Privacy policy

Last updated: 27 May 2026

Who we are

LocalWins is operated by Paul Airey (sole trader, UK). Contact: hello@localwins.co.uk. For the purposes of UK GDPR and the Data Protection Act 2018, LocalWins is the data controller for personal data you give us directly.

What we collect and why

If you visit the website:

Pageviews + button clicks, only after you accept the analytics cookie. We use PostHog (hosted in the EU). No advertising IDs, no cross-site tracking.
If you decline, no analytics events are sent.

If you request a LocalWins Score:

Your business name, postcode, business type, optionally website + phone, to build the report.
Your email, to send you the full report.
We may test-call your published business number once to measure its response time. Calls are zero-content (silent pause, hangup) and are NEVER recorded.

If you sign up as a paying customer:

Business email, published phone, owner mobile, business name, website: required for the service to work.
Payment is processed by Stripe; LocalWins never sees your card number.
Every call + SMS that lands on your LocalWins line is logged so it appears in your dashboard inbox. The owner mobile is never published to your customers: only your LocalWins number is shown.
Private feedback submitted via your QR code is retained until you mark it resolved + 30 days for compliance, then deleted.

Legal basis

Performance of a contract: for everything required to deliver the service you bought.
Legitimate interests: for limited analytics on aggregated funnel performance (gated on your consent).
Consent: for analytics cookies (revocable at any time by clearing localStorage or asking us).

Who we share data with

Twilio: to send/receive SMS and route calls.
Stripe: to process payments.
Resend: to send transactional email (welcome, feedback notifications).
Supabase: primary database, hosted in the EU.
Vercel: application hosting.
PostHog (EU): product analytics, only if you accepted the cookie.
Google Places API: to look up your Google Business Profile at signup. We pass only your business name + town.

We never sell your data. We never share it with advertisers.

Your rights

Access, correct, or delete any data we hold on you. Email hello@localwins.co.uk and we'll action within 30 days.
Withdraw analytics consent at any time. Clear cookies for localwins.co.uk and the banner reappears.
Complain to the ICO (ico.org.uk) if we've mishandled your data.

Cookies

We use exactly two cookies:

lw_consent: your consent choice (essential, set without prompt).
PostHog session cookies: only set if you accept. Used to stitch pageviews into a session.

That's it. No third-party advertising or social-media cookies.

Retention

Account data: until you delete your account, plus 30 days for compliance.
Call + SMS logs: 12 months, then automatically purged.
Analytics events: 12 months in PostHog, then purged.

Updates

If we materially change this policy we'll email active customers and update the "Last updated" date above.

Questions? hello@localwins.co.uk.