Privacy Policy

Franchiseek is the data controller for the personal data we collect through this Site. For any privacy questions or to exercise your rights, contact us at privacy@franchiseek.com.

• Subscribers: name (optional) and email address.
• Accounts (contributors, advertisers, partners): name, email, company, password (encrypted), QFA membership status, role.
• Submitted content: articles, listings, adverts and any files you upload.
• Technical data: IP address, browser type, device and pages visited (via cookies — see our Cookie Policy).

• To send the free magazine you've subscribed to — legal basis: consent.
• To manage your account and publish content you submit — legal basis: contract.
• To keep the Site secure and prevent fraud — legal basis: legitimate interests.
• To comply with legal obligations (e.g. tax, ICO requests) — legal basis: legal obligation.

We never sell your data. We share it only with trusted processors who help us operate the Site:

• Cloud hosting and database providers (data hosted in the EU/UK where possible).
• Email delivery providers (for the magazine and account emails).
• The Quality Franchise Association, where you are a QFA member and have asked us to.

All processors are bound by data-processing agreements that meet UK GDPR standards.

• Subscriber records: until you unsubscribe, then deleted within 30 days.
• Account records: while your account is active and for 2 years after closure.
• Published content: indefinitely as part of the magazine archive (you can request removal).

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased (right to be forgotten).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (e.g. unsubscribe).
• Lodge a complaint with the ICO — ico.org.uk/make-a-complaint.

To exercise any of these rights, email privacy@franchiseek.com. We'll respond within one month.

Data is stored on secure infrastructure with encryption in transit (HTTPS) and at rest. Passwords are hashed. Access is restricted to authorised editors only.

Where data is transferred outside the UK/EEA (e.g. some cloud providers), we rely on UK Adequacy Regulations or Standard Contractual Clauses to keep your data protected.

We may update this policy from time to time. The "last updated" date above will change accordingly.