LEGAL · PRIVACY POLICY
Privacy Policy.
DRAFT — PENDING LEGAL REVIEW
This is placeholder content. The legally-binding version will be reviewed and published before launch. If you need the current draft for due diligence, email legal@wheresbusy.com.
Last updated: TBC
This is the technical, regulator-facing version. For the plain-English version of how we think about privacy, see our privacy posture.
1. Data controller
Where’s Busy Ltd, Manchester, UK. ICO registration: TBC.
2. What data we process
| Data | Source | Lawful basis | Retention |
|---|---|---|---|
| Aggregate door counts | Venue clicker | Legitimate interest (operator) | 5 years (anonymised) |
| Anonymous check-in pulses | Consumer app | Consent | 30 days |
| Operator account email | Direct from operator | Contract | For account lifetime + 30 days |
| Notify-me email | Direct from user | Consent | Until launch + 30 days, or unsubscribe |
3. Where data is stored
UK region. Primary: AWS London. Analytics: a UK-only privacy-friendly provider (Plausible).
4. Sharing
We do not sell or rent personal data to anyone, ever. We do not share data with advertisers. We share aggregate signals with operators (covering their venue) and with consumers (covering venues they’re looking at).
5. Your rights
Under UK GDPR you have the right to access, correct, delete, and port your personal data, and to object to processing. Most of these don’t apply because we don’t hold personal data in the first place — but where we do (operator account, notify-me email), email privacy@wheresbusy.com.
6. Cookies
See the cookie policy.
7. Changes
TODO — pending review.
8. Complaints
You can complain to the ICO at ico.org.uk if you think we’ve mishandled your data. We’d also love it if you told us first.