Privacy Policy
Last updated: 11 October 2026
1. Who is responsible for your data
The data controller for personal data collected through Big Pitch UK is Tech Savvy Solutions Ltd, a company registered in England and Wales (company number 10487796), registered office Unit 4 JLL Industrial Estate, 1-9 Kingsley Street, Bury, Lancashire, BL8 2RF.
We are registered with the UK Information Commissioner’s Office (ICO). For all privacy queries please contact legal@bigpitchuk.co.uk.
2. What data we collect
2.1 Information you give us
- Account data: name, email address, password (hashed), and any optional profile details you add
- Payment data: billing name, postcode, and the last 4 digits of your payment card. Full card details are handled by Stripe and never stored on our servers.
- Content you create: reviews, ratings, photos, check-ins, comments, site submissions, and any messages you send us
- Communications: records of emails or support messages between you and us
2.2 Information collected automatically
- Technical data: IP address, browser type, device type, operating system, time zone, referrer URL
- Usage data: pages viewed, sites searched, features used, session duration
- Cookies and similar technologies: see our Cookie Policy
2.3 Information from third parties
To prevent repeated signup-and-refund cycles, we keep a limited review record containing the signup email, invoice reference, refund date and Stripe’s payment-card fingerprint for up to 12 months after a qualifying signup refund, independently of your login account. A fingerprint is an opaque identifier, not your card number or security code. It can indicate a shared card, so you can request a human review at support@bigpitchuk.co.uk. Annual-renewal refunds do not trigger this review. We also keep normal billing records for the accounting retention periods described below.
We receive limited information from our service providers, including:
- Clerk (authentication): email verification status, sign-in events, two-factor authentication status
- Stripe (payments): subscription status, payment method type (card brand only), invoice history
- Site owners who reply to our outreach: their site facility information (this becomes public site data on the directory)
- Public campsite imagery: where a listing displays a photograph of a campsite, we may cache an image from the campsite’s own public website (e.g. its page’s Open Graph image) so listings render quickly. We record the source of every image we publish, and images whose source or licence basis is unknown are not displayed. See our copyright & takedown page if you are a rights holder and would like an image removed.
3. How we use your data and the legal basis
We process personal data under the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Providing the Service (account, search, site data access) | Contract (Art. 6(1)(b)) |
| Processing subscription payments | Contract (Art. 6(1)(b)) |
| Sending transactional emails (verification codes, renewals, password resets) | Contract (Art. 6(1)(b)) |
| Improving the Service and analytics | Legitimate interests (Art. 6(1)(f)) |
| Security, fraud prevention, abuse detection | Legitimate interests (Art. 6(1)(f)) |
| Marketing emails (newsletters, product updates) | Consent (Art. 6(1)(a)) — opt-in at sign-up |
| Complying with legal obligations (tax, accounting) | Legal obligation (Art. 6(1)(c)) |
4. Who we share your data with
We share personal data only with:
- Clerk Inc. (USA) — authentication and account management. Data transferred under EU Standard Contractual Clauses.
- Stripe Payments UK Ltd — payment processing. UK-based, GDPR-compliant.
- Turso (ChiselStrike Inc.) — primary database hosting (EU region: eu-west-1, Ireland).
- Vercel Inc. (USA) — web hosting and analytics. Data transferred under EU Standard Contractual Clauses.
- Microsoft Ireland Operations Ltd — email infrastructure (Microsoft 365).
- Law enforcement, regulators, or courts — where we are legally required to disclose data.
We never sell your personal data. We do not share your personal data with third-party advertisers or data brokers.
5. International data transfers
Some of our service providers (notably Clerk and Vercel) are based in the United States. Where personal data is transferred outside the UK or EEA, we rely on the UK International Data Transfer Agreement and the European Commission’s Standard Contractual Clauses, together with supplementary technical and organisational safeguards.
6. How long we keep your data
- Account data: while your account is active, plus 12 months after closure
- Subscription and billing records: 6 years (UK statutory accounting requirement under the Companies Act 2006)
- Reviews, ratings, and other user content: may remain public after account closure (we anonymise them unless you request deletion)
- Support correspondence: 3 years
- Server logs: 90 days
7. Your rights under UK GDPR
You have the right to:
- Access a copy of the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”) where applicable
- Restrict processing of your data in certain circumstances
- Object to processing based on legitimate interests
- Port your data to another service (data portability)
- Withdraw consent at any time for marketing communications
To exercise any of these rights, email legal@bigpitchuk.co.uk. We will respond within one calendar month.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.
8. Security
We protect your data using industry-standard measures including HTTPS encryption for all data in transit, bcrypt password hashing, encrypted environment variables, brute-force rate limiting, and regular security reviews. No system is perfectly secure, but we work hard to minimise risk.
If we become aware of a data breach affecting your personal data, we will notify the ICO within 72 hours and notify you without undue delay where the breach is likely to result in a high risk to your rights.
9. Children
Big Pitch UK is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. Material changes will be notified to subscribers by email at least 30 days before they take effect. The “Last updated” date at the top of this policy shows when the current version was published.
11. Contact us
Tech Savvy Solutions Ltd, trading as Big Pitch UK
Unit 4 JLL Industrial Estate
1-9 Kingsley Street
Bury, Lancashire BL8 2RF
Email: legal@bigpitchuk.co.uk