Privacy Policy
Last updated: 02/07/2025
Khoslaa Finds ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data under the UK General Data Protection Regulation (UK GDPR).
1. Who We Are (Data Controller)
Data Controller: Khoslaa Finds is the data controller responsible for your personal information.
We operate Khoslaa Finds, a website sharing UK food & drink launches, deals, and trends. As your data controller, we determine how and why your personal data is processed.
Contact us: For any privacy-related questions, contact us at finds@khoslaa.com
2. What Personal Data We Collect
Information You Provide Directly
- Email addresses (when you subscribe to our newsletter or contact us)
- Name and contact details (if provided in communications)
- Account information (username, profile details for registered users)
- User-generated content (images, comments, reviews, sightings)
- Communications with us (emails, support tickets)
Information Collected Automatically
- Device and browser information (IP address, browser type, operating system)
- Website usage data (pages visited, time spent, click patterns)
- User behavior analytics (heatmaps, session recordings, scroll patterns via Microsoft Clarity)
- Cookies and similar tracking technologies
- Affiliate link click activity and referral data
- Location data (if permission granted for location-based features)
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
Legitimate Interest
Website analytics, security, and improvement
Consent
Marketing emails, non-essential cookies
Contract Performance
Account services, user features
Legal Obligation
Compliance with applicable laws
4. How We Use Your Data
Website Operation & Improvement
Provide and enhance our website functionality, fix bugs, analyze performance
User Engagement & Analytics
Track user interactions, measure content effectiveness, understand user preferences, analyze user behavior through heatmaps and session recordings
Content Curation & Affiliate Services
Share relevant deals, track affiliate link performance, provide personalized recommendations
Content Moderation
Review user-uploaded content, ensure community standards compliance, AI-powered content screening
Communication
Send newsletters, respond to inquiries, provide customer support
5. Your Rights Under UK GDPR
Your Rights: You have significant control over your personal data. Here's what you can do:
🔍 Right of Access
Request a copy of your personal data
✏️ Right to Rectification
Correct inaccurate information
🗑️ Right to Erasure
Request deletion of your data
⛔ Right to Restrict Processing
Limit how we use your data
📤 Right to Data Portability
Receive your data in portable format
🚫 Right to Object
Object to certain processing activities
🤖 Rights Related to Automated Decision-Making
Protection against automated decisions
📧 Right to Withdraw Consent
Revoke consent at any time
To exercise any of these rights, contact us at finds@khoslaa.com with the subject line "Data Protection Request".
6. Data Sharing & Third Parties
We may share your data with trusted third parties in the following circumstances:
Analytics & Performance
Vercel Analytics - Anonymous usage data for website performance
Microsoft Clarity - User behavior analytics including heatmaps and session recordings
Affiliate Networks
Anonymous click data for commission tracking (no personal identification)
Service Providers
Cloud storage, email services, and website infrastructure
Important: We do not sell your personal data to third parties. All sharing is for operational purposes and subject to strict confidentiality agreements.
7. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Account data: Until account deletion or 3 years of inactivity
- Newsletter subscriptions: Until you unsubscribe
- Analytics data: Anonymized after 26 months (Vercel Analytics standard), Microsoft Clarity data retained for 12 months
- User-generated content: Until removal requested or account deleted
- Communication records: 3 years for customer service purposes
- Cookie data: As specified in our Cookie Policy (typically 365 days)
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
Technical Measures
- • SSL/TLS encryption
- • Secure cloud storage
- • Regular security updates
- • Access controls
Organizational Measures
- • Staff training on data protection
- • Privacy by design principles
- • Regular security assessments
- • Incident response procedures
9. International Data Transfers
Your data may be transferred to and processed in countries outside the UK/EEA, including:
- United States (Vercel Analytics, Microsoft Clarity - with appropriate safeguards)
- Cloud storage providers with UK/EU data residency
All international transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
10. Children's Privacy
Age Restriction: Our website is not intended for children under 13 years old. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us immediately.
11. Cookies & Tracking
We use essential and non-essential cookies to enhance your experience. For detailed information about our cookie usage, types, and your control options, please see our Cookie Policy.
12. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify users of significant changes by:
- Posting the updated policy on this page with a new "Last updated" date
- Sending email notifications for material changes (if you've subscribed)
- Displaying prominent notices on our website
13. Contact Us & Complaints
Contact Information
Email: finds@khoslaa.com
Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
Right to Complain
If you're not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.
This Privacy Policy is part of our Terms & Conditions. By using Khoslaa Finds, you acknowledge that you have read and understood this policy.