01Who we are - data controller
The data controller for the personal information described in this policy is UKC LABS LTD, registered in England & Wales No. 13622416, VAT No. GB476819146, trading as part of The Register Group. We operate the Trade Register UK directory at traderegister.org.uk.
You can reach our data protection contact at hello@ukc.uk.
02Information we collect
- Business details you submit for a listing: business name, trade, county, town, address, phone number, website, a short description, and photographs you upload.
- Submitter contact email. This is kept private by default and is used only to review your listing and contact you about it. It appears on your public listing only if you tick the option to publish it, and you can ask us to change that at any time.
- Account details for administrator sign-in, which uses your Google account email and basic profile information.
- Billing details for upgrades. Payment for FastTrack + Featured is taken by Stripe. Card numbers are handled by Stripe and are not stored on our servers; we keep the record that you paid, the amount, the date and the listing it applies to.
We do not sell personal information, and we do not use advertising trackers to build profiles of visitors.
03How we use your information
- Creating, publishing and maintaining directory listings, and showing them in search and browse results.
- Reviewing submissions: sending you an acknowledgement when you submit, and notifying you when a listing is approved or declined.
- Customer support: answering enquiries, correcting listing details, and handling requests to update or remove a listing.
- Invoicing and accounting for paid upgrades, and keeping records required for tax purposes.
The lawful bases we rely on are: performance of a contract (listing the business you submitted), legitimate interests (operating and securing a public directory, and replying to enquiries), consent (publishing your contact email on a listing, which you opt into), and legal obligation (tax and accounting records).
04Who processes information for us
We share personal information only with the service providers listed below, each bound by data protection terms:
- Supabase - hosting for our database and photo storage, with data kept in UK/EU regions.
- Resend - sending transactional email notifications such as submission acknowledgements and approval notices.
- Stripe - processing card payments for upgrades, under its own privacy policy.
Where a provider transfers information outside the UK, we rely on UK transfer protections such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
Listing photographs are held in private storage and shown through time-limited links, so images are not openly downloadable from our servers.
05How long we keep information
Approved listings and their business details remain published until you ask us to remove them or we remove them under our terms. A private contact email is kept while the listing exists so we can reach you about it, and is deleted when the listing is deleted. Payment and accounting records are kept for six years to meet UK tax rules. Approval and support emails may remain in provider mail logs for a short operational period.
06Your rights under UK GDPR
- Right of access - ask us for a copy of the personal information we hold about you or your business.
- Right to rectification - have listing details corrected or updated, either through the submission process or by contacting us.
- Right to erasure - ask us to remove a listing and the personal information attached to it, subject to records we must keep for legal reasons.
- Right to data portability - ask for the information you submitted in a structured, machine-readable format.
- Right to withdraw consent - stop the public display of a contact email you previously opted into, or object to processing based on legitimate interests.
To exercise any of these rights, email hello@ukc.uk. We aim to respond within one calendar month. We may need to confirm you are the person or business the request concerns before acting on it.
We do not make automated decisions about individuals and do not profile visitors.
07Security
The site is served over HTTPS. Access to listing records and private contact emails is restricted to administrator accounts through role-based permissions, and photographs are served from private storage rather than a public folder. No method of transmission or storage is completely secure, but we take reasonable technical and organisational steps to protect the information we hold.
08Complaints
If you are unhappy with how we handle your information, contact us first at hello@ukc.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
09Changes to this policy
We may update this policy as the directory develops. The current version is always the one published at this address, with the revision date shown at the top of the page.