privacy.title

privacy.effective_date privacy.date_value
privacy.last_updated privacy.date_value

1. Introduction

This Privacy & Cookie Policy explains how Intellectua ("we," "our," or "us") collects, uses, and protects your personal information when you use ExpatriaHub, our business directory platform. We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

Account Information:

• Email address and password
• Full name
• Profile information and preferences
• Nationality and location preferences

Business Information:

• Business name, description, and category
• Business address and contact details
• Business hours and services offered
• Logo images and business photos
• Social media links and website URLs

Reviews and User Content:

• Reviews and ratings you submit
• Comments and feedback
• Communication with our support team

Payment Information:

• Billing information for subscription services
• Payment processing data (handled securely by Stripe)
• Subscription history and preferences

2.2 Information We Collect Automatically

Technical Information:

• IP address and general location data
• Browser type and version
• Device information and screen resolution
• Operating system
• Referring website and page views

Usage Information:

• Pages visited and time spent on our platform
• Search queries and filters used
• Features accessed and user interactions
• Login frequency and session duration

Location Information:

• Approximate location based on IP address
• Location data when you use our map features
• Business location data you provide

3. How We Use Your Information

3.1 Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: To provide our platform services and fulfill our Terms of Service
• Legitimate Interests: To improve our platform, ensure security, and conduct business operations
• Consent: For marketing communications and analytics (where required)
• Legal Obligations: To comply with applicable laws and regulations

3.2 Purposes of Processing

We use your information to:

• Provide and maintain our platform services
• Create and manage user accounts
• Process subscription payments and billing
• Enable business listings and search functionality
• Facilitate reviews and ratings
• Provide customer support and respond to inquiries
• Improve our platform features and user experience
• Ensure platform security and prevent fraud
• Comply with legal obligations and resolve disputes
• Send important service notifications and updates

4. Cookie Policy

4.1 What Are Cookies

Cookies are small text files stored on your device when you visit our platform. They help us provide a better user experience by remembering your preferences and enabling platform functionality.

4.2 Types of Cookies We Use

Essential Cookies (No Consent Required)

These cookies are necessary for our platform to function properly:

• Authentication Cookies: Keep you logged in and manage your session securely
• Security Cookies: Protect against fraud and maintain platform security
• Session Management: Remember your login state and maintain security

Functional Cookies (No Consent Required)

These cookies enhance your user experience by remembering your preferences:

• Currency Preferences: Remember your preferred currency for pricing
• Layout Preferences: Remember your preferred view (grid or list layout)
• Location Preferences: Remember your location settings for search
• Authentication Redirects: Temporary cookies to redirect you after login (5-minute expiry)

Analytics Cookies (Future Implementation - Consent Required)

When implemented, these cookies will help us understand how our platform is used:

• Google Analytics: Track page views, user behavior, and platform performance
• Google Tag Manager: Manage and deploy analytics and marketing tools

Note: Analytics cookies are not currently active. When we implement them, we will request your explicit consent and provide options to manage your preferences.

4.3 Third-Party Cookies

Our platform integrates with third-party services that may set their own cookies:

Google Maps:

• Enables map functionality and location services
• Stores map preferences and location data
• Governed by Google's Privacy Policy

Stripe Payment Processing:

• Securely processes subscription payments
• Fraud prevention and security cookies
• Governed by Stripe's Privacy Policy

Mapbox Services:

• Alternative mapping services and location features
• Map rendering and location preferences
• Governed by Mapbox's Privacy Policy

4.4 Managing Cookies

Browser Controls: You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality.

Future Cookie Preferences: When we implement analytics cookies, we will provide a cookie preference center where you can manage your consent choices.

