Privacy Policy
Draft for review. Some company and operational details are still to be confirmed. An effective date will be added when this policy is finalised.
1. Who is responsible for your information?
UniPints Limited, trading as UniPints, is the controller responsible for the personal information described in this policy. Our registered office address is To be confirmed and our privacy email is privacy@unipints.com.
This policy covers visitors, people submitting price reports or enquiries, and venue partners and account users. Public browsing does not require an account.
2. Information we use and why
Browsing and security
When your device requests a page, our hosting infrastructure processes technical information such as your IP address and request details to deliver and protect the service. Security and diagnostic logs may record this information. Where enabled in our hosting configuration, we also use IP addresses to limit repeated requests and prevent misuse of reporting, uploads and account functions.
We rely on our legitimate interests in operating a reliable website, protecting accounts, and preventing abuse. This essential processing is separate from optional analytics.
Optional analytics
If you select “Accept analytics”, we record interactions such as pub profile views, appearances of pub listings in search results, and clicks on deals, events and directions. Records can include the relevant pub, deal, event, drink or category identifiers, the time, and a randomly generated visitor identifier stored in your browser.
This helps us understand use of UniPints and provide venue performance statistics. The identifier can connect activity from the same browser across visits. It is pseudonymous information, not guaranteed anonymous information, even though you do not provide a name or email for it. Network requests also pass through our hosting infrastructure.
We rely on consent for this analytics processing. Declining or ignoring the banner prevents the application's optional analytics from being sent. You can still use public features without agreeing. See the Cookie Policy for the current steps to withdraw consent. Withdrawal does not affect the lawfulness of processing before withdrawal and does not automatically erase previously collected records.
Price reports and evidence
Reports include the pub and drink, recorded and corrected prices, an optional comment, and up to three optional evidence photos. We do not require your name or email for a report. Comments and images can nevertheless contain personal information if you include it.
We use reports to investigate corrections and improve listing accuracy, relying on our legitimate interests in maintaining useful and trustworthy information. Evidence is stored privately for authorised review. Corrected price information may be published; evidence photos are not intended for public display. Please avoid including faces, payment details or other unnecessary personal information.
Location features
If you request location-based distances and permit browser access, the feature calculates distances on your device. The UniPints location feature does not send those coordinates to our server. Where supported and permission can be checked, approximate coordinates and a saved time are stored locally; otherwise location may be held only while the page is open. Saved coordinates are rounded to roughly 100-metre precision.
This feature is optional and uses your permission. Revoke location permission and clear site storage in your browser to stop access and remove saved coordinates. Your browser, device location service and any external maps service you choose to open have their own privacy practices.
Enquiries and accounts
When you contact us, we receive your email address and the information you send, which may include your name, role and venue details. Invited partner and staff accounts involve an email address, authentication information, account identifiers, access permissions and records of activity or edits. Venue images and descriptions submitted for publication become public once approved and published.
We use this information to respond, administer access, manage listings and support the service. Our lawful basis is our legitimate interests in communicating with contacts and administering authorised users. Where you personally enter a contract with us, we also process information necessary to take requested steps before that contract or perform it. We use legal obligation where a specific legal requirement requires records to be kept or disclosed.
Providing enquiry information is voluntary, but we may be unable to respond without contact details. Account authentication details are necessary to provide account access. Analytics, location access and report photos are optional.
Information from other sources
We may receive professional contact details from a venue representative who requests access for a colleague. Listing information can also come from venue representatives, visitor reports and publicly available venue material. Where this identifies an individual, we use it for the relevant communication, account or listing purpose described above and rely on our legitimate interests in administering venue relationships and accurate listings.
3. Who receives information?
Authorised UniPints personnel can access information where needed for their work. Service providers process information to help us deliver the service, including:
- Supabase for the database and account authentication;
- Hosting provider (to be confirmed) for hosting, delivery and security;
- Storage provider (to be confirmed) for uploaded images and evidence;
- Email providers (to be confirmed) for enquiries and account messages.
Venue partners receive statistics about their listings; the partner dashboard is intended to provide performance summaries rather than visitor-level browsing records. Venue content intended for publication is available to website visitors.
We may disclose information to professional advisers or authorities where necessary for legal advice, a legal obligation, or establishing or defending legal claims. Any disclosure should be limited to what is necessary.
4. International processing
Processing locations and any applicable international transfer safeguards are to be confirmed in the final version of this policy.
5. How long we keep information
We retain personal information only for the relevant purpose and any justified legal or security needs:
| Information | Retention |
|---|---|
| Raw analytics events | The application deletes records older than 90 days in batches when new analytics events arrive. Deletion is not guaranteed at exactly 90 days and may be delayed during inactivity or a backlog. |
| Browser preferences, analytics identifier and locally saved location | See the Cookie Policy. These currently have no application-set automatic expiry. |
| Price reports and private evidence | Retention period to be confirmed. |
| Partner/staff accounts, permissions and edit history | Retention period to be confirmed. |
| Enquiries and correspondence | Retention period to be confirmed. |
| Security logs, request-limit records and backups | Retention period to be confirmed. |
Where a dispute or legal duty justifies longer retention, we limit retention to the relevant records and period. Statistics may be retained longer only where they no longer identify anyone.
6. Your choices and rights
Depending on the circumstances, you can request access to your personal information, correction, erasure, restriction of processing or a portable copy. You can object to processing based on legitimate interests and withdraw consent where we rely on it. These rights have conditions and exceptions; we will explain any that apply to your request.
Contact privacy@unipints.com. We may need proportionate information to verify your identity and locate the records. There is normally no charge. We normally respond within one month, subject to lawful extensions or pauses, which we will explain where applicable.
For analytics requests, the value stored in your browser under unipints:visitor-id can help us locate associated events. Contact us if you need help finding it. Clearing browser storage removes your local identifier but does not itself delete server records and may make those records harder to locate. Do not send passwords or authentication cookies.
You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or call 0303 123 1113. You do not have to complain to us first.
7. Children, automated decisions and changes
UniPints is intended for adults aged 18 and over. If you believe a child has supplied personal information, contact us so we can assess and address it.
We do not use the described data processing to make solely automated decisions with legal or similarly significant effects on individuals. Price rankings concern venue pricing rather than decisions about you.
We may update this policy when our practices change. The effective date will identify the current version; we will provide additional notice where appropriate.