Our Privacy Policy

Last updated: April 28, 2025

LocalLinked is built on a simple idea: students should feel connected, and lecturers should be rewarded. We’re on a mission to tackle the lack of student engagement within local communities by bridging the gap between university life and the businesses, events, and opportunities around them.

Whether you’re looking for great food, things to do, or ways to support your local area, we’re here to help make those connections seamless, rewarding, and personal.

Everything we build, from features to partnerships, is shaped by this purpose. And that’s why privacy matters to us. We’re committed to handling your data responsibly, transparently, and in a way that supports your experience and never disrupts it.

This Privacy Policy for LocalLinked Ltd ("we", "us", or "our") explains how and why we collect, use, store, share, and process your personal information when you use our services ("Services"). These include:

Downloading and using our mobile application (LocalLinked), or any other application of ours that links to this Privacy Policy.
Engaging with us in other related ways, including communication, sales, marketing, or events.

We understand the importance of your privacy and are committed to being transparent about how we handle your information. If you have any questions after reading this, please reach out to us at portsmouth@locallinked.co.uk.

SUMMARY OF KEY POINTS

This summary highlights key aspects of our privacy practices. For full details, refer to the numbered sections below:

We collect personal and sometimes sensitive information that you provide to us directly. See Section 1.
We do not collect data from third parties. See Section 1.
We use the information to provide and improve our Services. See Section 2.
We may share your data with trusted third parties under specific circumstances. See Section 4.
We use cookies and tracking technologies to improve your experience. See Section 5.
You have rights over your data, including access, correction, and deletion. See Section 9.

TABLE OF CONTENTS

What Information Do We Collect?
How Do We Process Your Information?
What Legal Bases Do We Rely On To Process Your Information?
When and With Whom Do We Share Your Personal Information?

4.1 International Data Transfers

4.2 Links to Other Sites

5. Cookies and Tracking Technologies

6. How Do We Handle Your Social Logins?

7. How Long Do We Keep Your Information?

8. How Do We Keep Your Information Safe?

9. What Are Your Privacy Rights?

10. Controls for Do-Not-Track Features

11. Do We Make Updates to This Notice?

12. How Can You Contact Us About This Notice?

13. How Can You Review, Update, or Delete the Data We Collect From You?

1. WHAT INFORMATION DO WE COLLECT?

When you interact with LocalLinked, we collect information you provide directly, and some information automatically generated by your device or activity.

Information You Provide Directly

When you register for an account, reach out to us, or use features of the app, we collect personal information, including:

Your full name and email address, so we can identify and contact you.
Your personal/organisation phone number.
A username and password, which allow you to securely log in to your account.
Contact preferences, letting us know how you prefer to receive updates or communications.
Location data, which may be collected through your device’s GPS, Wi-Fi signals, or IP address, enabling us to deliver relevant local content.
Authentication data, such as one-time passwords or linked social accounts, to verify your identity.

Sensitive Information

In some cases, and only with your explicit consent or when required by law, we may collect sensitive data—such as proof of student status. This helps us verify your eligibility for student-specific features or offers within the app.

Affiliation Verification
When you register, we may collect and verify your university email address (restricted to ".ac.uk" domains) to confirm your affiliation with a recognised UK higher education institution. This eligibility may include students, staff, lecturers, researchers, and other academic community members. Verification is based solely on your email domain unless otherwise stated. We may periodically require re-verification to maintain eligibility.

Academic information

We collect your expected graduation date and institution location to verify your ongoing eligibility for the service and to help customise relevant offers based on your academic journey. This information helps us ensure our service remains exclusively available to the academic community.

Social Media Login Data

If you choose to sign up using a social media account (such as Facebook or X), we may access information you’ve made publicly available through that service, including your name and email address. We only use this information to create and manage your account with us. More detail is available in Section 6.

User Profile Data

In addition to your name and contact details, we collect profile-related information you choose to provide, including photos, biographies or university affiliation displayed on your profile.

Device Permissions

With your consent, we may access your device’s camera, photo library, and push notification system to support certain features.

NFC Interaction Data

When you use our app to interact with NFC terminals at partner businesses, we collect data about these interactions, including timestamp, location identifier, and points awarded. This information is necessary to verify your presence at partner locations and properly award points to your account. No personal financial information is collected through these NFC interactions.

Children's Privacy

Our Services are intended for users who are 16 years of age or older. We do not knowingly collect personal data from individuals under 16. By using our Services, you represent and warrant that you are at least 16 years old. If we learn that we have collected personal information from an individual under 16, we will take steps to delete that information promptly. If you believe we might have any information from or about a child under 16, please contact us at portsmouth@locallinked.co.uk.

