Legal
PRIVACY POLICY
Last updated: 7 April 2026
Swansea Spotlight (“we”, “us”, “our”) is a local directory and discovery platform for hospitality, food, and things to do in and around Swansea. We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to that data.
Swansea Spotlight is operated by Swansea Spotlight Ltd, registered in England and Wales (Company Number: 15613268). Our contact email is info@swanseaspotlight.co.uk.
What Data We Collect
1.1 Information You Provide to Us
We may collect the following personal data when you interact with our website:
- Contact form submissions: your name, email address, and any message content you provide when using our contact form.
- Newsletter sign-ups: your email address when you subscribe to our mailing list.
- Business listing submissions: business name, address, phone number, email address, website URL, opening hours, photos, and other details submitted for inclusion in our directory.
- Listing amendment requests: any information you provide when requesting changes to an existing listing.
- Payment information: when you purchase a featured listing or advertising placement, payment is processed securely by Stripe. We do not store your full card details on our servers.
1.2 Information We Collect Automatically
- Analytics data: we use Google Analytics to collect anonymised information about how visitors use our website, including pages visited, time spent on pages, referring websites, browser type, device type, and approximate geographic location. This data is collected via cookies.
- Server logs: our hosting provider may collect IP addresses, access times, and pages requested for security and performance purposes.
- Cookies: our website uses cookies to improve your experience and for analytics purposes. See Section 7 for more details.
How We Use Your Data
We use the personal data we collect for the following purposes:
- To respond to your enquiries submitted via our contact form.
- To send you newsletters and updates about Swansea Spotlight (only if you have opted in).
- To create, manage, and display business listings in our directory.
- To process payments for featured listings and advertising.
- To monitor and improve the performance, functionality, and content of our website.
- To comply with legal obligations.
Legal Basis for Processing
Under the UK GDPR, we rely on the following lawful bases for processing your personal data:
- Consent: for newsletter subscriptions and non-essential cookies. You can withdraw consent at any time.
- Contractual necessity: to process payments and deliver featured listing services you have purchased.
- Legitimate interests: to operate and improve our website, respond to enquiries, and maintain our directory. We ensure our interests do not override your rights and freedoms.
Who We Share Your Data With
We do not sell your personal data to any third party. We may share your data with the following service providers who process data on our behalf:
- Stripe: for secure payment processing.
- Google Analytics: for anonymised website usage analytics.
- Our hosting provider: for website hosting and server management.
- Email marketing provider: to manage and send newsletters (if applicable).
Business listing information (name, address, phone number, etc.) is published publicly on our website as this is the purpose of the directory. Businesses can request amendments or removal of their listing at any time.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions are retained for up to 12 months unless further correspondence is ongoing.
- Newsletter subscriber data is retained until you unsubscribe.
- Business listing data is retained for as long as the listing is active, or until removal is requested.
- Payment records are retained for up to 6 years in line with HMRC requirements.
- Analytics data is retained in accordance with our Google Analytics settings (default 14 months).
Cookies
Cookies are small text files placed on your device when you visit our website. We use the following types of cookies:
- Essential cookies: required for basic website functionality such as page navigation and security.
- Analytics cookies: used by Google Analytics to understand how visitors interact with our site. These cookies collect anonymised data.
- Third-party cookies: may be set by embedded content such as social media widgets or mapping services.
You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the website.
Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: you can request a copy of the personal data we hold about you.
- Right to rectification: you can request that we correct any inaccurate or incomplete data.
- Right to erasure: you can request that we delete your personal data where there is no compelling reason for us to continue processing it.
- Right to restrict processing: you can request that we limit how we use your data in certain circumstances.
- Right to data portability: you can request a copy of your data in a structured, commonly used, machine-readable format.
- Right to object: you can object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at info@swanseaspotlight.co.uk. We will respond within one month of receiving your request.
Third-Party Links
Our website contains links to third-party websites, including those of listed businesses. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any website you visit.
Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will take steps to delete it promptly.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.