Privacy Policy

This policy explains how SnackFinder® ("we", "us", "our") collects, uses, and protects personal data when you join SnackFinder® as a vendor or otherwise interact with this website. We are the data controller for the information you provide.

Who we are

• Trading name:SnackFinder®
• Data controller:Alasdair Cowan, trading as SnackFinder® (sole trader)
• Registered address: West Arnloss, Falkirk, FK1 3DH, United Kingdom
• Data protection contact: info@snackfinder.co.uk

What personal data we collect

When you submit a vendor application through /apply, we collect:

• Business name and vendor type
• Your name (contact person)
• Email address
• Phone number
• Business address and postcode, plus free-text description of where you usually trade
• Whether your operation is mobile or fixed
• Anything else you choose to tell us in the notes field
• Whether you've opted in to occasional marketing updates (a tick-box on the form; unticked by default)
• Optionally, how you heard about SnackFinder® (e.g. Google, referral, an event) if you tell us

When you use the "Keep me in the loop" button on our home page, we collect:

• Your name
• Email address
• Postcode

We do not currently use cookies, analytics, or tracking pixels.

Payment information

When you complete the vendor application, you'll be sent to a Stripe-hosted page to save your card details so your 90-day free trial and any subsequent subscription can be processed once we've approved your application. Payment card numbers, expiry dates, and security codes are entered on Stripe's website and are never seen or stored by us. We hold only Stripe's reference IDs (a customer ID, a subscription ID, and the last four digits and brand of your card) so we can manage your subscription and reconcile billing.

Stripe is our payment processor and is itself a data controller for the payment data you provide to it. Stripe is based in the United States and processes data internationally; transfers are covered by the UK International Data Transfer Agreement and Standard Contractual Clauses included in Stripe's Data Processing Agreement. See Stripe's own privacy notice at stripe.com/gb/privacy for how it handles your payment data.

Stripe is required by financial regulations to retain transaction records for several years (typically seven) even after you stop being a SnackFinder® vendor. That retention is outside our control and applies to records held by Stripe, not records held by us.

Cancelling your subscription: you can ask us to cancel at any time by emailing info@snackfinder.co.uk. We'll cancel within two working days. We'll add a self-service cancellation option once the SnackFinder® mobile app launches.

How we use your data

We use the information you submit to:

• Review your application to join SnackFinder®.
• Contact you about your application, setup, and — if approved — your ongoing vendor account.
• Create your live vendor profile in the SnackFinder® mobile app once approved (business name, vendor type, address, postcode, phone — so customers can find you).
• Keep a record of applications for our internal reporting and to prevent duplicate submissions.

Launch sign-ups

If you use the "Keep me in the loop" button on our home page, we collect your name, email, and postcode so we can email you when SnackFinder® launches in your area. We use that information for that purpose only. You can unsubscribe at any time via the link in every email or by emailing info@snackfinder.co.uk. Unsubscribed contacts are removed from our active mailing list within 30 days of the request and no email address is kept beyond that point except to ensure we don't re-contact you in error.

Marketing updates (optional)

The vendor application form includes an optional checkbox for marketing updates. Ticking it tells us you're happy to receive occasional emails about SnackFinder® — new features, news, vendor tips. Leaving it unticked means we will only contact you about your application and, if approved, your account.

If you opt in, we record the date you gave consent and the version of this policy you consented to, so that we can honour it and any later withdrawal. Every marketing email will include a one-click unsubscribe link. You can also withdraw consent at any time by emailing info@snackfinder.co.uk. Withdrawing consent does not affect service emails about your application or account.

Lawful basis for processing

We process your data on the basis of legitimate interests (running and growing a curated food-vendor marketplace) and, where approved, on the basis of performance of a contract(listing you on the platform). By submitting the application form, you confirm you are happy for us to contact you about SnackFinder®.

Who we share your data with

We store and process your data using a small number of trusted third parties:

• Supabase— our database and application backend. Data is stored in Supabase's EU region. Supabase is bound by a Data Processing Agreement.
• Google Sheets (Google LLC)— a mirror of vendor applications is appended to a Google Sheet so our team can review submissions. Google is based in the United States; transfers are covered by the UK International Data Transfer Addendum and the Standard Contractual Clauses in Google's Workspace Data Processing Amendment.
• Resend (Resend, Inc.)— our email delivery provider. Receives your name and email address to send you service emails (application updates, setup links) and, if you opted in, marketing updates. Resend is based in the United States; transfers are covered by the UK International Data Transfer Addendum and the Standard Contractual Clauses in Resend's Data Processing Agreement.
• Vercel — this website is hosted on Vercel. Server logs may contain standard request metadata (IP address, user agent) for a short retention window.
• Stripe— our payment processor. Stripe receives your card details directly when you set up card-on-file and stores them under a customer record we reference by ID. Stripe is based in the United States; see the "Payment information" section above for details of the safeguards on international transfers.

We do not sell or rent your data. We do not share it with advertising networks.

How long we keep it

• Approved vendors: for as long as your vendor account is active, plus 12 months after account closure.
• Rejected or withdrawn applications: 12 months from the date of submission, then deleted.
• Email correspondence: up to 24 months for record-keeping.

Your rights under UK GDPR

You have the right to do any of the following. Click a link to start an email request — we'll respond within one month.

• Request a copy of the data we hold about you (subject access request).
• Ask us to correct inaccurate data.
• Ask us to delete your data (the "right to be forgotten") where we no longer have a lawful reason to keep it.
• Object to how we process your data, or ask us to restrict processing.
• Ask us to transfer your data to another provider.
• Withdraw any consent you have given (without affecting processing carried out before withdrawal). For marketing emails specifically, every email also has a one-click unsubscribe link.
• Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

If your email client doesn't open from those links, just email info@snackfinder.co.uk with what you'd like done and the email address you originally used to interact with SnackFinder®. We'll verify your identity by checking the email address matches our records, and we'll respond within one month.

Security

Data is transmitted over HTTPS and stored in Supabase's encrypted infrastructure. Access to application data is restricted to a small number of staff and contractors with a legitimate need to review it. If we ever become aware of a data breach affecting you, we will notify you without undue delay.

Children

SnackFinder® is aimed at operating food-service businesses. Applications are not intended to be submitted by anyone under 18. If you believe a child has submitted personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page and, where appropriate, by contacting you directly.

Contact

Questions about this policy or your data? info@snackfinder.co.uk, or see our contact page.