Privacy policy

This page explains what personal data PubDesking collects, why, and what your rights are. See our Terms and conditions for the rules of using the site.

Who is responsible

PubDesking is a trading name of BAM Engineering Ltd (company number 14078681), registered office 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, which is the data controller. Contact: [email protected].

Why we process your data (lawful basis)

To provide your account and bookings (contract); to keep the site secure, prevent abuse and rate-limit requests (legitimate interests); to send account emails such as verification, magic links, password resets and booking notices (contract). We send no marketing.

What we keep, and for how long

Account name, email and password hash while the account exists; bookings and claims while the account exists; sign-in sessions 24 hours, or 30 days if you tick "Remember me" or sign in by magic link; magic links 15 minutes, verification links 24 hours and reset links 1 hour, all stored as hashes; contact-form messages are emailed to us and not stored. To close your account and delete your data, email [email protected]; we do this within 30 days.

Business details we gather

To describe pubs that have not been claimed, our crawler collects business contact details that pubs publish themselves, such as a website, a phone number, an email address and social media links, from their own pages and from OpenStreetMap. These are details of a business, not of a customer. A landlord can ask us to correct or remove them by emailing [email protected].

Who receives your data

The pub's landlord gets your name and email when you book; Amazon Web Services hosts the database and sends our email; OpenStreetMap receives your IP address and our site address when a map is shown. Nothing else is sent to third parties, and there is no analytics.

Cookies

Only strictly necessary cookies, named from the code (pubdesking.session_token, pubdesking.dont_remember and the UI session cookie), so there is no consent banner. In production these two cookie names carry a __Secure- prefix. "Use my location" sends your coordinates to our server for that search only and they are not stored.

Your rights

Access, rectification, erasure, restriction, portability and objection, by emailing [email protected]; you can complain to the Information Commissioner's Office at ico.org.uk.