Privacy Notice

Who we are

Bill Quell Consulting, trading as Local Signal, is the data controller for the personal data described in this notice. That means we decide what personal data is collected through the Local Signal platform and why. You can reach us at support@localbrandscale.com.

Where a brand's head office uses Local Signal to manage its partners, we act as controller for the account data we need to run the platform; the brand remains responsible for the business content it chooses to publish about its partners and locations.

What we collect and why

• Account details — name, email address, login credentials (stored only as a secure hash), brand and location names, and the role or access scope you are given. Used to create and secure your account and to give you the right access. Legal basis: performance of our contract with you.
• Content you upload — text, images, videos, opening hours, contact details and similar business information, which may include the name, phone number or email of a local contact. Used to build and serve the pages and embeds you publish. Legal basis: performance of our contract.
• Support messages — the questions you send us and our replies. Used to answer you and improve our help. Legal basis: performance of our contract and our legitimate interest in supporting customers.
• Usage and page analytics — views and clicks on published pages and embeds, referring page, approximate device type, IP address and timestamps. Used to give you your reporting, to keep the service secure and to prevent fraud and abuse. Legal basis: performance of our contract and legitimate interests.
• Technical logs — device identifiers, browser type, error diagnostics. Used to keep the platform working and secure. Legal basis: legitimate interests.
• Email activity — whether a report or notification we send was delivered or bounced. Used to make sure our emails reach you. Legal basis: legitimate interests.
• Marketing — if you opt in, your email address to send product news. Legal basis: consent, which you can withdraw at any time.

We also keep records we are legally required to keep, such as records relating to sales and tax. Legal basis: legal obligation.

Who we share it with

• Merchant of Record — Paddle.com Market Ltd, which sells our subscriptions and handles payments, subscription management, invoicing, tax compliance and refunds. Payment card details are given directly to Paddle and never reach our systems.
• Service providers and subprocessors — hosting and database providers, email delivery providers, and support and error-monitoring tools, all acting on our instructions under contract.
• Your brand or partners — where you are a partner user, the brand's head office can see your account, the content on your location page and your page reporting.
• Professional advisers — legal, accounting and insurance advisers where needed.
• Authorities — where we are required to disclose by law, or to establish or defend legal claims.

We do not sell personal data.

International transfers

We and our providers operate in the United States and the European Union, so personal data may be transferred outside your country. Where data leaves the UK or EEA we rely on adequacy decisions or on Standard Contractual Clauses with appropriate additional safeguards.

How long we keep it

• Account and content data: for as long as your account is open, then up to 30 days after it closes.
• Page analytics: up to 24 months, after which it is aggregated so it no longer identifies anyone.
• Support messages: up to 24 months after the conversation is closed.
• Sales and tax records: as long as the law requires, typically 6–7 years.

When we no longer need personal data we delete or anonymise it.

Your rights

Depending on where you live, you have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. If you are in the UK or EEA you also have the right to complain to your data protection supervisory authority. If you are in California, you may request disclosure or deletion of your personal information and will not be discriminated against for doing so.

To exercise any right, email support@localbrandscale.com. We respond within one month; if a request is complex we will tell you and may take up to two further months.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, encryption at rest for our database, row-level access controls so each account only reaches its own records, hashed passwords and restricted administrative access.

Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and to remember your workspace — these are required for the platform to work. On published pages and embeds we count views and clicks using first-party requests for analytics purposes; these figures are reported to the brand and partner, not sold or used for advertising. We do not use marketing or advertising cookies. You can block or delete cookies in your browser settings, but signing in will not work without the essential ones.

Changes to this notice

We will update this notice when our practices change and will show the new date at the top. Where changes are material we will notify you by email or in the app.