Privacy policy
Which personal data Best Edinburgh holds, why, who processes it, for how long, and the rights UK law gives you.
Who is responsible
Best Edinburgh (bestedinburgh.uk) answers for the personal data this policy covers. It is handled under the UK GDPR and, alongside it, the Data Protection Act 2018. Write to info@bestedinburgh.uk with any question about your data.
What we collect, and why
Visiting the site: we see your IP address, your browser and the pages you open, and use them to keep the site working securely. Our legal basis is legitimate interests.
Writing to us: we keep your message and the sender’s email address so that we can respond.
Business accounts: we keep the email used to sign in and the edits made to a listing, plus billing records when a business buys Pro or Top. The bases are the contract with the business and our legal duty to keep accounts.
No advertising, no tracking cookies
Advertising is absent from Best Edinburgh, and so are advertising and analytics cookies. Cloudflare measures visits without leaving anything on your device. One technical cookie keeps an owner logged in to the business area. Because the service cannot work without it, it is exempt from consent under the Privacy and Electronic Communications Regulations, and no banner is needed.
Who helps us
Cloudflare hosts the site, counts visits without cookies, carries our email and runs the Turnstile test on our forms that tells people from bots. Payments for Pro and Top are made through Stripe, which stores card details itself and never passes them to us. Part of the processing is carried out in the United States, using the transfer safeguards that UK law accepts. Readers are never charged.
How long we keep it
Server logs are erased after a brief period. Correspondence stays until the matter is resolved. A business account lasts until the owner closes it, and billing records are held for the time that tax law demands.
Your rights
You can ask what data we hold about you, have mistakes corrected or the data erased, restrict or object to how it is used and, in some cases, ask for a portable copy. Write to info@bestedinburgh.uk and expect an answer within one month.
Complaints
If you think your data has been mishandled, please tell us first and we will do what we can to put it right. You can also contact the UK’s data protection regulator, the Information Commissioner’s Office (ICO), whose website is ico.org.uk.
Changes
This policy is updated when we change how we treat personal data, and the version on this page is the current one.