Privacy Policy
This policy explains how LittleSpots collects, uses, and protects your personal information when you use our website at littlespots.co.uk.
Who we are
LittleSpots is operated by Adam Bell, trading as LittleSpots. If you have any questions about this policy or wish to exercise your data rights, please contact us at hello@littlespots.co.uk.
What data we collect and why
Account information
When you create an account we collect your email address, display name, and optionally a profile photo. This is used to identify you across the service and is required to submit reviews or claim a venue. We use Firebase Authentication (operated by Google) to manage sign-in securely.
Reviews
When you submit a review we store your star rating, optional written comment, facility responses, and your account identifier. Your display name is shown publicly alongside your review. We use this information to help families make informed decisions about venues.
Venue claims and corrections
If you submit a venue claim you provide your name, email address, and role. If you submit a venue correction or moderation report you may optionally provide an email address so we can follow up. This information is used only to process your request and is not shared publicly.
Location data
If you choose to use the “Use my location” feature, your browser will ask for permission before sharing your coordinates. We use this only to sort nearby venues in your current session. We do not store your location on our servers.
Cookies and local storage
We use a session cookie to keep you signed in. We also store your saved venues in your browser's local storage so your list persists between visits. Neither of these requires your consent as they are essential to the service. We only set analytics cookies if you choose to accept them. See our Cookie Policy for details.
Legal basis for processing
We process account, review, and operational data on the basis of legitimate interests — providing a useful, trustworthy venue guide for families. We process analytics data only on the basis of your consent, which you can withdraw at any time by clearing your cookie preferences.
Third parties we share data with
- Google / Firebase— authentication and review photo storage. Google's privacy policy applies.
- LittleSpots database hosting and backups — account-linked reviews, claims, corrections, and operational records are stored in our application database and encrypted backup storage.
- Resend — transactional email delivery (e.g. venue owner outreach). Only venue contact emails are shared, not general user data.
- Google Analytics — website usage analytics, only if you have accepted analytics cookies. Data is anonymised and used to understand how the site is used in aggregate.
- Postcodes.io — UK postcode lookup. No personal data is sent, only postcode strings.
We do not sell your personal data to any third party.
How long we keep your data
We retain your account information and reviews for as long as your account is active. Venue claims and corrections are retained for operational and audit purposes. If you delete your account, your personal information is removed within 30 days, though your reviews may remain in an anonymised form.
Your rights
Under UK GDPR you have the right to access, correct, or request deletion of your personal data, to restrict or object to processing, and to data portability. To exercise any of these rights, email us at hello@littlespots.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. Material changes will be noted on the site. Continued use of LittleSpots after changes are posted constitutes acceptance of the updated policy.
Last updated: June 2026