Privacy Notice

Who we are

Kist Directory is a community food directory for Scotland, run by a sole founder. We are the data controller for any personal data collected through this site.

Contact us at hello@kist.scot for any privacy-related questions, requests, or complaints.

What we collect and why

Business listings

We publish information about local food businesses — names, addresses, phone numbers, websites, and opening hours. This data is gathered from businesses' own websites, public sources, and direct fieldwork. Our lawful basis is legitimate interests: building an accurate, trustworthy local food directory serves the public and the businesses themselves.

If you are a sole trader and your business contact details constitute personal data, you can request correction or removal at any time. We will act promptly.

Follow email addresses

If you choose to follow a business or the Forth Valley region, we collect your email address. We use it only to send updates about that specific business or region — nothing else. Our lawful basis is consent: you opt in explicitly at the moment of following.

Following a business and following the region are separate consents. We record what you signed up for, where, and when.

Freshness taps

When you tap "Still accurate?" on a listing, we record that a confirmation was made for that business. No email address or account is required. Taps are anonymous by default and are used only to show a freshness signal on the listing.

How long we keep your data

Follow email: retained until you unsubscribe. On unsubscribe, your record is marked withdrawn immediately and deleted within 30 days.

Business data: retained for as long as the business is operating and listed. Removed or corrected on request.

Taps: retained as an aggregate freshness signal. No personal data is attached.

Who we share your data with

We use a small number of third-party services to run the directory:

• Supabase — database hosting. Your follow email is stored in a private, access-controlled schema, encrypted at rest.
• Resend — transactional email delivery. Your email address is passed to Resend only when sending a confirmation or update email.
• Netlify — web hosting. Serves the public directory site.

We do not sell, rent, or share your personal data with any other third party. We do not use your data for advertising.

Cookies and tracking

Kist Directory sets no tracking cookies and uses no third-party analytics. We do not fingerprint browsers or track individual users across sessions.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Erase your data (the "right to be forgotten")
• Object to our processing
• Withdraw consent at any time — use the unsubscribe link in any email we send you, or contact us directly

To exercise any of these rights, email hello@kist.scot. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Changes to this notice

If we make material changes we will update the date at the top of this page. We will not retroactively reduce your rights without notifying you.