Cromer Today Privacy Policy

Cromer Today Privacy Policy

Draft — complete every item in square brackets and verify the data practices before publishing.

Last updated: 7 October 2026

Who we are

Cromer Today is operated by Marcus Hickling. Marcus Hickling is the controller of personal information handled for this service.

Business address: [insert full business postal address]

Privacy contact: marcus@artyfax.com

Website: https://artyfax.com

This policy covers the Cromer Today website and mobile app.

Information we handle

When you submit a listing or contact us, we receive the information you provide, which may include your name, email address, telephone number, message, listing details and uploaded pictures.

Listings may also come from publicly available event organisers’ and businesses’ websites or other public sources. They may contain organisers’ names and business contact details.

[Confirm whether only administrators can sign in or whether public user accounts exist. Describe the account information and authentication provider used.]

[Confirm technical information collected by Floot and any app packaging, analytics or error-reporting services. Specify actual data, such as IP addresses, device/browser information, usage events and diagnostic logs, and the purposes for which it is collected.]

[Confirm whether the app accesses location, camera, photos, device identifiers or notifications. Describe the actual permissions and their uses, or state that they are not used where verified.]

Why we use information

We use listing and contact information to review submissions, publish and maintain local listings, respond to enquiries and deal with corrections or removal requests.

Our proposed lawful basis for these activities is legitimate interests: providing an accurate local information service and communicating with people who contact us. We balance those interests against individuals’ privacy rights.

[Confirm this lawful basis against the actual processing, including account administration, security and technical data. Identify any processing requiring consent and explain how consent can be withdrawn.]

Please provide only information appropriate for the listing or enquiry. Do not include sensitive personal information unless it is necessary and we have agreed how to handle it.

Publication and sharing

Approved listing content is publicly visible. Include only contact details and photographs that you intend to make public and have permission to supply. Private enquiry details are used to handle your enquiry.

[Identify the actual service providers handling personal information, including hosting, storage, authentication and email providers; describe what each receives and why. Confirm whether Google Sheets receives any personal information.]

[Confirm whether information is sold, used for advertising or shared for other purposes, and describe the actual practice.]

Information may be disclosed where required by law.

Storage, security and retention

[State the actual safeguards used, including secure transmission, access restrictions and administrator controls.]

[State how long submissions, messages, account data, technical logs and backups are retained, or give clear criteria for deciding when they are deleted. Explain any justified exceptions.]

[Confirm where providers process information. If information is transferred outside the UK, name the relevant destinations and safeguards, and explain how users can obtain information about those safeguards.]

Cookies and local storage

[Describe cookies and device storage actually used, their purposes and duration. Identify essential storage separately from optional analytics or advertising storage and explain available controls.]

Your choices and rights

Contact us using the privacy email above to request a listing correction, removal or deletion of personal information.

Depending on the circumstances, you may have rights to access or correct your information, request deletion, restrict its use, object to processing or obtain a portable copy. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. We may need to verify your identity before responding.

[If users can create accounts, insert the working in-app account deletion route and public web deletion-request URL. Explain what is deleted and any information retained with the reason and duration.]

You can also complain to the Information Commissioner’s Office: https://ico.org.uk/make-a-complaint/.

External websites and policy changes

Links to event organisers and other external websites lead to services with their own privacy policies.

We will update this policy when our practices change and revise the date above. Where required, we will notify users of significant changes.