Privacy Policy | FODSPOT

This Privacy Policy explains how FODSPOT (“we”, “us”, “our”) collects and uses your personal data when you use this website. We are the data controller for this personal data and handle it in line with UK GDPR and the Data Protection Act 2018.

FODSPOT is operated by an individual based in the United Kingdom. You can reach us at any time through our contact page.

Data we collect

Account details: your email address (used for passwordless sign-in) and, optionally, your name.
Listings you submit: business details (name, description, contact details and address) and any job posts you create.
Enquiries: when you use our contact or support form, your name, email address and message. These are emailed to us and are not stored in our database.
Payment information: paid job listings are handled by Stripe. We never see or store your full card details; we keep only a payment reference to reconcile your listing.
Technical data: our hosting and security providers process limited technical information (such as IP address and browser type) to keep the service secure and working.

How we use your data, and our legal bases

To provide the service, create your account and publish your listings — performance of a contract, or steps taken at your request.
To take payment for paid features — performance of a contract.
To respond to your enquiries — our legitimate interests.
To keep the service secure and prevent abuse (for example, bot protection) — our legitimate interests.
To meet accounting and other legal obligations — legal obligation.

Who we share it with

We use trusted service providers who process data on our behalf, under contract and only on our instructions:

Supabase — database and authentication.
Stripe — payment processing.
Cloudflare — hosting, file storage and bot protection (Turnstile).
20i — email delivery, including sign-in codes and enquiry emails.
OpenStreetMap — map tiles shown on business profiles. When a map loads, your browser requests the map images from the OpenStreetMap Foundation, which receives your IP address. No cookies are set.
OpenStreetMap Nominatim — used on our servers to turn a business address into map coordinates. Only the address is sent, and this does not involve your browsing data.
Google (Analytics 4) — website analytics, loaded only if you accept analytics cookies.
Mouseflow — anonymised session replay and heatmaps, loaded only if you accept analytics cookies; keystrokes are masked and sensitive fields are excluded from recordings.
Ahrefs — cookieless, aggregate website analytics that collects no personal data.

We do not sell your personal data.

International transfers

Some of our providers may process data outside the UK. Where they do, the transfer is covered by appropriate safeguards — such as UK adequacy regulations or the UK International Data Transfer Agreement (including the UK Addendum to the EU Standard Contractual Clauses).

How long we keep it

Account data: until you ask us to delete your account.
Listings: until you remove them, or we remove them under our Terms.
Contact enquiries: not stored in our database; the email we receive is kept only until your enquiry has been dealt with, then deleted.
Payment records: retained as required for accounting and legal purposes.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, and the right to data portability. To exercise any of these, please contact us. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

We use necessary cookies to run the website, and analytics cookies only with your consent. You can change your choices any time via the Cookie settings link in the footer. See our Cookie Policy for details.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last updated.

Contact

If you have any questions about how we handle your data, please get in touch.