Privacy

This notice explains what data kidseatfree.co.uk collects when you use the site, why, and what we do with it. It’s written to be readable; if any of it’s unclear, please get in touch via the contact page.

Last updated: 2026-05-19.

Who runs the site

kidseatfree.co.uk is an independent editorial directory. We are the data controller for any personal data processed through this site under UK GDPR.

What we collect

Location

When you tap the “Feed the kids now” button, your browser may ask your permission to share your latitude and longitude with the site. If you say yes, that location is sent to our results API to find venues near you. It is not stored.The query runs, the results come back, and the coordinates are discarded with the request.

If you decline geolocation, or your device doesn’t support it, we ask you for a postcode instead. That postcode is sent to the public Postcodes.io service to translate it into a latitude and longitude. We don’t log the postcode you enter.

Server logs

Like every website, the servers that host us (Vercel for the app, Neon for the database) keep short-lived operational logs — request paths, response codes, IP addresses — for diagnostics and abuse prevention. These logs are retained for at most a few weeks by the hosting providers, then deleted. We don’t mine them for personal data.

Cookies

We don’t set any tracking cookies. We don’t run Google Analytics. We don’t run any third-party advertising or social-sharing trackers. The only cookies you might see are essential operational cookies set by the hosting providers (typically a load-balancer session cookie); these don’t identify you and are wiped when you close the browser.

What we don’t collect

• No name, email, phone number, or account.
• No payment details — we never take payments. Bookings happen on the chain’s own site.
• No browsing history. We don’t track which venues you tapped.
• No advertising identifiers.

Who we share data with

We do not sell, rent, or share your data for marketing. The third-party services we use to run the site are:

• Vercel — hosts the website. Sees standard request metadata (IP, URL, response).
• Neon — hosts the database. Sees the venue query (latitude, longitude, radius) but nothing that identifies you.
• Cloudinary — hosts the photographs you see on each card.
• Postcodes.io — public postcode-to-coordinates service, used only if you enter a postcode.
• Google Maps — if you tap “Directions”, your browser opens Google Maps. That hand-off is governed by Google’s own privacy policy.
• The venue’s booking provider — if you tap “Book a table”, your browser opens the chain’s booking page. That hand-off is governed by their privacy policy.

Where data is processed

Our hosting and database run in the UK and EU regions. Some sub-processors (e.g. Cloudinary, Google Maps) operate globally. Where personal data leaves the UK, it’s covered by the standard transfer mechanisms in those providers’ terms.

Your rights under UK GDPR

Because we don’t hold any data that identifies you, most data-subject rights — access, rectification, erasure, portability — have nothing to act on. If you believe we hold data about you (we don’t expect to), you can email us via the contact page and we’ll respond within 30 days.

You can also complain to the Information Commissioner’s Office (ICO) at ico.org.ukif you’re unhappy with how we handle your data.

Children

The site is aimed at parents and carers; it’s safe for children to browse but not directed at them. Because we don’t collect personal data from anyone, we don’t collect data from children either.

Changes

If we change anything material, we’ll update the “last updated” date at the top of this page. Past versions live in our public version control if you need to compare.

This page is provided as a clear summary of how the site works. For complex questions about your rights under UK data protection law, please consult a qualified legal adviser.