1. Who we are
PORTAL Local Partner ("PORTAL LP", "we", "us") operates a global local-business discovery platform headquartered in London, United Kingdom. For the personal data described in this notice, PORTAL Local Partner acts as the data controller.
2. Categories of personal data we collect
- Account data: name, email, password hash, language, country.
- Business profile data: business name, address, phone, website, category, opening hours, photos, descriptions and offers (when you register a business).
- Location data: approximate or precise geolocation when you grant browser permission, used to show nearby results and calculate distances.
- Usage and telemetry: pages visited, searches performed, favourites, clicks on phone/website/map, interaction with the Tatu assistant, device and browser type, language, IP address.
- Support communications: messages, screenshots, and metadata you send to our support team.
- Marketing preferences: topics of interest, notification choices, unsubscribe state.
- Licensee/Investor applications: name, email, phone, target territory, experience details when you apply.
Payment card data is collected and processed by our Merchant of Record, Paddle, and is not stored on our servers.
3. Purposes and legal bases
- Providing the Service (creating accounts, showing results, saving favourites, handling subscriptions) — performance of a contract.
- Security, fraud prevention and abuse detection — legitimate interests and legal obligation.
- Customer support — performance of a contract and legitimate interests.
- Service improvement and analytics — legitimate interests, balanced against your privacy.
- Marketing communications and personalised feed — consent, withdrawable at any time.
- Legal compliance (tax, accounting, lawful requests) — legal obligation.
4. How we share data
We share personal data only with the following categories of recipients:
- Service providers / sub-processors — hosting, database and authentication infrastructure, email delivery, analytics, AI providers powering the Tatu assistant.
- Merchant of Record — Paddle.com Market Limited — for the sale of subscriptions and advertising packages, payment processing, subscription management, tax compliance, invoicing, refunds and customer billing support. See Paddle's Privacy Notice.
- Local licensees and partner administrators — limited access to business data within their assigned territory only, under contractual confidentiality obligations.
- Professional advisers — lawyers, auditors, accountants, when necessary.
- Authorities — where disclosure is required by law or to protect rights, safety, or property.
We do not sell personal data.
5. International data transfers
We are based in the United Kingdom and use service providers located in the United Kingdom, the European Economic Area, and the United States. When personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or adequacy decisions issued by the UK or European Commission.
6. Data retention
We keep personal data only as long as necessary for the purposes set out above. Indicative retention periods:
- Account and business profile data — for the lifetime of the account, then deleted or anonymised within 12 months of closure.
- Billing and tax records (held by Paddle on our behalf) — retained for the period required by applicable tax law, typically 7 years.
- Support correspondence — up to 36 months.
- Analytics and telemetry — aggregated/anonymised within 24 months.
- Suppressed-email and unsubscribe records — kept indefinitely to honour your opt-out.
7. Your rights
Depending on your country of residence, you may have the right to: access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; withdraw consent at any time; and lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office — ico.org.uk). We aim to respond to verified requests within one month.
To exercise your rights, write to contact@portallp.com.
8. Security
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), encryption at rest, role-based access controls, row-level security on our database, audit logs, and least-privilege service credentials. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
9. Cookies and similar technologies
We use a limited set of cookies and local-storage entries:
- Essential — authentication session, language and theme preferences. Cannot be disabled.
- Functional — remembering favourites, last location, onboarding state.
- Analytics — anonymous usage statistics to improve the Service.
You can manage cookies through your browser settings. Disabling essential cookies will prevent login and core features from working.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can delete it.
11. Changes to this notice
We may update this Privacy Notice from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be notified through the Service or by email.
12. Contact
PORTAL Local Partner — London, United Kingdom.
Email: contact@portallp.com