Privacy & data policy

What we collect

• Account data (admins and service providers): email, hashed password, sign-in events.
• Listing data: name, contact email, phone, biography, photos, and links you choose to publish.
• Submissions: reviews, enquiries, partner applications, track submissions — including the name and email you provide.
• Technical data: IP address (hashed for download tracking), user-agent, session tokens, and brief audit logs of sign-in / password events (purged after 48 hours).
• Payments: handled by Stripe. We never see or store full card details.

Lawful bases

• Contract — running paid listings and subscriptions.
• Legitimate interest — replying to enquiries, fighting abuse, basic analytics.
• Consent — advertising cookies (Google AdSense). Decline at any time via the cookie banner or by clearing site data.
• Legal obligation — keeping Stripe-related records for accounting purposes.

Where data is stored

All personal data is stored in our managed Postgres database (EU region), encrypted at rest and in transit. Outbound email is sent via our managed mail infrastructure (notify.pulselistings.co.uk). Payments are processed by Stripe (UK/Ireland). We do not transfer personal data outside the UK / EEA except where Stripe does so under their own Standard Contractual Clauses.

How long we keep it

• Login / audit events: 48 hours.
• Public enquiries: up to 12 months, then deleted automatically.
• Rejected reviews, tracks, and partner applications: 6–12 months, then deleted automatically.
• Listings and subscriptions: for the lifetime of the account. Delete on request.
• Payment records: 6 years (UK accounting law).

Your rights

Under UK GDPR you can ask us to (a) confirm what we hold about you, (b) correct it, (c) delete it, (d) restrict or object to processing, or (e) export it. The fastest way is to use our self-service form:

→ Submit a data request

Or email admin@pulselistings.co.uk. We respond within 30 days. You can also complain to the UK ICO at ico.org.uk.

Cookies & tracking

We use a small number of strictly-necessary cookies (sign-in session, security) — these are always on because the site cannot function without them. Google AdSense (which serves display ads on a small number of low-intent pages) is blocked by default and only loads after you explicitly accept in the cookie banner. No AdSense script, no advertising cookies, and no requests to Google's ad servers are made until then. If you reject or revoke, the AdSense loader is never injected and any ad slots render nothing.

Once enabled, Google may set advertising cookies to measure ad performance and personalise ads; you can additionally opt out at adssettings.google.com.

Contact

Pulse Listings · admin@pulselistings.co.uk