Privacy policy.

1. Who we are

SaffronShops is the name under which this local directory and town guide operates. In this policy, “we”, “us” and “our” mean the operator of SaffronShops, responsible for deciding how personal information is used for this website.

For privacy questions, corrections or requests about your information, email [email protected].

2. Information we collect

• Directory information: business names, descriptions, addresses, contact details, website links, photographs and opening hours. These may identify individuals, particularly sole traders.
• Correspondence: your name, email address and any information you include when contacting us.
• Administrator information: account email addresses, securely hashed passwords, session identifiers and records used to protect sign-in. Failed-login protection uses a hashed representation of an IP address, an attempt count and a timestamp.
• Technical information: our server or hosting provider may record IP addresses, requested pages, request times, browser information and error details to deliver and protect the service. Search words can form part of a requested page’s address and appear in server logs.
• Basic site statistics: we record the requested page path, request time and referring website hostname for public page views. We do not store an IP address or full referrer URL in this analytics table. Page-view records are kept for up to 90 days and are used to show aggregate trends to administrators. To count daily visitors without counting repeat page requests as new visitors, we also keep a one-way hash of the site session identifier with the visit date for up to 90 days. For the “users online” indicator, we keep the same kind of hash with the last active time while a visitor is active; presence records older than 15 minutes are deleted during the next heartbeat or online-count refresh. These figures count browser sessions, not identified individuals.

Directory information may come from business owners, authorised representatives, our existing directory or publicly available business websites and sources. You do not need a public account to browse the directory. Please do not send sensitive personal information unless it is necessary for a specific enquiry.

Automatic listings and removal requests

SaffronShops may automatically add shops, cafés, restaurants and other businesses in Saffron Walden to the directory using publicly available business information, without a request from or prior contact with the owner. Inclusion does not mean that the owner has approved the listing, partnered with SaffronShops or endorsed the website.

If you own or are authorised to represent a listed business and would like its listing removed, email [email protected] with the business name and, if possible, a link to the listing. You can use the same address to request a correction. We may ask for reasonable confirmation that you represent the business before making changes. Once confirmed, we will remove the listing from public view as soon as reasonably practicable, without charge.

This removal process does not limit your data protection rights. Where business information identifies an individual, our use remains subject to applicable data protection law, including your right to object where we rely on legitimate interests. Removal from the public directory is distinct from erasure of all records; see the retention and rights sections below.

3. Why we use information

We record basic page-view totals on our server as described above. Google Analytics also receives cookieless measurement signals from public pages before a choice is made; these can include page activity, timestamps, browser or referrer details and consent state, and may be used for aggregate or modelled reporting. If you allow analytics, Google Analytics can use analytics cookies for fuller measurement. We do not use it for advertising or personalised advertising, and we do not sell personal information. We do not make automated decisions with legal or similarly significant effects. We will update this notice when our practices change.

4. Who can see it

Published business listings are available to anyone who visits the website and may be indexed by search engines. Do not supply a private home address, personal number or photograph for publication unless you intend it to be public.

Google receives the cookieless measurement signals described above and, if you allow analytics, information collected through Google Analytics. Authorised administrators and service providers supporting hosting, email, maintenance or backups may access information where needed for those tasks. We may also disclose relevant information where legally required or necessary to establish, exercise or defend legal claims.

Businesses linked from this site are responsible for information you provide directly to them. Following a website or directions link takes you to another service, whose privacy policy applies.

5. Keeping information

We retain information only for as long as it is needed for its purpose. Retention is assessed by reference to whether a listing remains relevant, an account is authorised, an enquiry or dispute is unresolved, or a legal or security need continues.

• Directory records are kept while relevant to the directory. Archiving removes a listing from public view; it does not itself erase the underlying record or uploaded images.
• Correspondence is retained as necessary to deal with your enquiry and any related follow-up or dispute.
• Administrator records are retained while access is needed and for any necessary security follow-up.
• Technical logs, security records and backup copies are retained according to their operational purpose and the applicable hosting and backup arrangements. Backup copies may remain until their normal replacement or deletion cycle.

You can ask us about the retention of a particular record or request its deletion. We will explain any reason we need to keep it.

6. Security and international processing

We use access controls, password hashing and other appropriate safeguards to protect information. No website or email service can guarantee absolute security.

Hosting and email providers may process information in countries other than the UK. Where a restricted international transfer is involved, appropriate safeguards or another lawful transfer mechanism must be in place. Contact us for details of the providers, locations and safeguards relevant to your information.

7. Your rights

Depending on the circumstances, you may ask to access your personal information, correct inaccuracies, erase information, restrict its use, object to processing based on legitimate interests, or receive certain information in a portable form. These rights are subject to conditions and exceptions. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Email [email protected] with enough detail to identify the information concerned. We may need to verify your identity. We normally respond within one month; if a lawful extension or additional information is needed, we will explain why.

You may raise concerns with us and complain to the UK Information Commissioner’s Office: ico.org.uk/make-a-complaint. You do not have to contact us first.

8. Cookies and changes

Our cookies policy explains the website’s session cookie. We will update this policy when our practices change and show the revised date above.