This policy explains what personal data WhizBang Local collects, how it is used, and what choices you have. For privacy questions and requests, contact beta@whizbanglocal.co.uk.
What we collect
When you add a fireworks display, we store its date, time, duration, display type, location, selected details and, for public events, the name and any website you provide. We store a hash of the secret edit token so you can update or delete the display without an account.
For private or approximate displays, the saved location is displaced from the submitted location and only the outward part of the postcode is retained. The full postcode is sent to Postcodes.io for lookup. A temporary location preview may be held in your session while you complete the form. Exact locations are stored and published only when you choose to make a public venue's exact location public.
For staff accounts, we store names, email addresses, permissions, account status and assigned coverage areas. Sign-in uses emailed magic links rather than passwords. Names of coverage areas and coverage ratings are public; staff email addresses are not published.
If you confirm fireworks email alerts, we store your email address, search area label, rounded search centre, radius, reminder preference and delivery history. We use these details to send the alerts you request. Stop notifications using the link in any alert email to delete the subscription. Unconfirmed requests expire after 24 hours and are removed by the scheduled sender. Email providers process your address and alert contents to deliver these messages.
If you use your device location, your browser asks permission first. The coordinates are rounded and kept in your session for up to 30 minutes to run your search. They are not included in the search URL. We also process search terms, session information, security tokens and routine technical logs needed to run and secure the service.
How we use it
We use this information to publish and search displays, let holders of secret links manage their displays, manage local coverage, authenticate staff, prevent abuse, diagnose faults and respond to support or legal requests.
Lawful basis
We process information needed to provide the service you request. Where applicable, we rely on legitimate interests in operating a community display directory, keeping information accurate, protecting the service and preventing abuse. We process information where required to meet legal obligations. Device location is requested only after you choose to use it and grant browser permission.
How long we keep it
Display records remain stored until deleted; passing the event date does not automatically delete a record. Anyone holding the secret edit link can permanently delete the display. Staff account records and coverage assignments are kept while needed to manage the service. Session previews and search locations are temporary. Technical logs and backups may retain information after removal from the live site according to the hosting provider's retention settings. Contact us for details or to request erasure.
Sharing and providers
Display details and coverage information are public. Do not include information you do not want published in event names or website links. Private displays appear as an approximate area, not an exact address.
Postcodes.io receives postcodes and town names for location lookups. OpenStreetMap receives your IP address and technical request information when your browser loads map tiles; tile requests also identify the area shown on the map. Cloudflare Turnstile processes technical browser information for verification. Hosting and email providers process information needed to operate the site and deliver sign-in links.
These providers may process information outside the UK. Their privacy information describes their processing and safeguards: Postcodes.io, OpenStreetMap Foundation and Cloudflare. We may also disclose information where required by law or necessary to address abuse.
Your rights
Depending on the circumstances, you may have rights to access, correct or erase personal data, restrict processing, object to processing based on legitimate interests, and receive portable data. Contact beta@whizbanglocal.co.uk to make a request. You may complain to the Information Commissioner's Office.
Cookies and similar technologies
We use essential session and security storage to protect forms, manage temporary location previews and keep staff signed in. Read the Cookie Policy for more information.
Changes and contact
We will update this page when our processing changes. For questions or rights requests, contact beta@whizbanglocal.co.uk.