Privacy Policy

Welcome to Brasa London. We value your privacy and are committed to protecting your personal information. This Privacy Policy outlines the types of information we collect, how we use it, and the measures we take to safeguard your data.

1. Who We Are

Brasa London is an online business directory ("we", "us", "our"). We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For questions about this policy, contact us at [email protected].

2. Information We Collect

• Personal Information: We may collect personal information such as your name and email address when you submit a listing or contact us.
• Listing data: Business name, address, phone number, website, photos, and other details you submit when creating a listing.
• Non-Personal Information: We may collect non-personal information such as browser type, operating system, and web pages visited to improve our website's functionality and user experience.
• Cookies: We use cookies to enhance your browsing experience and collect data on how our website is used. You can manage your cookie preferences through your browser settings.
• Communications: Messages you send us via the contact form or email.

3. How We Use Your Information

• To Provide Services: We use your personal information to process your listing submission and provide customer support.
• To Improve Our Website: Non-personal information helps us understand how our website is used and identify areas for improvement.
• To Communicate with You: We may use your contact information to send updates, newsletters, and promotional materials. You can opt-out of these communications at any time.
• To Ensure Security: We use your information to prevent fraud and ensure the security of our website and users.
• To comply with legal obligations.

4. Legal Basis for Processing

We process your data under the following legal bases:

• Legitimate interests: to provide the directory service, improve our website, prevent fraud, and ensure security.
• Consent: for marketing emails. You can withdraw consent at any time.
• Legal obligation: where required by law.

5. Sharing Your Information

We do not sell, trade, or otherwise transfer your personal information to outside parties except as necessary to provide our services or comply with the law. We may share information with:

• Google — for Maps and Places API functionality.
• Hosting providers — for website infrastructure.
• Law enforcement — where required by law or to protect our legal rights.

All third-party processors are contractually required to handle your data securely and only for the purposes we specify.

6. Listing Data & Public Visibility

Information you submit in a business listing (name, address, phone, website, photos, etc.) is displayed publicly on the directory. Please only submit information you are comfortable being publicly visible.

7. Cookies

We use strictly necessary cookies to maintain your session and protect against CSRF attacks. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may prevent parts of the site from working correctly.

8. Data Retention

Listing data is retained for as long as the listing is live, plus a reasonable period thereafter. Contact information provided with a listing submission is retained for as long as the listing is active. You may request deletion at any time (see Your Rights below).

9. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent for marketing at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Security

We implement a variety of security measures to maintain the safety of your personal information, including CSRF protection and HTTPS. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

12. Contact

If you have any questions or concerns about this Privacy Policy, please contact us at [email protected].