Privacy Policy

1. Who we are

This website (midspests.co.uk, "we", "us", "our") is an independent directory of pest control businesses operating in the West Midlands and surrounding areas. We are the data controller for personal data collected through this site under the UK GDPR and the Data Protection Act 2018.

For privacy questions or to exercise your rights, contact us at info@midspests.co.uk.

2. What data we collect

• Callback request data — when you submit the "Request a callback" form on a listing: your name, phone number, email (optional), preferred call time (optional), and a short message describing your pest issue.
• Technical data — IP address, browser type, device, pages visited, referrer. Collected automatically by our hosting provider and (with your consent) by analytics.
• Cookie & advertising data — only if you accept cookies. See our Cookie Policy.

We do not knowingly collect data from anyone under 16. We do not collect special category data (health, biometrics, etc.).

3. How we use your data and our lawful basis

4. The callback form

When you submit a callback request, your details are stored in our secure database and made available to the pest controller you selected so they can contact you. We do not sell or share your details with any other company. The pest controller is an independent business and will process your data under their own privacy policy once you contact each other.

Retention: callback requests are retained for 12 months for support and dispute resolution, then deleted.

5. Google AdSense

We display ads served by Google AdSense to support the cost of running this directory. Google and its partners may use cookies and similar technologies to serve ads based on your visits to this and other sites.

We use Google Consent Mode v2: until you click "Accept all" on our cookie banner, all ad and analytics cookies are denied (ad_storage, ad_user_data, ad_personalization, analytics_storage are set to denied). If you reject, Google may still serve non-personalised ads using contextual signals only.

You can manage Google ad personalisation at any time at adssettings.google.com. See Google's policy at policies.google.com/technologies/ads.

6. Analytics

If we operate analytics (e.g. Google Analytics 4), it loads only after you give consent. Analytics data is pseudonymous, IP addresses are masked where possible, and we do not use it to identify individual visitors.

7. Who we share data with

• The pest controller you submitted a callback to (callback form data only).
• Our hosting & database provider (Supabase, an EU-hosted backend) — acting as our processor under a Data Processing Agreement.
• Google LLC (AdSense, optionally Analytics) — only with your consent.
• Law enforcement or regulators — only when legally required.

Some providers (e.g. Google) may transfer data outside the UK/EEA. Such transfers are covered by UK Addendum + EU Standard Contractual Clauses or an equivalent safeguard.

8. How long we keep data

• Callback requests: 12 months from submission.
• Server access logs: typically 30 days.
• Cookie consent record: 12 months in your browser, then we re-ask.

9. Your rights under UK GDPR

You have the right to:

• Access a copy of your personal data
• Have inaccurate data corrected
• Have your data erased ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (without affecting prior lawful processing)

To exercise any right, email info@midspests.co.uk. We respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

Data is transmitted over HTTPS and stored in an access-controlled database with row-level security policies. We review access regularly and use the principle of least privilege.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be highlighted on the site.