Privacy Policy

Derry Directory ("we", "us") is operated by Derry Directory Limited, a company registered in Northern Ireland (company number NI743106), registered office 67 Creevagh Heights, Derry, Northern Ireland, BT48 9AN. We are the data controller for the personal data described in this policy.

This policy explains what data we collect when you use Derry Directory as a customer or as a listed business, why we collect it, who we share it with, and what rights you have over it.

What we collect

If you book appointments as a customer: your name, email address, and (optionally) phone number when you create an account; details of the bookings you make (service, staff member, date/time, price); any messages you send a business about a booking, including photos or voice notes you choose to attach; reviews you leave; and your push notification subscription if you enable notifications.

If you list a business:your name, email, and the business's name, category, address, contact details, and any services, staff, opening hours, and photos you add. If you choose to accept online payments, you'll also provide bank and identity details directly to Stripe (see below) as part of their account verification — we never see or store your bank details ourselves.

Payment card details are never collected or stored by us. All card payments are handled directly by Stripe; we only ever see the outcome (e.g. that a payment succeeded) and an amount.

Cookies:we only use strictly necessary cookies to keep you signed in. We don't use analytics, advertising, or tracking cookies of any kind, so no cookie consent banner is needed.

Why we use it, and our legal basis

• To create and manage your account, and to let you make and manage bookings — necessary to perform our contract with you.
• To pass your booking details (name, and phone number if provided) to the business you're booking with, so they can deliver the service — necessary to perform that booking.
• To process payments and platform subscriptions via Stripe — necessary to perform our contract, and our legitimate interest in getting paid for the service.
• To send booking confirmations, cancellations, and other service messages — necessary to perform our contract. We don't currently send marketing emails; if that changes, we'll ask for your consent first.
• To review and approve new business listings, and to act on reports of misuse (e.g. blocking an account) — our legitimate interest in keeping the platform trustworthy and safe.

Who we share it with

• The business you book with — sees your name, phone number (if provided), and booking details, so they can provide the service.
• Stripe — processes all payments and subscriptions on our behalf. See Stripe's privacy policy.
• Resend — sends transactional emails (confirmations, receipts, notifications) on our behalf.
• Supabase — hosts our database and handles account sign-in.

We don't sell your data, and we don't share it with anyone for their own marketing purposes. Some of these providers may process data on servers outside the UK; where that happens, they do so under appropriate legal safeguards (such as standard contractual clauses).

How long we keep it

We keep your account and booking data for as long as your account is active, and for a reasonable period afterwards where we have a legal or tax obligation to do so (for example, transaction records for accounting purposes). If you'd like your data deleted sooner, contact us and we'll do so unless we're required to retain it.

Your rights

Under UK GDPR, you have the right to access, correct, or delete your personal data, to object to or restrict how we use it, and to receive a copy of it in a portable format. To exercise any of these, contact us using the details below. You can also complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data.

Children

Derry Directory is intended for users aged 18 and over.

Contact us

For anything relating to this policy or your personal data, contact us at support@derrydirectory.com.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll let you know — the "last updated" date at the top of this page always reflects the current version.