Privacy Policy

1. Who we are

bedfordshirebusiness.co.uk is a brand and trading style owned and operated by EZ Holdings Ltd, a company registered in England and Wales with company number 15798594. In this policy "we", "us" and "our" refer to EZ Holdings Ltd trading as Bedfordshire Business.

We are the data controller for personal data processed via this website. You can contact us at info@bedfordshirebusiness.co.uk.

2. What data we collect

• Account data: name, business name, email, password (hashed), authentication provider identifiers.
• Listing data: information you publish about your business (descriptions, images, contact details, opening hours).
• Payment data: processed by Stripe. We do not store full card details on our servers.
• Usage data: pages visited, device/browser type, IP address, referral source, cookie identifiers.
• Communications: enquiries submitted via lead forms or email.

3. Lawful bases

We process personal data on the following UK GDPR lawful bases:

• Contract — to provide your account, listing, subscription and payments.
• Legitimate interests — to operate, secure and improve the service, prevent fraud, and promote local businesses.
• Consent — for non-essential cookies, marketing emails and optional analytics.
• Legal obligation — to comply with tax, accounting and regulatory requirements.

4. How we share data

We share data only with trusted processors: our hosting provider, database and authentication provider (Supabase / Lovable Cloud), payment processor (Stripe), email delivery and analytics providers. We do not sell personal data.

5. International transfers

Where data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses (UK IDTA) to safeguard your data.

6. Retention

We keep account and billing records for as long as your account is active and for up to 7 years afterwards to meet UK accounting and tax obligations. Marketing data is kept until you unsubscribe.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to withdraw consent at any time. To exercise these rights email info@bedfordshirebusiness.co.uk.

You can also lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We use TLS in transit, encrypted storage, role-based access controls and row-level security in our database. No system is 100% secure — please use a strong, unique password.

9. Cookies

See our Cookie Policy for details of the cookies we use and how to control them.

10. Changes

We may update this policy from time to time. Material changes will be notified via the site or email.