Privacy Policy
Last updated: 11/06/2026
MarketplaceHub Yorkshire ("the Service") respects user privacy. This policy explains what data we collect, why, and your rights under GDPR / UK GDPR.
1. Data controller
The data controller is the MarketplaceHub Yorkshire team. Privacy contact: privacy@marketplacehub.yorkshire.
2. Account data
On sign-up we process: email address, name, hashed password, unique user ID and account creation date. Used for authentication, support and account management.
3. Business profile data
Users adding businesses provide: name, description, category, address, phone, contact e-mail, opening hours, logo and photos. This data is publicly visible in the directory.
4. Listings and reviews
Listings (title, description, price, location, photos) and business reviews (rating, comment) are public and linked to your account. You can edit or delete them at any time.
5. Google authentication (OAuth)
Google sign-in uses OAuth 2.0. We receive your email, name and avatar — solely to create and operate your account.
6. Data processor — Supabase
Data is stored and processed on Supabase infrastructure (PostgreSQL, Auth, Storage). Supabase acts as our data processor under GDPR.
7. Image storage
Listing, business and avatar images are stored in Supabase Storage. Files are publicly accessible via URLs and may be indexed by search engines.
8. Cookies
We use essential cookies (session, language preference) and — in future — analytics cookies. See our Cookie Policy.
9. Your rights (GDPR / UK GDPR)
- right of access,
- right to rectification,
- right to erasure ("right to be forgotten"),
- right to restrict processing,
- right to data portability,
- right to object,
- right to lodge a complaint with a supervisory authority (ICO in the UK / UODO in Poland).
10. Contact
Privacy requests: privacy@marketplacehub.yorkshire.