Information Automatically Collected

Some technical data is collected automatically when you use our Services, to help us understand usage patterns and keep things running smoothly. This includes:

Log and usage data, such as pages viewed, features used, and the times these actions occur.
Device data, like the make and model of your phone, operating system version, and browser settings.
Location data, when location services are enabled on your device.
Academic affiliation verification, to confirm your eligibility for access to offers reserved for students and staff at recognised UK higher education institutions.
Points-related location data, where our integration with Google Maps API helps us anonymously track where and when points are earned or redeemed. This location data is used solely to verify legitimate point transactions and analyse usage patterns in aggregate form. Location data linked to points transactions is stored separately from your personal identification details and is pseudonymised in our systems.

If we access data through Google APIs, we comply fully with the Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

We use your personal information to provide, manage, and improve the Services we offer. Here’s how:

Account creation and login: To register and maintain your user profile.
Service delivery: To operate features, display relevant content, and connect you with local businesses.
Customer support: To respond to questions or resolve issues.
Service updates: To notify you of changes or improvements to the app.
Order fulfilment: If point spending is involved, to process and deliver these correctly.
Feedback and engagement: To ask for your input and use it to improve the platform.
Marketing and promotions: With your permission, to share updates or offers you might be interested in.
Legal compliance and safety: To meet regulatory requirements and protect user safety where needed.
Points System Operation: We process data about your interactions with partner businesses and events to award and track points within our loyalty system. Points are awarded on three bases: for visiting local partner businesses, for redeeming exclusive meal deals, and for attending community events. This processing is necessary to operate our core service functionality and provide the rewards program to users.

We use analytics derived from your activity (such as point-earning behaviour) to generate anonymous usage statistics that may be shared with participating local businesses to improve offers and engagement.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

Under the UK General Data Protection Regulation (UK GDPR), we only process personal data when we have a valid legal reason. These include:

Consent: You’ve agreed to it (e.g., for marketing).
Performance of a contract: The data is necessary to provide our Services.
Legitimate interests: We have a business reason to use your data that does not override your rights.
Legal obligations: We’re required by law to retain or share certain information.
Vital interests: Rare situations where someone’s life or safety is at risk.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We limit sharing to only what’s necessary, and only with trusted third parties. This may include:

Business transfers: If we merge, are acquired, or sell part of our assets, your data may be transferred to the new owners.
Google Maps APIs: To provide location-based services.
Affiliates and partners: Members of our corporate group or trusted partners who help deliver our Services.
Offer walls and promotions: Third parties providing offers through the app.

With local business partners you engage with through the app. Analytics are shared in anonymised form to help businesses understand performance and interaction levels. We never sell your data, and we only share it with third parties that agree to protect it in line with this policy.

4.1 INTERNATIONAL DATA TRANSFERS

As a UK-based company, we primarily store and process your data within the United Kingdom. However, some of our service providers may be located outside the UK or European Economic Area (EEA). When we transfer your personal data internationally, we ensure appropriate safeguards are in place to protect your information, which may include:

Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
Binding Corporate Rules for transfers within our corporate group
Transfers to countries with an adequacy decision from the UK government
Obtaining your explicit consent for specific transfers

You can request information about these safeguards by contacting us at portsmouth@locallinked.co.uk.

4.2 LINKS TO OTHER SITES
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these sites. We encourage you to read their privacy policies before providing any personal data.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies on both our website and mobile application to enhance functionality, understand user behaviour, personalise content, and improve overall service delivery. These tools may store small pieces of information on your device or browser to recognise you when you return.

Types of Cookies and Trackers We Use:

Essential cookies – These are necessary for our website and app to function properly. They allow you to log in, use secure areas, and ensure the system performs as expected.
Performance and analytics cookies – These help us understand how visitors interact with our Services, which pages are most visited, and where users come from. We use tools like Google Analytics and Firebase for app-side diagnostics and behavioural analytics.
Functionality cookies – These remember your preferences, such as saved locations, language selection, or settings for improved personalisation.
Geolocation cookies – These enable features that depend on your location, such as nearby listings or directions. For instance, our integration with Google Maps API relies on your location data to provide accurate map content.

APIs and SDKs We use third-party APIs and SDKs, including but not limited to:

Google Maps API – Powers geolocation-based services within the app.

