Privacy Policy
Last updated: 24 February 2026
Who we are
Pinloco Ltd is a UK-registered company operating pinloco.com, a hyperlocal business discovery platform. We help people find independent local businesses across Manchester, Salford, and Trafford.
What data we collect
When you browse the site
If you accept cookies, we store your selected town in your browser (localStorage) so you don't have to choose it every visit. This is the only preference we store. If you decline cookies, we don't store anything and the site still works — you'll just need to select your town each time.
When you create an account
We collect your email address for authentication. We use magic link sign-in (a login link sent to your email) — we don't store passwords. Your email is stored securely by our database provider, Supabase.
When you use PlanLoco (saved plans)
If you save businesses to a PlanLoco plan, we store the plan name, the businesses you added, and any notes you write. Plans you choose to share generate a public link — anyone with that link can view it.
When you claim a business
Business owners who claim a listing provide their email, business details, phone number, website, and opening hours. This information is displayed publicly on the business listing page.
When you subscribe (business owners)
Paid subscriptions are processed by Stripe. We do not see or store your full card details — Stripe handles all payment data directly. We receive confirmation of your subscription status (active, cancelled, etc.) from Stripe via webhooks.
Cookies and local storage
We use browser localStorage (not traditional cookies) for the following:
| Name | Purpose | Consent required |
|---|---|---|
| pinloco_cookie_consent | Remembers your cookie choice | No (strictly necessary) |
| pinloco_user_city | Your selected town | Yes |
| pinloco_analytics_session | Anonymous session ID for page view counts | Yes |
| Supabase auth tokens | Keeps you logged in | No (strictly necessary for login) |
We do not use any third-party advertising cookies. We do not sell, share, or trade your data with advertisers.
Analytics
If you accept cookies, we use Vercel Analytics (first-party, privacy-focused) to understand how people use the site — page views, not personal profiles. We also count page views on individual business listings to show business owners how many people visited their page. No analytics run if you decline cookies.
Third-party services
- Supabase — database and authentication (EU-hosted)
- Vercel — website hosting and analytics
- Stripe — payment processing for business subscriptions
Each of these services has their own privacy policy. We only share the minimum data needed for each service to function.
Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data
- Withdraw consent — change your cookie preferences at any time via the “Cookie preferences” link in the footer
- Portability — request your data in a portable format
- Complain — lodge a complaint with the ICO (ico.org.uk) if you're not happy with how we handle your data
Data retention
Account data is kept for as long as your account exists. If you delete your account, we remove your personal data within 30 days. Anonymous analytics data (page view counts) is retained indefinitely as it cannot be linked back to you.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top will change when we do. We won't reduce your rights without clear notice.
Contact
If you have questions about this policy or want to exercise your rights, email us at [email protected].