Privacy and cookies
Last updated November 2026.
Who we are
Brum City Buzz runs this directory and its newsletter. We are the data controller. Contact: hello@brumcitybuzz.co.uk, [postal address to confirm]. ICO registration: [to confirm].
What we collect and why
- Account: your email address and, if you give it, your first name, so you can sign in and save places. Lawful basis: contract (providing the account you asked for).
- Newsletter: your email, when and how you agreed, and the exact wording you agreed to. We only send it after you confirm by email (double opt-in). If you gave your email and ticked the newsletter box when joining our Facebook group, we add it as unconfirmed and email you once to ask you to confirm; if you don't, you won't get the newsletter. Lawful basis: consent. You can unsubscribe at any time from any email or your account page.
- Hearts: the businesses you save. Owners see a count only; they see your first name only if you switch that on in your account settings.
- Enquiries: the name, contact details and message you send to a business are passed to that business so it can reply. Lawful basis: legitimate interests (passing on your message as you asked).
- Claiming a business: your role and work email or phone, to check you represent the business.
- Searches: we log search words, area and result counts with no personal data, to improve the directory.
Who we share it with
Our hosting, database and email providers process data for us under contract, in the UK or EU. We don't sell your data. Businesses only receive enquiries you send them.
How long we keep it
Until you delete your account (from your account page). If you unsubscribe or delete your account, we keep a scrambled (hashed) copy of your email only to make sure we never email you again. Enquiries you sent stay with the business you sent them to.
Your rights
You can ask to see, correct or delete your data, object to its use, or withdraw consent. Email hello@brumcitybuzz.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).
Cookies
Essential cookies, which don't need your consent:
- bcb_session: keeps you signed in (30 days, only if you sign in).
- bcb_consent: remembers your cookie choice (6 months), so we don't ask on every page.
Non-essential cookies, only if you press Accept:
- Google Analytics (_ga, _ga_*): counts visits and which pages are used. Provider: Google.
- Meta pixel (_fbp): measures visits from our Facebook posts. Provider: Meta.
Until you accept, and after you reject, neither is loaded and neither sets a cookie. We also remember a dismissed “Join the group” banner in your browser's local storage; that never leaves your device.