Privacy Policy
Localyn helps food businesses manage food safety compliance, daily records, documents, reminders, messages, reports, and related account administration.
Who We Are
Localyn is operated by Teknikal. For the purposes of UK data protection law, business customers (tenants) act as the data controller for the staff, customer, and operational records they enter into the platform, and we act as a data processor for that data. We act as the data controller for account registration, billing, support, and website data.
Information We Collect
We collect information needed to provide the service, including account details, business and store details, staff records entered by authorised users, food safety records, audit history, support messages, payment status information, and technical information such as device, browser, and security logs.
WhatsApp And Messaging
If you contact Localyn through WhatsApp, we may process your phone number, display name, message content, message identifiers, and related delivery metadata so we can respond, record compliance evidence, route enquiries, and support account setup. We do not sell WhatsApp message data. We keep message content only for as long as needed to operate the service and meet our retention periods; detailed provider webhook payloads are not kept indefinitely.
Loyalty, Bookings And Digital Wallet Passes
If you join a loyalty programme or make a booking with a business that uses Localyn, we process your name, contact details, loyalty activity (such as stamps, points, and rewards), and booking details on behalf of that business. If you add a loyalty card to Apple Wallet or Google Wallet, the pass is delivered through Apple or Google and is subject to their own privacy policies.
Payments
Subscription payments are collected by Direct Debit through our payment provider, GoCardless. We do not store your bank account details; they are collected and held by GoCardless under their own privacy policy. We keep payment status information such as plan, mandate status, and invoice history.
Cookies And Similar Technologies
We use essential cookies and similar browser storage to keep you signed in, maintain your session, remember your cookie choice, and protect the service (including security checks such as Cloudflare Turnstile on forms). With your consent we may also use optional cookies to remember preferences and understand how the service is used. You can accept or decline optional cookies using the banner shown on your first visit, and you can clear or block cookies through your browser settings; essential cookies are required for the service to work. When you make a cookie choice, we record that choice (and the policy version shown at the time) so we can demonstrate compliance; if you are signed in, we may link the record to your account.
Lawful Bases
We process personal data where it is necessary to perform our contract with you, where we have a legitimate interest (such as service security, improvement, and support), where you have given consent (such as optional cookies or marketing messages), and where we must meet legal obligations.
How We Use Information
We use information to operate the platform, authenticate users, maintain tenant and store records, generate inspection-ready reports, send service messages, support billing, improve reliability, investigate security issues, and comply with legal obligations.
Sharing
We share information only where needed to provide the service, such as with hosting, email, payment, messaging, analytics, security, or professional service providers. We may also share information where required by law or to protect the service and its users.
Retention
We keep records for as long as needed to provide the service, meet food safety and audit requirements, resolve disputes, maintain security, and comply with legal obligations. Typical periods include: food safety and compliance records for the life of your account and up to six years after closure where the law requires; loyalty, booking, and messaging data for up to twenty-four months after last activity unless deleted earlier; deactivated staff accounts anonymized after twenty-four months; and application support logs for up to thirty days. When you ask us to delete personal data, we remove it from our live systems promptly where the law allows. Encrypted database backups may still contain that data for up to five days before those backups expire automatically.
Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections, authenticated access, role-based permissions, and security logging. No system can be guaranteed fully secure, so please keep your account credentials safe and tell us promptly about any suspected misuse.
International Transfers
Your data is primarily stored and processed in the UK or the European Economic Area. Where a service provider processes data outside the UK or EEA, we rely on appropriate safeguards such as adequacy regulations or standard contractual clauses.
Your Rights
Under UK data protection law you have the right to access, correct, delete, or receive a copy of your personal information, to restrict or object to processing, and to withdraw consent where processing is based on consent. You can ask for a copy of your data or request deletion by contacting us at [email protected]. You can also stop WhatsApp messaging with us by asking us to opt you out or by not sending further WhatsApp messages. Where we process data on behalf of a business customer, we may refer your request to that business as the data controller.
Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes To This Policy
We may update this policy from time to time. We will post the updated version on this page and revise the "last updated" date below. Significant changes may also be notified by email or in the app.
Contact
For privacy questions or requests, contact us at [email protected].
Last updated: 4 July 2026
