Last updated: 13 September 2026
1. Who this policy covers
This policy explains how LocalAction handles information about business account users who create and manage an Action Page, and visitors or customers who view a public Action Page or send a quote request.
A business that receives a customer enquiry is responsible for how it uses that information after receiving it. Customers should also review any privacy information the chosen business provides.
2. Account information
When a business user creates an account, we store the email address, password hash, internal account identifier, account timestamps, and session records needed to sign the user in securely. We do not store the account password in readable form.
3. Business profile information
We store information a business owner enters to set up and manage the service. This can include business name and type, description, phone, WhatsApp number, contact email, website, logo, brand colour, services, prices, working hours, service areas and postcodes, offers, FAQs, credentials, evidence files, page order, enabled tools, and publishing settings.
Information the owner chooses to publish on an Action Page is publicly accessible. This may include contact details and uploaded credential evidence. Owners should not publish confidential information.
4. Google-related information
A business owner can provide a Google Maps share URL. We may process that URL to save a direct Google review destination and obtain publicly available Google business name, rating, and review-count information. We also store the owner's choices about displaying an available rating or count. Google information may change or become unavailable.
5. Quote requests
A business chooses the fields on its quote form. Depending on that configuration, a customer may provide a name, phone number, email address, postcode or address, answers to business-defined questions, free-text job information, choices, quantities, and up to three job photos.
When a customer submits a quote request, that information is provided to the specific business the customer chose to contact. It appears in that business's protected Quote Requests dashboard and a notification is sent to the business's saved contact email. Photo files are not attached to the email; the business opens them through its authenticated dashboard.
6. Uploaded business content
We process business logos and credential evidence so they can be stored, displayed, resized, or delivered as configured. Credential evidence is available publicly only when the business has deliberately associated it with a visible, non-expired credential. Owner dashboard routes remain restricted to an authenticated owner.
7. Activity information
LocalAction records small event rows for a published Action Page. The recorded information is the business, the event type, and the time. The event types cover page views, quote requests, calls, WhatsApp opens, and review-link clicks. Businesses see aggregated counts and recent quote activity in their dashboard.
These activity events do not contain a visitor ID, cookie ID, IP address, device fingerprint, free-text customer information, or advertising identifier. We do not use an analytics cookie to collect these events.
8. Product research and surveys
If you choose to join a LocalAction research survey, we may process your survey responses, invitation or contact details associated with the research, and completion information to improve LocalAction and administer any survey reward. Participation is voluntary. Research responses are not published to other invitees.
8. Technical and security data
Network information supplied by our trusted web entry point may be used briefly to apply abuse-prevention limits to quote and contact submissions. The rate-limit key is stored as a one-way hash, not as the raw network address. We may also process ordinary server and provider logs needed to diagnose failures, protect the service, and operate the website. We do not use that information to build advertising profiles.
9. Why we use information
We use information to:
- create accounts and authenticate business users;
- save, publish, preview, and operate business Action Pages;
- route quote requests to the selected business;
- store and securely deliver uploaded files;
- send operational and enquiry notifications;
- resolve Google review destinations and show owner-selected public information;
- generate Review Kit assets;
- provide support, prevent abuse, and maintain security;
- understand aggregate product use; and
- comply with legal obligations and enforce our terms.
11. Retention and deletion
Action Page activity events are deleted after 90 days. Quote requests, including associated uploaded photos and email-delivery records, are deleted after 365 days. Quote rate-limit records older than 24 hours and expired login sessions are deleted through scheduled operational cleanup.
Account and business profile information remains while the account or business is active or as needed to provide the service. When account or business deletion is completed, associated database records and managed files are deleted, subject to limited legal, security, and backup needs. Contact support@local-action.com to request deletion.
12. Security
We use measures designed to protect information, including hashed passwords and session tokens, access controls for owner data, private file storage for quote photos, validation and file-type limits, encrypted web connections in production, and rate limiting. No online service can guarantee absolute security, so account holders should protect their credentials and tell us promptly about suspected misuse.
13. International service providers
Our service providers may process information in countries different from the country where a user is located. Data-protection rules can differ between countries. We select providers and arrangements intended to give information appropriate protection for the service being supplied.
14. Your privacy rights
Depending on where you live, you may have rights to ask for access to, correction of, or deletion of your personal information; to object to or restrict certain processing; to receive portable information; or to withdraw consent where processing relies on consent. These rights can be subject to legal exceptions.
Send a request to support@local-action.com or use our contact form. We may need to verify your identity and authority before acting on a request.
15. Children's privacy
LocalAction accounts are intended for businesses and adults who can enter into an agreement. We do not knowingly invite children to create accounts or provide personal information. If you believe a child has submitted personal information, contact us so we can review and remove it where appropriate.
16. Third-party links
Action Pages can link to Google, WhatsApp, business websites, telephone services, and email services. Those third parties control their own processing. Their privacy policies apply after you follow a link or use their service.
18. Changes to this policy
We may update this policy when our service, providers, or legal obligations change. We will publish the revised policy with a new “Last updated” date and take reasonable steps to highlight material changes to registered users.
19. Contact
For privacy questions or requests, email support@local-action.com or choose “Privacy or data request” on the contact form.
Questions about this document? Visit our contact page or email support@local-action.com.