that the listing is “Verified” and the date of the last owner-approved update. We do not publish your name, email, phone, or evidence.

What we don't do

  • We don't sell your data to anyone.
  • We don't use it for marketing.
  • We don't share it with third parties except where required by law.

How long we keep it

Claim records (approved or rejected) are kept indefinitely as part of the listing's audit trail so that we can show whose claim was honoured. If you want your personal data removed, see “Your rights” below.

Cookies

Once you've verified a claim, we set one cookie on your browser:seaford_owner_session. This is a signed token that proves you're the verified owner so you can submit edits without logging in again. It expires after 7 days. We don't use any analytics or advertising cookies on this site.

Analytics

We use self-hosted, privacy-friendly analytics (Umami) to understand how the site is used, for example which pages are popular and roughly where visitors come from. It runs on our own server, sets no cookies, does not track you across other websites, and does not collect information that identifies you personally. Because it uses no cookies and collects no personal data, no consent banner is required.

Your rights

Under UK GDPR you have the right to ask for a copy of your data, correct it, or have it deleted. Email [email protected] with your request and we'll respond within 30 days.

Contact

For any privacy question, write to [email protected].