Privacy & Cookie Policy

Last updated: 29 September 2026

Who we are

UK Local Gateway (localgateway.co.uk) is the data controller for personal data collected through this website. Contact: privacy@localgateway.co.uk.

What we collect and why

• Account details (email, sign-in via Google) — to let you sign in, post events and RSVP. Lawful basis: contract.
• Events you submit (including organiser name, email, phone) — to review and publish your listing. Lawful basis: contract.
• RSVPs ("I'm going") — to show attendee counts and your saved events. Lawful basis: contract.
• Payment records for promoted listings — card payments are processed by our payment provider; we never see or store your card number. Lawful basis: contract and legal obligation (tax records).
• Basic visit statistics — for every visitor, without cookies: device type (mobile, tablet or desktop), the website or campaign that sent you here, and the pages or buttons you use. This can't identify you. Lawful basis: legitimate interests (understanding how the site is used).
• Location statistics — only if you click "Accept": your IP address and approximate postcode/city/country (looked up via ipapi.co), linked to your account if signed in. Lawful basis: consent.

Cookies and similar storage

• Essential (no consent needed): sign-in session and your cookie choice, kept in your browser's local storage; payment security cookies set by our payment provider during checkout.
• Analytics (consent needed): a temporary location record for the visit statistics above. Not set if you reject.

We do not use advertising or cross-site tracking cookies.

Who we share data with

Our hosting and database provider, our payment provider, and ipapi.co (for location lookup, only with consent). A backup copy of site data is stored in our own database account. Some providers may process data outside the UK under approved safeguards (such as UK adequacy regulations or International Data Transfer Agreements). We never sell your data.

How long we keep it

Account and event data: while your account is active, then deleted within 90 days of a request. Visit statistics: up to 26 months. Payment records: 6 years, as required by HMRC.

Your rights

Under UK GDPR you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent at any time. Email us and we'll respond within one month. If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.