Privacy Policy

At PubDesking, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using PubDesking, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

1. Information We Collect

Personal Information

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, password
• Profile Information: User role (Customer or Landlord), preferences
• Pub Listings: Pub details, address, contact information, amenities
• Booking Information: Booking dates, times, package selections, payment details
• Communication Data: Messages sent through our platform, support enquiries

Automatically Collected Information

When you use PubDesking, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Location Data: Approximate location based on IP address or precise location if you grant permission
• Cookies: Session cookies to maintain your login state

Third-Party Authentication

If you sign in using Microsoft OAuth, we receive your name, email address, and profile information from Microsoft in accordance with your Microsoft account settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process bookings and payments
• Send booking confirmations, reminders, and updates
• Respond to your enquiries and provide customer support
• Display pub locations and search results based on your location
• Detect, prevent, and address technical issues or fraudulent activity
• Analyse usage patterns to improve user experience
• Send marketing communications (with your consent)
• Comply with legal obligations

3. How We Share Your Information

With Pub Landlords

When you make a booking, we share your name, contact details, and booking information with the pub landlord to facilitate your reservation.

With Customers

Pub landlords' contact information and pub details are made visible to customers browsing the directory.

Service Providers

We share information with third-party service providers who help us operate our platform:

• Database Hosting: MySQL (for data storage)
• Session Management: Redis (for maintaining login sessions)
• Email Services: SMTP providers (for sending notifications)
• Payment Processing: Payment providers (for processing transactions)

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., a court order or government agency).

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Security

We implement appropriate technical and organisational measures to protect your personal information:

• Encryption: Passwords are hashed using bcrypt
• Secure Sessions: Redis-based session management with secure cookies
• HTTPS: All data transmitted over secure connections in production
• Access Controls: Role-based access to limit who can view sensitive data
• Regular Updates: Security patches applied to all dependencies

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

6. Your Rights (GDPR)

If you are located in the UK or European Economic Area, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or direct marketing
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us at [email protected]. We will respond within 30 days.

7. Cookies

We use cookies to maintain your login session and improve your experience on our platform.

• Session Cookies: Essential for authentication and maintaining your logged-in state
• Functional Cookies: Remember your preferences (e.g., map view vs grid view)

You can disable cookies in your browser settings, but this may limit your ability to use certain features of PubDesking (such as staying logged in).

8. Third-Party Links

Our platform may contain links to third-party websites (such as pub websites or social media). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

PubDesking is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the new policy on this page
• Updating the "Last updated" date at the top of this page
• Sending an email notification (for material changes)

Your continued use of PubDesking after changes become effective constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: