Privacy Notice
Privacy Policy
Last updated: 14 October 2026 • Data Controller: Babewyn Ltd
About these terms
These terms apply to your use of The Local Network, run by Babewyn Ltd, a company registered in England and Wales ("we", "us"). By creating an account you agree to them. Please read them alongside our Privacy Policy, which explains how we use your personal data.
Your account
- Give us a real email address that you can read, and keep it up to date.
- One account per person. Don't share your account or sign up for others.
- Keep your password to yourself. You are responsible for what happens on your account.
Confirming your email address
We send a code to confirm your address when you join. You can't use your account until you enter it, and signing in before then sends you a new code. If the address isn't confirmed within 5 days of joining, the sign-up is cancelled and deleted, and you are welcome to join again.
Age
You must be 13 or over to join. If you are under 18, please make sure a parent or guardian is happy for you to use The Local Network.
Some trails are for adults only. Following one asks you to confirm you are 18 or over — please answer honestly.
Using the network
Enjoy the trails, and please:
- Look after yourself and others: follow the law, the rules of each venue, and drink responsibly where alcohol is involved.
- Be respectful — no harassment, abuse or anything unlawful or offensive.
- Check in honestly. Don't fake your location, check in where you haven't been, or use automated tools against the service.
- Don't try to break, overload or get round the security of the service.
Check-ins, points and rewards
- Points, badges and rewards have no cash value and can't be exchanged or sold.
- A reward offered by a venue is that venue's offer, on its terms, while it lasts.
- We may change or end reward schemes, and correct points awarded in error or through misuse.
Venues and partners
Venues and partners are independent of us. We work to keep their details accurate, but opening times, offers and access can change — check before you travel. We aren't responsible for what happens at a venue.
Our maps and content
The maps, designs and text on The Local Network belong to us or our licensors. You may use them for your own personal, non-commercial enjoyment, but not copy, resell or republish them without our permission.
Changes and availability
We keep improving The Local Network, so features may change, and it may occasionally be unavailable. We may update these terms; if a change matters, we'll tell you by email or when you next sign in. The date at the top shows when they last changed.
Our responsibility to you
The Local Network is provided free of charge and "as is". We aren't responsible for losses that weren't foreseeable, or for business losses. Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or anything else the law doesn't allow us to limit, and nothing affects your legal rights as a consumer.
Closing your account
You can delete your account at any time from your account settings. We may suspend or close an account that breaks these terms, and will usually tell you why.
The law that applies
These terms are governed by the law of England and Wales. If you live in Scotland or Northern Ireland, you can also bring proceedings in your local courts.
Questions? Email info@thelocalnetwork.uk or use the contact form.$md$, 'First published terms.', '2026-09-28T00:00:00Z');
INSERT INTO legal_document_versions (kind, version, body, change_summary, published_at) VALUES ('privacy', 1, $md$This policy explains how Babewyn Ltd ("we", "us", "our") collects, uses, and protects your personal data when you use The Local Network (thelocalnetwork.uk). It applies to all users regardless of location, and meets the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
The data controller is Babewyn Ltd, a company registered in England and Wales. Our ICO registration reference is pending.
You can contact our data team at info@thelocalnetwork.uk, or by using the contact form and selecting "GDPR" as the enquiry type.
What data we collect
Account data (if you register)
- Email address
- Display name (chosen by you)
- Password (stored as a bcrypt hash, we never see the plaintext)
- Profile avatar (if uploaded)
- Date of registration and last login
Usage data
- check-ins, with how they were made (QR, NFC, tap-in, past visit)
- reward and campaign progress
- visit notes, with ratings and photos
- the public key of a device you register for signed check-ins
Technical data
- IP address (held only in memory while we rate limit requests; never stored or linked to your account)
- Browser user-agent string
Contact form submissions
- Name and email address
- Message content
Your device's location
We use your device’s location only when you ask us to, or when you have allowed it for check-ins. A check-in sends the position reading used to confirm you were at the venue, and we keep it with the check-in record. We do not track your location in the background on the website, and you can refuse the permission; see our Permissions page.
Data we do NOT collect
- Payment card details (we do not take payments)
- Sensitive personal data (health, religion, ethnicity, etc.)