Each of these tools may place cookies or similar identifiers to collect metadata, such as your device type, interaction history, or session time. Analytics data is tied to the “user points” system and is shared only in aggregate or pseudonymised form with businesses featured on our platform.

Google Maps API Disclosure
We integrate with Google Maps API to provide interactive map and location-based features. This may involve collection of:

Device location (via GPS, Wi-Fi, or IP address)
App interaction data (e.g., zoom, clicks, directions)
Diagnostic and usage statistics

We comply fully with the Google API Services User Data Policy, including Limited Use requirements. For further transparency, we advise reviewing Google’s terms:

Google Privacy Policy: https://policies.google.com/privacy
Google Maps Terms of Service: https://maps.google.com/help/terms_maps/

How to Manage Your Cookies and Tracking Preferences

You have the right to control your cookie and tracking preferences. Options include:

Adjusting your browser or device settings to refuse or delete cookies
Disabling location access within your device’s system preferences
Using cookie consent banners on our website (where applicable)

Please note that disabling cookies or certain APIs may affect your experience, and some functionality may no longer be available.

We also use tracking technologies such as:

Web beacons and tracking pixels – For marketing insights and usage diagnostics
Mobile identifiers (IDFA/GAID) – For ad attribution and push notification services
SDK-based tracking – For crash logs, engagement insights, and behavioural trends

We only use these tools in a way that complies with applicable data protection laws, and only for the purposes stated in this Policy.

6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

If you log in via a social account, such as Facebook or X, we only access the profile data you’ve permitted. This helps you set up your LocalLinked account more easily.

We don’t control how those platforms use your data. For more details, review their respective privacy policies.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal information only as long as needed for the purposes outlined in this Policy, unless a longer period is required by law.

Verified academic affiliation (linked to your email address) is retained for the duration of your active account and securely deleted within 12 months of account closure unless a longer retention period is required by law.

When we no longer need your data, we will either anonymise or securely delete it.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We apply a range of technical and organisational measures to safeguard your personal data, including:

Data encryption during storage and transmission
Secure access controls
Regular security audits and vulnerability assessments

However, no digital system is 100% secure. By using our Services, you accept this inherent risk.

NFC Transaction Security

All data transmitted during NFC interactions is encrypted using industry-standard protocols. The data exchanged is limited to only what's necessary for points verification.

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority (such as the UK Information Commissioner's Office) without undue delay and typically within 72 hours of becoming aware of the breach. This notification will include details of the breach, its potential consequences, measures we've taken to address it, and recommendations for you to protect yourself from potential effects.

9. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Correct or update inaccurate data
Request deletion of your data
Object to or restrict how we process your data
Request a copy of your data in a portable format
Withdraw your consent at any time

We will only send marketing communications with your explicit consent, which you can withdraw at any time via your settings or by contacting us. If you’re located in the UK, EEA, or Switzerland, you also have the right to file a complaint with your national data protection authority.

You can manage your data by logging into your account or contacting us at portsmouth@locallinked.co.uk. To unsubscribe from marketing emails, click the unsubscribe link in our emails or contact us directly.

If you are under the age of 16, you may not create an account or use our Services.

Automated Decision-Making

While we use analytics to improve our Services, we do not currently engage in automated decision-making or profiling that would produce legal or similarly significant effects on you. If this changes in the future, we will update this policy and obtain appropriate consent where required.

Legitimate Interests Assessment

When we rely on legitimate interests as a legal basis for processing your data, we conduct a balancing test to ensure our interests do not override your rights and freedoms. Our legitimate interests typically include:

Improving and personalizing our Services
Ensuring the security of our platform
Market research and analytics to better understand user needs
Promotion of our Services to existing users

You have the right to object to processing based on legitimate interests at any time.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Many web browsers and devices support Do-Not-Track ("DNT") signals. However, because there’s no industry standard yet, we do not currently respond to DNT signals.

11. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we may update this Privacy Policy to reflect changes in our practices, legal requirements, or services. When we do, we’ll revise the date at the top of this document. If major changes occur, we may also notify you directly.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Email: portsmouth@locallinked.co.uk

Post: LocalLinked Ltd
Halpern House, 1 Hampshire Terrace
Portsmouth, Southsea, PO1 2QF
United Kingdom

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You can contact us or visit our support page at: http://www.locallinked.co.uk/contact-8 to access, update, or delete your personal information, subject to applicable laws.

This Privacy Policy has been written in accordance with UK GDPR and industry best practices to ensure your data is handled transparently, securely, and with respect.