01Who we are
Flyerpin is run by Flyerpin Ltd, a company registered in England and Wales, company number 17493463. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the controller of your personal data. ICO registration number: ZC280941.
Contact us about anything in this notice by email, or by post at the address above. We’re not required to appoint a Data Protection Officer, so privacy questions come straight to us.
02What we collect
We only ask for what we need. We don’t buy data about you, and we don’t combine it with data from anywhere else.
If you join as a neighbour
| What | Why | Required? |
|---|---|---|
| First name | To greet you properly in our emails | Yes |
| Email address | To confirm your sign-up and tell you when Flyerpin opens near you | Yes |
| Your town | To count you towards your town opening first | Yes |
| Postcode | To check your area and, at launch, show you what’s nearby. We use it to find an approximate area, never your street | No |
| Your answers to our short questions, such as what you’d like on your board and how you find out what’s on | To decide which towns open first and what to build | No, you can skip them |
If you join as a business
| What | Why | Required? |
|---|---|---|
| Business name, type and postcode | To know which businesses want Flyerpin, and where | Yes |
| Your name and email address | To confirm your place and contact you about launch | Yes |
| Your answers, such as how you promote your business now, what you spend and which plan suits you | To shape our plans and prices | Yes |
| Mobile number | To arrange the 10-minute call, only if you ask for one | No |
If you’re a sole trader, your business details may also be personal data about you, especially if the business uses your own name. We treat them that way, and all the rights below apply.
From everyone
- A record of your consent: what you agreed to, when, and which version of the wording you saw. The law asks us to be able to prove it.
- Your IP address: used for a moment to run our spam check and stop repeated sign-ups. We don’t keep it in our database. Cloudflare and our host keep short-lived security logs.
- The link that brought you to us, such as a link a neighbour shared or a campaign tag, so we know which ways of spreading the word work.
- How you use the site, if you accept analytics cookies: pages you visit, how you found us, your device type and browser, and your approximate location at town or city level, through Google Analytics. Our Cookie notice has the details.
- Your emails to us, if you get in touch.
03Why we use it, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Keep your place on the waiting list and count sign-ups in each town | Legitimate interests: finding out which towns want Flyerpin before we launch there |
| Send your confirmation email, updates about your town and launch news | Consent. You can withdraw it at any time with the unsubscribe link |
| Arrange the optional 10-minute call | Consent, which you give when you ask for the call |
| Stop spam, fake sign-ups and fraud | Legitimate interests: keeping the waiting list and the town counts honest |
| Save which link brought you to sign up | Legitimate interests: spending our small budget where it works |
| Count visits without cookies, with Cloudflare Web Analytics | Legitimate interests: knowing how many people visit, without identifying anyone |
| See which pages and posts work, with Google Analytics | Consent, given when you click Accept all. You can change your mind at any time |
| Reply to your questions and requests | Legitimate interests |
Where we rely on legitimate interests, we’ve weighed them against your rights and kept what we do to what’s needed. You can object at any time.
We look at sign-up answers as a whole to decide where to launch and what to build. We don’t make any automated decisions about you that have legal or similarly significant effects.
05Transfers outside the UK
Some suppliers are based in, or can access data from, the US or the EU. When data leaves the UK, we rely on UK adequacy regulations (for the EU) or on safeguards such as the UK Extension to the EU-US Data Privacy Framework or the ICO’s International Data Transfer Addendum. Ask us and we’ll tell you more.
06How long we keep it
| Data | How long |
|---|---|
| Sign-ups not confirmed by email | Deleted after 30 days |
| Waiting list details | Until you unsubscribe or ask us to delete them. Unsubscribing deletes your entry; we keep only your email address on a do-not-contact list so you aren’t added again by mistake. If you don’t create a Flyerpin account, we delete your entry 12 months after your town opens |
| Mobile number | Deleted after the call, or at launch if we haven’t spoken |
| Consent records | As long as we hold your details |
| Google Analytics data | 14 months, then deleted automatically |
| Emails to us | 2 years after the conversation ends |
07Your rights
You can ask us to:
- give you a copy of your data
- correct it
- delete it
- stop or limit how we use it, or object to it
- send it to you or to another organisation in a common format
You can withdraw your consent at any time, without affecting what we did before. To use any of these rights, contact us. We’ll reply within one month. It’s free, and you don’t need to give a reason. If we need to check who you are, we’ll ask for as little as possible.
08Emails
Every email we send has an unsubscribe link that removes you straight away. Our email provider counts how many of our emails are opened and how many links are clicked, so we can spot delivery problems. These counts are anonymous: they aren’t linked to you, and we don’t use them to build a profile of you.
09Age
The waiting list is for people aged 16 and over.
10Keeping your data safe
Your data is encrypted in transit and at rest. Only people who need it can see it, and the database isn’t open to the public internet. If a breach puts your rights at risk, we’ll report it to the ICO within 72 hours, and tell you directly if the risk to you is high.
11Complaints
If you’re unhappy with how we’ve handled your data, please tell us. We’ll acknowledge your complaint within 30 days, look into it, and tell you what we’re doing about it.
You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. You don’t have to contact us first.
12Changes to this notice
If we change this notice, we’ll update the version and date at the top. If the change is significant, we’ll email you before it takes effect.