How we use your data
To provide the service
Account creation, authentication, route planning, session and check-in tracking, rewards, and displaying your history and favourites.
To improve the service
Aggregate, anonymised usage patterns (e.g. which maps are most popular) inform what we build next. We do not profile individual users for marketing.
To communicate with you
Transactional emails only: email verification, password reset, and replies to contact form submissions. We do not send marketing emails.
For safety and security
Rate limiting, abuse detection, and fraud prevention.
Legal basis for processing
| Activity | Legal basis (UK GDPR Art. 6) |
|---|---|
| Creating and managing your account | Performance of contract (Art. 6(1)(b)) |
| Sending verification and reset emails | Performance of contract (Art. 6(1)(b)) |
| Storing your sessions, check-ins, notes and favourites | Performance of contract (Art. 6(1)(b)) |
| Security and fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Responding to contact form enquiries | Legitimate interests (Art. 6(1)(f)) |
| Processing GDPR data rights requests | Legal obligation (Art. 6(1)(c)) |
How long we keep data
| Data type | Retention period |
|---|---|
| Account data (active accounts) | Until you delete your account |
| Sign-ups whose email address is never confirmed | 5 days from sign-up, then deleted |
| Account data (inactive accounts) | 3 years from last login, then anonymised |
| Sessions and route history | Until you delete them, or account deletion |
| Visit notes | Until you delete them, or account deletion |
| Check-in and points history (after account deletion) | Kept indefinitely in anonymised form — no name, email or location trace |
| Records of our staff viewing your account data | Kept indefinitely, including after account deletion, for accountability |
| Account suspension and deletion records | Kept indefinitely, including after account deletion, for user safety, abuse prevention and legal claims |
| Contact form submissions | 2 years from submission |
| Server and application logs | Up to 14 days, then purged |
| Backups | 14 days; data you delete leaves our backups as they expire |
| Authentication tokens | Access: 30 minutes; Refresh: 30 days |
Your rights
Under the UK GDPR you have the following rights. To exercise any of them, use the contact form or email info@thelocalnetwork.uk. We will respond within 30 calendar days.
- Right of Access — request a copy of all personal data we hold about you.
- Right to Rectification — ask us to correct inaccurate or incomplete data.
- Right to Erasure — delete your data (the "right to be forgotten") yourself, from Account settings — no request needed. Your visit and points totals stay in venue statistics in anonymised form, with nothing linking them to you. A suspended account can't be deleted this way while it is under review — contact us instead.
- Right to Restriction — ask us to restrict processing while a dispute is resolved.
- Right to Portability — receive your data in a structured, machine-readable format.
- Right to Object — object to processing based on legitimate interests.
- Automated Decisions — we do not make automated decisions with legal effects. Not currently applicable.
- Withdraw Consent — where processing is consent-based, withdraw it at any time.
Security
- All data in transit is encrypted using TLS 1.2 or higher.
- Passwords are hashed with bcrypt (cost factor 12), we cannot recover plaintext passwords.
- Authentication uses short-lived JWTs (30 minutes) with rotating refresh tokens.
- Database access is restricted to application servers only; no public database endpoints are exposed.
- Our infrastructure is self-hosted in UK/EEA data centres.
Children
The Local Network is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with their personal data, please contact us immediately at info@thelocalnetwork.uk and we will delete it promptly.
Some trails on the service feature venues that serve alcohol. Where a trail does, users under 18 should not use it.
International transfers
We do not currently transfer personal data outside the UK or EEA. All servers and primary processors operate within the UK or EEA.
If this changes, for example, if we engage a processor based outside the UK/EEA, we will update this policy and ensure adequate safeguards are in place (such as UK Standard Contractual Clauses or an adequacy decision).
Changes to this policy
We may update this policy from time to time. When we make material changes we will update the "Last updated" date at the top of the page and, where appropriate, notify registered users by email.
Continued use of the service after a policy update constitutes acceptance of the revised policy. We recommend reviewing this page periodically.
Contact & complaints
For any privacy-related query or to exercise your data rights, contact us at Babewyn Ltd — email info@thelocalnetwork.uk, or use the contact form and select "GDPR" as the enquiry type.
Right to complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF