PRIVACY POLICY
Burystedmunds.com
Operated by Million Places Ltd
Company Number: 06832489
Registered Office:
35 Southgate Street
Bury St Edmunds
Suffolk
IP33 2AZ
United Kingdom
Email: mail@millionplaces.com
Version: 2.0
Effective Date: [07/07/26]
Last Reviewed: [07/07/26]
1. Introduction
Million Places Ltd ("we", "our", "us") is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect your personal information when you use Burystedmunds.com ("the Website"), contact us, submit a business listing, purchase a subscription, subscribe to our newsletter or otherwise interact with our services.
We are committed to processing personal information fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.
By using this Website, you acknowledge that you have read this Privacy Policy.
2. Who We Are
Burystedmunds.com is operated by:
Million Places Ltd
Company Number: 06832489
Registered Office:
35 Southgate Street
Bury St Edmunds
Suffolk
IP33 2AZ
United Kingdom
Email:
For the purposes of UK GDPR, Million Places Ltd is the Data Controller for the personal information collected through this Website.
3. Scope of this Policy
This Privacy Policy applies to:
visitors to Burystedmunds.com;
businesses applying for Listings;
subscribed Businesses;
individuals contacting us;
newsletter subscribers;
anyone whose personal information we process through the Website.
It does not apply to third-party websites that may be linked from our Website.
4. Information We Collect
Depending on how you use the Website, we may collect the following categories of personal information.
Information you provide
This may include:
your name;
business name;
email address;
telephone number;
business address;
website address;
social media links;
business description;
photographs you upload;
messages sent through contact forms;
newsletter preferences;
correspondence with us.
Business Listing Information
Where you apply for a Listing we may collect information including:
trading name;
business category;
opening hours;
services offered;
logos;
promotional images;
contact information;
information you choose to publish.
Some of this information may become publicly visible once your Listing has been approved.
Payment Information
Payments are processed securely by Stripe.
We do not store full payment card details.
Stripe processes payment information in accordance with its own Privacy Policy.
We may receive information confirming:
payment status;
transaction reference;
subscription status;
billing information required for accounting purposes.
5. Information Collected Automatically
When you visit the Website certain technical information may be collected automatically.
This may include:
IP address;
browser type;
operating system;
referring website;
pages viewed;
time spent on pages;
approximate location;
device type;
session information.
Some of this information is collected through cookies and similar technologies.
Further information is available in our Cookie Policy.
6. Google Analytics
With your consent, we use Google Analytics to understand how visitors use our Website.
Google Analytics helps us understand:
page popularity;
visitor numbers;
traffic sources;
navigation paths;
general Website performance.
Google Analytics collects information such as:
browser type;
device information;
approximate location;
pages visited;
time spent on pages.
We do not use Google Analytics to identify individual visitors.
Analytics cookies are only placed after you have provided consent through our cookie banner.
7. Google reCAPTCHA
To help protect our Website from spam, abuse and automated attacks, we use Google reCAPTCHA on certain forms.
Google reCAPTCHA analyses information including:
IP address;
browser characteristics;
mouse movements;
time spent on pages;
user interactions;
other technical information required to distinguish human visitors from automated systems.
This processing is necessary to protect the security and integrity of the Website.
Further information is available in Google's Privacy Policy.
8. Newsletter Subscriptions
If you choose to subscribe to our newsletter, we collect:
your email address;
your subscription preferences;
records of your consent.
Our newsletter is delivered using Brevo.
You may unsubscribe at any time by:
clicking the unsubscribe link contained in every email; or
contacting us directly.
We will stop sending marketing communications as soon as reasonably practicable after you unsubscribe.
Operational or service-related emails relating to your business Listing may still be sent where necessary.
9. Contact Forms
When you contact us using a form on the Website we may collect:
your name;
email address;
telephone number (where provided);
your message;
any attachments;
technical information necessary to process your enquiry.
We use this information solely for responding to your enquiry and maintaining appropriate business records.
10. How We Use Your Personal Information
We use personal information for the following purposes:
operating Burystedmunds.com;
reviewing Listing applications;
publishing approved Listings;
processing subscription payments;
managing customer accounts;
responding to enquiries;
providing customer support;
improving Website functionality;
monitoring Website performance;
preventing fraud and abuse;
complying with legal obligations;
maintaining accounting records;
sending marketing communications where you have provided consent.
We will only use your personal information where we have a lawful basis for doing so.
11. Lawful Bases for Processing
Under UK GDPR we rely on one or more of the following lawful bases.