5. Data Sharing and Third-Party Services

5.1 Third-Party Service Providers

We share necessary information with trusted service providers:

Stripe (Payment Processing):

• Processes subscription payments securely
• Handles billing information and payment history
• Enables multi-currency payment processing

Supabase (Database and Authentication):

• Stores user accounts and business data
• Manages user authentication and security
• Provides real-time database functionality

Vercel Blob (File Storage):

• Stores business logos and images
• Provides secure file upload and storage
• Enables image optimization and delivery

Resend (Email Services):

• Sends account verification and notification emails
• Delivers subscription and business-related communications
• Manages email delivery and bounce handling

Google Maps / Mapbox (Location Services):

• Provides mapping and location search functionality
• Enables business location display and discovery
• Processes location data for search results

5.2 Data Sharing Principles

We only share personal information when:

• Necessary to provide our platform services
• Required by law or legal process
• Needed to protect our rights or the safety of our users
• Part of a business transfer or merger (with user notification)

We do not sell personal information to third parties.

6. Data Retention and Deletion

6.1 Account Data Retention

We retain your personal information for as long as:

• Your account is active
• Necessary to provide our services
• Required by legal obligations
• Needed to resolve disputes or enforce agreements

6.2 Account Deletion Policy

Immediate Deletion Right: We reserve the right to delete user accounts immediately upon request.It is your responsibility to back up any data you wish to retain before requesting account deletion.

30-Day Recovery Period: We may retain deleted account data for up to 30 days to enable potential account recovery. However, we are not liable if data is not available for recoverydue to technical limitations, platform features, or system processes.

Permanent Deletion: After the 30-day period, account data is permanently deleted from our systems, except for information we are legally required to retain.

6.3 Business Listing Data

Business listings may remain on the platform after account deletion if they serve a public interest (directory functionality). However, personal identifiers linking the listing to your account will be removed.

7. International Data Transfers

7.1 Multi-Currency Platform

As a multi-currency platform serving users globally, your data may be transferred to and processed in countries outside the UK and European Economic Area (EEA), including:

• United States (for Stripe payment processing and cloud services)
• Other countries where our service providers operate

7.2 Transfer Safeguards

When transferring data internationally, we ensure appropriate safeguards through:

• Standard Contractual Clauses (SCCs) with service providers
• Adequacy decisions by relevant data protection authorities
• Service provider compliance with appropriate frameworks

8. Your Rights Under UK GDPR

8.1 Individual Rights

You have the following rights regarding your personal information:

Right of Access: Request a copy of the personal information we hold about you.

Right to Rectification: Request correction of inaccurate or incomplete personal information.

Right to Erasure: Request deletion of your personal information in certain circumstances.

Right to Restrict Processing: Request limitation of how we process your personal information.

Right to Data Portability: Request transfer of your personal information in a machine-readable format.

Right to Object: Object to processing based on legitimate interests or for marketing purposes.

Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis.

8.2 Exercising Your Rights

To exercise any of these rights, contact us atcontact@intellectua.co.uk. We will respond to your request within one month, or notify you if we need additional time.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal information appropriately.

9. Data Security

9.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Secure hosting with reputable cloud providers
• Limited access to personal information on a need-to-know basis

9.2 Data Breach Response

In the event of a data breach that poses a risk to your rights and freedoms, we will notify relevant authorities and affected users as required by law.

10. Children's Privacy

Our platform is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

11. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify users of material changes via email or platform notices.

When we implement new analytics or tracking features, we will update this policy and, where required, request your consent for new cookie categories.

12. Contact Information

12.1 Data Protection Queries

For questions about this Privacy Policy, your personal information, or to exercise your rights:

Email:

contact@intellectua.co.uk

Subject Line:

"Data Protection Query" or "Privacy Rights Request"

Business Name:

Intellectua

Address:

8 Firbank Road, Manchester, M23 2GB, United Kingdom

12.2 Regulatory Authority

If you have concerns about how we handle your personal information, you can contact:

Information Commissioner's Office (ICO)

Website:

ico.org.uk

Phone:

0303 123 1113

privacy.document_version privacy.version_value
privacy.effective_date privacy.date_value
privacy.next_review_date privacy.next_review_date_value