Privacy Policy

Who we are

TallyHub is a UK community marketplace and information platform. For data-protection purposes, we are the controller of the personal data you provide when you use our website, sign up to emails, post a listing, contact a seller or business, or message another user.

What personal data we collect

Account information: email address, display name, password hash and any optional details you add to your profile (for example phone number, city or community tag).

Email capture: when you enter your email address in our footer signup form, lead-magnet popup or other subscription boxes, we collect the email address, the source of the signup (for example footer, popup or guide download), the date and time, and any segment or preference you select.

Listing and enquiry data: the content of listings you post, messages you send, enquiries you make through a business directory listing, and any reports or support tickets you submit.

Technical data: page views, device type, browser, referrer URL, approximate location derived from IP address, and time spent on pages. This is collected to understand how the site is used and to keep it secure.

How we collect your email address

Footer newsletter signup: the email field at the bottom of every page lets you subscribe to our UK settling-in guide, job alerts and marketplace updates.

Lead-magnet popup: we may offer a free PDF guide or practice questions in exchange for your email address. Signing up is always optional.

Account registration: creating a TallyHub account requires an email address so we can verify you, send service notifications and protect your account.

Contact and enquiry forms: when you contact us or a business advertiser through the site, your email address is used to deliver and respond to that message.

We do not buy email lists from third parties and we do not scrape email addresses from other websites.

How we use your email address

Service emails: to verify your account, reset your password, notify you about messages, listing approvals or enquiries, and to keep your account secure. These are necessary to provide the service.

Marketing emails: only if you have opted in, we send newsletters, job alerts, settling-in tips, marketplace highlights and partner offers relevant to life in the UK. You can opt out at any time.

Lead-magnet delivery: when you request a free guide or practice questions, we email you the download link or send you to the file.

Analytics and improvement: we measure open rates, click rates and unsubscribe rates to improve our emails. This data is aggregated and not used to profile individuals beyond broad segment preferences.

We never sell or rent your email address to marketers, data brokers or unrelated third parties.

Legal basis for processing

Contract: processing your account data and service emails is necessary to provide the TallyHub platform under our Terms of Use.

Consent: marketing emails and lead-magnet downloads are sent only with your clear, affirmative consent, which you can withdraw at any time by clicking the unsubscribe link in any email or contacting us.

Legitimate interests: we process technical and usage data to keep the site secure, prevent fraud, understand how it is used and improve our services, balanced against your privacy rights.

Legal obligation: we may retain certain data where required by law, for example for tax, safety or regulatory purposes.

How we store and protect your data

Your data is stored in encrypted databases provided by our hosting partner. Access is restricted to authenticated staff and protected by role-based permissions.

Email addresses are transmitted securely using TLS and stored in hashed or encrypted form where technically appropriate.

We use strong passwords, two-factor authentication for admin access, regular access reviews and logging to detect unauthorised access.

We keep backups for operational recovery. Backups are retained only for as long as needed and are subject to the same security controls.

Third-party processors

Email delivery: we use Brevo (formerly Sendinblue) to send newsletters, lead magnets and service emails. Brevo processes your email address and engagement data on our behalf under a data-processing agreement.

Hosting and database: our application and database are hosted by Lovable Cloud / Supabase, which provides secure storage, authentication and analytics infrastructure.

Analytics: page-view and usage analytics are processed within our own infrastructure and are not shared with advertising networks.

We only share the minimum data necessary with each processor and require them to keep it confidential and secure.

International transfers

Some of our processors may store or process data outside the UK, including in the European Economic Area or the United States. Where this happens, we rely on approved transfer mechanisms such as UK-approved Standard Contractual Clauses and adequacy decisions to protect your rights.

How long we keep your data

Marketing email addresses: we keep them until you unsubscribe or the account becomes inactive. After you unsubscribe, we retain only a suppression record so we do not email you again.

Account data: kept while your account is active. If you delete your account, we remove or anonymise personal data within 30 days, except where we must keep it for legal, safety or fraud-prevention reasons.

Listings, messages and enquiries: retained while the listing or conversation is active and for a reasonable period afterwards to support dispute resolution, safety investigations and legal claims.

Technical logs: kept for up to 12 months for security and analytics, then deleted or aggregated.

Cookies and similar technologies

We use essential cookies and local storage to keep you signed in, remember your preferences and measure page views anonymously. We do not use third-party advertising or tracking cookies. For more details, see our Cookie Notice.

Your rights

Under UK GDPR you have the right to access, correct, delete or restrict processing of your personal data, and the right to data portability.

You can object to marketing processing at any time by clicking the unsubscribe link in any email or by contacting us. You can also update or delete your account from your profile settings.

To exercise any right, or if you have a complaint, contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO).

Children's privacy

TallyHub is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy as the site or the law changes. We will post the revised version here with a new last-updated date. For significant changes, we will notify you by email or through a prominent notice on the site.

Contact us

If you have questions about this Privacy Policy, your personal data, or how to exercise your rights, contact us through the Contact page or by email at privacy@tallyhub.dev. We aim to respond within 30 days.