1. Data Controller
Prime Directive AI Ltd ("we", "us", "our") is the data controller for personal data collected through The Guinndex UK website (guinndex.co.uk). Contact: privacy@guinndex.co.uk.
Registered in England and Wales. Company number available on request. The supervisory authority for data protection complaints is the UK Information Commissioner's Office (ico.org.uk).
2. Data We Collect
From users:
- Price submissions: Pub name, location, price, drink brand, contributor name, and optional Instagram handle.
- Tap reports: What's on tap at a pub, including brand names and prices.
- Photos: Images uploaded through the Contribute feature.
- Corrections: Pub name, correction message, and optional email address.
- Email signups: Email address for newsletter subscription.
- Technical data: Device type, browser, IP address, approximate location (from Vercel headers), and usage analytics via Google Analytics (GA4).
From public data sources:
- Google Places API: Pub names, addresses, ratings, reviews, phone numbers, opening hours, photos. This is publicly available data from Google.
- Food Standards Agency (FSA): Food hygiene ratings for UK premises. Published under Open Government Licence.
- Office for National Statistics (ONS): Historical alcohol prices. Published under Open Government Licence.
3. How We Use Your Data
- To display and verify pint price data on The Guinndex UK.
- To maintain and display tap lists (what's on draft at each pub).
- To review and publish user-submitted photos (only with your explicit consent).
- To process corrections and update pub listings.
- To send newsletter updates (only with your consent).
- To prevent fraudulent or duplicate submissions.
- To understand how the site is used and improve the service.
- To generate aggregate statistics (e.g. average pint price by region). No personal data is included in aggregate statistics.
4. Legal Basis (UK GDPR)
We process your data based on:
- Consent (Article 6(1)(a)): For photo sharing, email newsletter, and optional marketing communications.
- Legitimate interest (Article 6(1)(f)): For fraud prevention, service improvement, and maintaining accurate pub data. Our legitimate interest is providing a useful public price index.
- Public task (Article 6(1)(e)): For displaying publicly available data (Google ratings, FSA hygiene ratings, ONS statistics).
5. Third-Party Data and Attribution
- Google: Pub ratings and review counts are sourced from Google. "Ratings from Google" attribution is displayed.
- Food Standards Agency: Hygiene ratings are Crown copyright, published under the Open Government Licence v3.0. We link to the official FSA record for each rated pub.
- ONS: Historical alcohol price data is Crown copyright, published under the Open Government Licence v3.0.
6. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers who help us operate the site (Vercel for hosting, Supabase for data storage, Resend for email, ElevenLabs for AI voice services, Anthropic for AI processing).
- Law enforcement or regulatory bodies when required by law.
Aggregate, non-personal pricing data may be shared with industry bodies and commercial partners. This never includes personal information about individual contributors.
7. Data Retention
- Price submissions and tap reports are retained indefinitely as part of the public index.
- Photos are retained until consent is withdrawn.
- Email addresses are retained until you unsubscribe.
- Technical/analytics data is retained for 14 months (Google Analytics default).
- Real-time visitor session data is deleted after 2 minutes of inactivity.
8. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to processing.
- Withdraw consent at any time.
- Data portability.
- Lodge a complaint with the Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, email privacy@guinndex.co.uk.
9. International Transfers
Your data is stored on servers in the EU (Supabase, EU West) and may be processed by service providers in the United States (Vercel, Google Analytics, Anthropic). Where data is transferred outside the UK, we rely on Standard Contractual Clauses or equivalent safeguards as required by UK GDPR.
10. Age Restriction
The Guinndex UK contains references to alcoholic beverages. By using this site and submitting content, you confirm you are aged 18 or over. We do not knowingly collect data from anyone under 18.
11. Cookies and Analytics
We use Google Analytics (GA4) to understand how the site is used. This involves cookies and similar technologies. No personally identifiable information is shared with Google. We also use a lightweight session tracker for real-time visitor counts (no personal data stored beyond session ID and approximate location).
You can opt out of analytics tracking using the cookie banner or by disabling cookies in your browser settings.
12. Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page with the updated date.