Privacy policy

Prick Advisor (prickadvisor.co.uk) is the data controller for the personal data described in this policy. Questions about your data can be sent to contact@prickadvisor.co.uk.

Account data. If you create an account to submit posts, we collect:

• Your email address

• A password (stored securely, never in plain text)

Submission content. When you submit a post, we collect:

• The text of your submission

• The category and any tags you select

• The business you're posting from, if you've provided one for verification purposes

We do not require or knowingly collect the identity of the customer described in your post — in fact, our Terms prohibit including their name, precise address, or contact details.

Technical data.

• IP addresses, collected automatically when you use the Site, primarily for security, abuse prevention, and moderation purposes (for example, to help detect spam or coordinated fake reporting).

• Basic, cookieless analytics about how the Site is used (pages visited, general traffic patterns). We use a cookieless analytics provider, which means this data is not tied to you as an individual and doesn't require a cookie consent banner.

Reports. If you report a post, we collect the report itself and, if you're logged in, an association between your account and the report — this is needed so we can prevent the same person filing repeated reports against a single post to trigger automatic removal.

We use this data to:

• Let you create and manage an account

• Publish and display the posts you submit

• Moderate content — reviewing submissions, investigating reports, and enforcing our Terms

• Detect and prevent spam, abuse, or attempts to game the reporting system

• Understand overall usage of the Site so we can improve it

• Respond to complaints or takedown requests, including under the process described in our Terms

We do not sell your data, and we do not use it for targeted advertising.

• Data is stored with Supabase, using EU (Ireland) region infrastructure.

• Account and submission data is kept for as long as your account is active and your posts remain published.

• If a post is removed (whether by us, or at your request), we retain a record of the removal and the reason internally for legal and moderation record-keeping, even though the post itself is no longer publicly visible.

• If you delete your account, we will remove your personal account data, though previously published posts may be retained in anonymised form (i.e. no longer linked to your account) unless you specifically request their removal too.

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you

• Ask us to correct inaccurate data

• Ask us to delete your data, or a post you submitted

• Object to certain uses of your data

To exercise any of these rights, email contact@prickadvisor.co.uk. At this stage we handle these requests manually and will respond within a reasonable timeframe.

Even though our Terms prohibit posters from naming customers or including identifying details, we recognise that some descriptions could still make a person identifiable in context, which may mean that content counts as personal data under UK GDPR even without a name attached.

If you believe a post identifies you and you'd like it reviewed or removed, you can raise this the same way as any other complaint — see Section 7 of our Terms, or email contact@prickadvisor.co.uk directly. We take these requests seriously and will assess them promptly, since this is one of the main protections we rely on alongside our submission rules and moderation process.

We use a cookieless analytics provider to understand overall Site traffic. This does not use tracking cookies and does not build a profile of you as an individual, so no cookie consent banner is shown. If this ever changes — for example, if we introduce a different analytics tool that does use cookies — we'll update this policy and add the appropriate consent mechanism at that time.

We don't use advertising cookies or third-party ad tracking.

We don't sell or rent your data. We may share data with:

• Service providers who help us run the Site (for example, our hosting and database provider, Supabase), under their own data protection obligations

• Legal or regulatory authorities, if required by law

• A future business verification provider (Companies House API), where you've chosen to verify your business — this involves checking your business details against Companies House's public register, not sharing your personal data with them

We may update this policy from time to time, for example to reflect changes in the law or how the Site works. If we make material changes, we'll update the "last updated" date above.

Questions about this policy, or requests relating to your data, can be sent to contact@prickadvisor.co.uk.