Contract
Processing is necessary to:
administer Business Listings;
process subscriptions;
provide services you request;
communicate regarding your account.
Legitimate Interests
We process information where necessary for our legitimate interests, including:
operating and improving the Website;
maintaining Website security;
preventing fraud;
reviewing Listing applications;
responding to enquiries;
administering our business.
Where we rely upon legitimate interests we carefully consider your rights before processing your information.
Consent
We rely on consent for:
email marketing;
newsletter subscriptions;
non-essential cookies;
Google Analytics cookies.
You may withdraw consent at any time.
Legal Obligation
We process information where required by law, including:
tax legislation;
accounting requirements;
court orders;
regulatory obligations.
12. Who We Share Information With
We only share information where necessary.
Our service providers currently include:
Squarespace
Website hosting and infrastructure.
Squarespace may process:
Website content;
submitted forms;
technical logs;
Website administration data.
Stripe
Payment processing.
Stripe processes:
payment details;
billing information;
transaction references;
subscription status.
Million Places Ltd does not receive or store complete payment card information.
Brevo
Email marketing.
Brevo processes:
email addresses;
subscription preferences;
marketing communications.
Google may process information through:
Google Analytics;
Google reCAPTCHA;
Google Maps (where used).
Professional Advisers
We may share information where necessary with:
accountants;
legal advisers;
insurers;
regulators;
law enforcement agencies,
where disclosure is legally required or reasonably necessary.
13. International Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place in accordance with UK GDPR.
These safeguards may include:
adequacy regulations;
Standard Contractual Clauses;
other approved transfer mechanisms.
We only use reputable providers that maintain appropriate security standards.
14. Data Retention
We retain personal information only for as long as is reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting and regulatory requirements.
Typical retention periods include:
Information
Typical Retention Period
Business Listing information
While the Listing remains active and for up to 6 years after it ends where required for legal or accounting purposes
Customer account information
While active and up to 6 years afterwards
Contact form enquiries
Normally up to 12 months unless further correspondence is required
Marketing consent records
Until consent is withdrawn and for a reasonable period afterwards to maintain suppression records
Accounting and payment records
At least 6 years in accordance with UK tax legislation
Technical logs
As required for security, diagnostics and system administration
Where information is no longer required it will be securely deleted or anonymised where appropriate.
15. Data Security
We take appropriate technical and organisational measures to protect personal information from:
unauthorised access;
accidental loss;
misuse;
alteration;
disclosure;
destruction.
These measures include, where appropriate:
secure website hosting;
encrypted connections (HTTPS);
restricted administrative access;
strong password policies;
reputable third-party providers;
regular software updates.
Although we take reasonable steps to protect information, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
16. Your Rights
Under UK GDPR you may have the following rights, depending on the circumstances.
Right of Access
You may request a copy of the personal information we hold about you.
Right to Rectification
You may ask us to correct inaccurate or incomplete information.
Right to Erasure
You may request deletion of your personal information where applicable.
This right is not absolute and may be limited where we are legally required to retain information.
Right to Restrict Processing
You may ask us to restrict how your information is used in certain circumstances.
Right to Data Portability
Where applicable, you may request your information in a structured, commonly used electronic format.
Right to Object
You may object to processing based on legitimate interests.
Rights Relating to Marketing
You may withdraw your consent to receive marketing communications at any time.
Every marketing email contains an unsubscribe link.
You may also contact us directly.
17. Children's Privacy
Burystedmunds.com is intended primarily for businesses and adults.
We do not knowingly collect personal information from children under the age of 13.
If we become aware that personal information relating to a child has been submitted without appropriate authority, we will take reasonable steps to delete that information.
18. Third-Party Websites
Our Website may contain links to third-party websites.
We are not responsible for:
their content;
privacy practices;
security;
cookies;
availability.
You should review the privacy policies of any third-party websites you visit.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
changes to our Website;
changes to our services;
changes in technology;
legal or regulatory developments;
changes to the third-party services we use.
The latest version will always be published on Burystedmunds.com.
Where appropriate, we may also notify Businesses of significant changes by email.
20. Complaints
If you have any questions or concerns about how we process your personal information, please contact us first.
We will make reasonable efforts to resolve your concerns promptly.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
You can find further information on the ICO's website at:
21. Contact Us
If you have any questions regarding this Privacy Policy or the processing of your personal information, please contact:
Million Places Ltd
Company Number: 06832489
35 Southgate Street
Bury St Edmunds
Suffolk
IP33 2AZ
United Kingdom
Email: mail@millionplaces.com