Privacy Policy

This policy explains how SnackFinder® ("we", "us", "our") collects, uses, and protects personal data when you use the SnackFinder® mobile app, join SnackFinder® as a vendor, or otherwise interact with this website. We are the data controller for the information you provide.

Who we are

• Trading name:SnackFinder®
• Data controller:Snackfinder Ltd (registered in Scotland, company no. SC888159), trading as SnackFinder®
• Registered office: West Arnloss, Slamannan, Falkirk, Scotland, FK1 3DH
• Data protection contact: info@snackfinder.co.uk

What personal data we collect

When you submit a vendor application through /apply, we collect:

• Business name and vendor type
• Your name (contact person)
• Email address
• Phone number
• Business address and postcode, plus free-text description of where you usually trade
• Whether your operation is mobile or fixed
• Anything else you choose to tell us in the notes field
• Whether you've opted in to occasional marketing updates (a tick-box on the form; unticked by default)
• Optionally, how you heard about SnackFinder® (e.g. Google, referral, an event) if you tell us

When you use the "Keep me in the loop" button on our home page, we collect:

• Your name
• Email address
• Postcode

Cookies and website analytics

We use Google Analytics to understand how this website is being used — for example how many people visited a page, which website or advert they arrived from, and whether they tapped one of the app store buttons.

Google Analytics sets cookies on your device, so we ask before we turn it on. The first time you visit we show a cookie banner, and Google Analytics is not loaded at all unless you accept. If you decline, no Google cookies are set and no data is sent to Google — we simply don't measure that visit. It is the only analytics we use on this website.

You can change your mind at any time using the Cookies link at the bottom of any page. If you withdraw consent we stop sending data to Google and delete the Google Analytics cookies already on your device. Google Analytics data is retained for 14 months and then deleted automatically.

We do not use advertising or tracking pixels, we do not run adverts on this site, and we do not share this information with advertising networks.

Location data (mobile app)

The SnackFinder® mobile app uses device location to help customers find nearby food vendors and to let vendors show where they are trading. You control this in your device settings and can grant or deny it at any time. We access and use location as follows:

• Finding vendors near you (customers).When you allow it, the app uses your device's precise location to show food vendors close to you, centre the map, and calculate how far away each vendor is. This is processed on your device; for ordinary browsing your location is not linked to any account (the customer experience is anonymous) and is not stored on our servers.
• "Notify me" launch alerts (customers). If you ask to be told when SnackFinder® launches in your area, the app sends your device's current location (as coordinates), a pseudonymous one-way (hashed) device identifier, and a push-notification token to our servers. We use this only to work out which launch area you are in and to send you a notification when we go live there. It is not linked to your name or email.
• Live trading location (vendors).If you are a vendor and set yourself as "open", the app sends your current location to our servers so customers can see where you are trading on the map, including while the app is in the background if you enable that. Your live location is stored only while you are open and is visible to customers during that time; it stops being collected when you set yourself closed.

You can turn location access off at any time in your device settings. If you do, nearby-vendor search, distances, launch alerts, and live vendor broadcasting will not work, but you can still use the rest of the app. We do not sell location data or share it with advertising networks.

Payment information

When you complete the vendor application, you'll be sent to a Stripe-hosted page to save your card details so your subscription can be set up once we've approved your application. Payment card numbers, expiry dates, and security codes are entered on Stripe's website and are never seen or stored by us. We hold only Stripe's reference IDs (a customer ID, a subscription ID, and the last four digits and brand of your card) so we can manage your subscription and reconcile billing.

Stripe is our payment processor and is itself a data controller for the payment data you provide to it. Stripe is based in the United States and processes data internationally; transfers are covered by the UK International Data Transfer Agreement and Standard Contractual Clauses included in Stripe's Data Processing Agreement. See Stripe's own privacy notice at stripe.com/gb/privacy for how it handles your payment data.

Stripe is required by financial regulations to retain transaction records for several years (typically seven) even after you stop being a SnackFinder® vendor. That retention is outside our control and applies to records held by Stripe, not records held by us.

Cancelling your subscription: you can ask us to cancel at any time by emailing info@snackfinder.co.uk. We'll cancel within two working days.

How we use your data

We use the information you submit to:

• Review your application to join SnackFinder®.
• Contact you about your application, setup, and — if approved — your ongoing vendor account.
• Create your live vendor profile in the SnackFinder® mobile app once approved (business name, vendor type, address, postcode, phone — so customers can find you).
• Keep a record of applications for our internal reporting and to prevent duplicate submissions.

