How we handle your data

This policy explains what girl.dad collects, who processes it on our behalf and the rights you have. It applies to this website. If anything is unclear, get in touch at hey@girl.dad.

What we collect

We keep data collection light, and this is the whole list:

• Newsletter sign-ups. If you enter your email to get the weekly drop, we store that email so we can send it to you. Nothing else.
• Messages you send us. The contact form emails us your name, email and message so a person can reply. It lands in our inbox and nowhere else, and we never add you to the newsletter from it.
• Usage measurement. If you accept cookies, we collect anonymous, aggregated stats about how the site is used (pages viewed, rough location, device type) through Google Analytics. We do not collect names, and we do not sell data.
• Orders. If you buy from the shop, payment is handled by our payment provider; we never see or store your card details.
• Claiming your page. If you claim a brand or listing as its owner, we store the name and work email you give us, so we can check the email domain matches the website on that page, and we log the IP address the request came from to catch abuse. Confirming the link creates a girl.dad account for you and an owner dashboard to sign in to. An unused link expires after 14 days. The claim and its audit trail stay on file for as long as the page is claimed, so we can always show who was given access and when, and our own team can sign in to your dashboard to help you with something, which we log every time. Ask us to close the account and we remove it and the claim record.

Cookies and analytics

We use Google Analytics to understand what is useful and what is not. It runs in Consent Mode, which means it stays switched off until you choose.

• When you first visit, a banner asks whether you are happy with measurement cookies. Nothing is stored until you choose.
• Decline and no analytics or ad cookies are set. The site works exactly the same.
• Accept and Google Analytics sets a cookie to measure visits. The same choice switches on ad storage and personalisation, which is what lets us tell whether an ad actually worked.
• So when we are running ads, accepting also lets Google Ads and the Meta Pixel measure them. Both load with consent revoked, so neither sets a cookie unless you accept.
• Your choice is remembered in your browser. To change it, clear this site's storage in your browser settings and the banner will ask again.

Who processes your data

We use a small set of trusted providers, each acting on our instructions:

• Vercel hosts the website.
• Supabase stores the site's content (brands, guides) and any account you create to manage it.
• Google Analytics measures usage, only with your consent.
• Google Ads measures ad clicks and sales, only when we are running ads and only with your consent.
• Meta (Facebook and Instagram) measures its own ads the same way, on the same consent.
• Resend sends the newsletter, the claim confirmation emails and holds the email list.
• Stripe processes shop payments, when the shop is live.

Each provider has its own privacy terms and appropriate safeguards for any transfers outside the UK and EU.

Why we are allowed to

We rely on your consent for analytics and ad cookies and for the newsletter, and on our legitimate interest in running and improving the site for the basics that keep it working. Page claims rest on that same legitimate interest: checking that whoever claims a business really represents it, and keeping a record of who we handed the keys to. You can withdraw consent at any time.

Your rights

Under UK and EU data protection law you can ask us to show you the data we hold about you, correct it, or delete it, and you can unsubscribe from the newsletter at any time using the link in any email. To make a request, email hey@girl.dad. You also have the right to complain to the Information Commissioner's Office (ICO).

How long we keep it

We keep newsletter emails until you unsubscribe. Analytics data is retained for a limited period in line with Google Analytics settings. Claim records, owner accounts and the claim audit trail have no automatic expiry: they stay while the page is claimed, and we delete them when you ask or when a page changes hands. We do not keep data longer than we need it.

Contact

Questions about your data, or want it removed? Email hey@girl.dad and we will sort it. You can also read more about who we are on our about page.