Privacy policy.

1. Who we are

Saffron Shops is the name under which this local directory and town guide operates. In this policy, “we”, “us” and “our” mean the operator of Saffron Shops, responsible for deciding how personal information is used for this website.

For privacy questions, corrections or requests about your information, email privacy@saffronshops.com.

2. Information we collect

• Directory information: business names, descriptions, addresses, contact details, website links, photographs and opening hours. These may identify individuals, particularly sole traders.
• Correspondence: your name, email address and any information you include when contacting us.
• Administrator information: account email addresses, securely hashed passwords, session identifiers and records used to protect sign-in. Failed-login protection uses a hashed representation of an IP address, an attempt count and a timestamp.
• Technical information: our server or hosting provider may record IP addresses, requested pages, request times, browser information and error details to deliver and protect the service. Search words can form part of a requested page’s address and appear in server logs.

Directory information may come from business owners, authorised representatives, our existing directory or publicly available business websites and sources. You do not need a public account to browse the directory. Please do not send sensitive personal information unless it is necessary for a specific enquiry.

Automatic listings and removal requests

Saffron Shops may automatically add shops, cafés, restaurants and other businesses in Saffron Walden to the directory using publicly available business information, without a request from or prior contact with the owner. Inclusion does not mean that the owner has approved the listing, partnered with Saffron Shops or endorsed the website.

If you own or are authorised to represent a listed business and would like its listing removed, email privacy@saffronshops.com with the business name and, if possible, a link to the listing. You can use the same address to request a correction. We may ask for reasonable confirmation that you represent the business before making changes. Once confirmed, we will remove the listing from public view as soon as reasonably practicable, without charge.

This removal process does not limit your data protection rights. Where business information identifies an individual, our use remains subject to applicable data protection law, including your right to object where we rely on legitimate interests. Removal from the public directory is distinct from erasure of all records; see the retention and rights sections below.

3. Why we use information

We do not currently use your information for advertising tracking, personalised advertising or automated decisions with legal or similarly significant effects. We do not sell personal information. If we introduce new uses, we will update this notice and obtain consent where required.

4. Who can see it

Published business listings are available to anyone who visits the website and may be indexed by search engines. Do not supply a private home address, personal number or photograph for publication unless you intend it to be public.

Authorised administrators and service providers supporting hosting, email, maintenance or backups may access information where needed for those tasks. We may also disclose relevant information where legally required or necessary to establish, exercise or defend legal claims.

Businesses linked from this site are responsible for information you provide directly to them. Following a website or directions link takes you to another service, whose privacy policy applies.

5. Keeping information

We retain information only for as long as it is needed for its purpose. Retention is assessed by reference to whether a listing remains relevant, an account is authorised, an enquiry or dispute is unresolved, or a legal or security need continues.

• Directory records are kept while relevant to the directory. Archiving removes a listing from public view; it does not itself erase the underlying record or uploaded images.
• Correspondence is retained as necessary to deal with your enquiry and any related follow-up or dispute.
• Administrator records are retained while access is needed and for any necessary security follow-up.
• Technical logs, security records and backup copies are retained according to their operational purpose and the applicable hosting and backup arrangements. Backup copies may remain until their normal replacement or deletion cycle.

You can ask us about the retention of a particular record or request its deletion. We will explain any reason we need to keep it.

6. Security and international processing

We use access controls, password hashing and other appropriate safeguards to protect information. No website or email service can guarantee absolute security.

Hosting and email providers may process information in countries other than the UK. Where a restricted international transfer is involved, appropriate safeguards or another lawful transfer mechanism must be in place. Contact us for details of the providers, locations and safeguards relevant to your information.

7. Your rights

Depending on the circumstances, you may ask to access your personal information, correct inaccuracies, erase information, restrict its use, object to processing based on legitimate interests, or receive certain information in a portable form. These rights are subject to conditions and exceptions. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Email privacy@saffronshops.com with enough detail to identify the information concerned. We may need to verify your identity. We normally respond within one month; if a lawful extension or additional information is needed, we will explain why.

You may raise concerns with us and complain to the UK Information Commissioner’s Office: ico.org.uk/make-a-complaint. You do not have to contact us first.

8. Cookies and changes

Our cookies policy explains the website’s session cookie. We will update this policy when our practices change and show the revised date above.