Launch sign-ups

If you use the "Keep me in the loop" button on our home page, we collect your name, email, and postcode so we can email you when SnackFinder® launches in your area. We use that information for that purpose only. You can unsubscribe at any time via the link in every email or by emailing info@snackfinder.co.uk. Unsubscribed contacts are removed from our active mailing list within 30 days of the request and no email address is kept beyond that point except to ensure we don't re-contact you in error.

Rewards Club referral scheme

If you sign up to the SnackFinder® Rewards Club, we collect your name, postal address, email address and phone number. We use these to post you promotional leaflets and to contact you about the scheme and any referral rewards you may be due. If a reward becomes payable, we will separately ask you for proof of identity and bank account details in order to make the payment; those payment details are collected only at that point and only for that purpose. We keep this information for as long as needed to administer the scheme and to meet our record-keeping and tax obligations. See the Rewards Club Terms & Conditions for how the scheme operates. You can ask us to remove your details at any time by emailing info@snackfinder.co.uk.

Marketing updates (optional)

The vendor application form includes an optional checkbox for marketing updates. Ticking it tells us you're happy to receive occasional emails about SnackFinder® — new features, news, vendor tips. Leaving it unticked means we will only contact you about your application and, if approved, your account.

If you opt in, we record the date you gave consent and the version of this policy you consented to, so that we can honour it and any later withdrawal. Every marketing email will include a one-click unsubscribe link. You can also withdraw consent at any time by emailing info@snackfinder.co.uk. Withdrawing consent does not affect service emails about your application or account.

Lawful basis for processing

We process your data on the basis of legitimate interests (running and growing a curated food-vendor marketplace) and, where approved, on the basis of performance of a contract(listing you on the platform). By submitting the application form, you confirm you are happy for us to contact you about SnackFinder®.

Who we share your data with

We store and process your data using a small number of trusted third parties:

• Supabase— our database and application backend. Data is stored in Supabase's EU region. Supabase is bound by a Data Processing Agreement.
• Resend (Resend, Inc.)— our email delivery provider. Receives your name and email address to send you service emails (application updates, setup links) and, if you opted in, marketing updates. Resend is based in the United States; transfers are covered by the UK International Data Transfer Addendum and the Standard Contractual Clauses in Resend's Data Processing Agreement.
• Vercel — this website is hosted on Vercel. Server logs may contain standard request metadata (IP address, user agent) for a short retention window. Vercel does not receive your name, email address, or any other detail you have given us.
• Google (Google Ireland Limited) — provides Google Analytics, and onlyif you accept cookies. It receives your device and browser type, an approximate location derived from your IP address, and the pages you viewed. It does not receive your name, email address, or any other detail you have given us. Google may transfer data to the United States; those transfers are covered by the UK International Data Transfer Addendum and the Standard Contractual Clauses in Google's data processing terms — see policies.google.com/privacy. If you decline cookies, nothing is sent to Google at all.
• Stripe— our payment processor. Stripe receives your card details directly when you set up card-on-file and stores them under a customer record we reference by ID. Stripe is based in the United States; see the "Payment information" section above for details of the safeguards on international transfers.

We do not sell or rent your data. We do not share it with advertising networks.

How long we keep it

• Approved vendors: for as long as your vendor account is active, plus 12 months after account closure.
• Rejected or withdrawn applications: 12 months from the date of submission, then deleted.
• Email correspondence: up to 24 months for record-keeping.

Your rights under UK GDPR

You have the right to do any of the following. Click a link to start an email request — we'll respond within one month.

• Request a copy of the data we hold about you (subject access request).
• Ask us to correct inaccurate data.
• Ask us to delete your data (the "right to be forgotten") where we no longer have a lawful reason to keep it.
• Object to how we process your data, or ask us to restrict processing.
• Ask us to transfer your data to another provider.
• Withdraw any consent you have given (without affecting processing carried out before withdrawal). For marketing emails specifically, every email also has a one-click unsubscribe link.
• Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

If your email client doesn't open from those links, just email info@snackfinder.co.uk with what you'd like done and the email address you originally used to interact with SnackFinder®. We'll verify your identity by checking the email address matches our records, and we'll respond within one month.

Security

Data is transmitted over HTTPS and stored in Supabase's encrypted infrastructure. Access to application data is restricted to a small number of staff and contractors with a legitimate need to review it. If we ever become aware of a data breach affecting you, we will notify you without undue delay.

Children

SnackFinder® is aimed at operating food-service businesses. Applications are not intended to be submitted by anyone under 18. If you believe a child has submitted personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page and, where appropriate, by contacting you directly.

Contact

Questions about this policy or your data? info@snackfinder.co.uk, or see our contact page.