Privacy Policy

1. Introduction

Local Brand Hub, a trading name of Matthew 10:16 Ltd (“we”, “us”, “our”), is committed to protecting your privacy. This policy explains how we collect, use, store, and share your personal data when you use our website at localbrandhub.com and our application at app.localbrandhub.com (together, the “Service”).

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered address is in London, United Kingdom.

If you have questions about this policy, contact us at hello@localbrandhub.com.

2. What We Collect

We collect the following categories of personal data:

Information you provide directly

• Account information — name, email address, and password when you register
• Business information — business name, address, phone number, and industry when you set up your profile
• Contact form submissions — name, email, and message content when you contact us
• Newsletter subscription — email address and subscription preferences
• Payment information — processed securely by Stripe; we do not store card details

Information collected automatically

• Usage data — pages visited, features used, actions taken within the Service
• Device information — browser type, operating system, screen resolution
• Log data — IP address, access times, referring URLs
• Cookies and similar technologies — see our Cookie Policy for details

3. How We Use Your Data

We use your personal data to:

• Provide, maintain, and improve the Service
• Process your subscription and manage billing
• Send you marketing intelligence reports (if subscribed)
• Respond to your enquiries and provide customer support
• Send service-related notifications (e.g. plan changes, security alerts)
• Analyse usage patterns to improve the platform
• Detect and prevent fraud or abuse
• Comply with legal obligations

We will only send marketing communications if you have opted in. You can unsubscribe at any time from your account settings or by clicking the link in any marketing email.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract — processing necessary to provide the Service you have signed up for
• Legitimate interests — analytics, fraud prevention, and improving the Service, where these interests do not override your rights
• Consent — marketing communications and non-essential cookies (you can withdraw consent at any time)
• Legal obligation — where we are required to process data to comply with UK law

5. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase (database hosting) — stores account and business data, hosted in the EU
• Stripe (payment processing) — processes subscription payments securely
• Vercel (hosting) — serves the website and application
• Google Analytics (analytics) — anonymised usage statistics
• Microsoft Clarity (analytics) — anonymised session recordings and heatmaps
• Resend (email) — delivers transactional and marketing emails
• DataForSEO (SEO data) — provides competitor and keyword data for paid features

All third-party processors are bound by data processing agreements and process data only on our instructions.

We may also disclose data if required by law, court order, or to protect our legal rights.

6. Data Retention

We retain your personal data for as long as you have an active account. After account deletion:

• Account and business data is deleted within 30 days
• Billing records are retained for 7 years (UK tax requirements)
• Anonymised analytics data may be retained indefinitely
• Contact form submissions are retained for 2 years
• Newsletter subscribers who unsubscribe are soft-deleted (email retained for suppression list)

7. Your Rights

Under the UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (“right to be forgotten”)
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests or direct marketing
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at hello@localbrandhub.com. We will respond within 30 days. For more detail, see our GDPR page.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies and similar technologies on our website. Essential cookies are required for the Service to function. Analytics cookies (Google Analytics, Microsoft Clarity) are used to understand how visitors interact with our site.

For full details about the cookies we use, how to control them, and your choices, please see our Cookie Policy.

9. Children's Privacy

The Service is designed for business use and is not directed at anyone under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify you by email or by posting a notice on our website. The “last updated” date at the top of this page indicates when the policy was most recently revised.

Your continued use of the Service after any changes indicates your acceptance of the updated policy.