Privacy policy

Last updated: 30 September 2026

theOFL.app ("theOFL", "we", "us") is run by Ben Nodwell trading as theOFL.app, Isle of Man. We're the data controller for the personal information described here. If you have any questions, email hello@theofl.app.

We keep this simple: we collect what we need to run the site, we don't sell your data, and we don't use advertising trackers.

What we collect

If you create a business or organisation account

Your name, email address and password (stored securely; we never see your password).
Your business or group details: name, category, description, logo, photos, towns covered, and the contact details you choose to show (phone, email, website, booking link).
The listings and events you post.
Details we record when we verify your business, such as notes from our check.

If you subscribe to a plan

Payments are handled by Stripe. We don't see or store your card details. We receive your subscription status, plan and a Stripe customer reference.

If you just browse

You don't need an account to use theOFL.app.
Our hosting providers keep standard technical logs (such as IP address, browser type and pages requested) to keep the site secure and working.
We count views of adverts and pages in aggregate, to show businesses how their listings and adverts perform. These counts don't identify you.

If you email us

Your email and whatever you choose to tell us.

Why we use it (and our legal basis)

To run your account and show your listings and events: to perform our agreement with you.
To verify businesses: our legitimate interest in keeping theOFL.app trustworthy.
To take payments and manage subscriptions: to perform our agreement with you.
To send account emails (sign-up confirmation, password resets, payment notices): to perform our agreement with you.
To keep the site secure and prevent abuse: our legitimate interest.
To meet legal obligations, such as keeping financial records.

We don't send marketing emails unless you've agreed to them, and you can opt out at any time.

What's public

Anything you add to your public profile, listings or events (business name, description, logo, photos, towns, and the contact details you choose to show) is visible to anyone using theOFL.app. Your login email and password are never shown publicly.

Who we share it with

We use trusted providers to run the site. They only process your data on our instructions:

Supabase: database, login and file storage (hosted in Ireland, EU).
Vercel: website hosting.
Stripe: payments and subscriptions.
Resend: account emails.
Google Workspace: our email inbox.

Some of these providers may process data outside the Isle of Man, UK and EU (for example in the United States). Where that happens, we rely on appropriate safeguards such as standard contractual clauses.

We don't sell your data. We only share it otherwise if the law requires us to.

Cookies

We only use cookies that are strictly necessary, for example to keep you logged in. We don't use advertising or tracking cookies, so we don't need to ask for cookie consent. If this ever changes, we'll ask you first.

How long we keep it

Account and profile data: while your account is open, and for up to 90 days after you close it, then deleted.
Listings and events: until they expire or you delete them, and then removed from public view.
Payment and invoice records: as long as the law requires (usually 6 years).
Technical logs: kept by our hosting providers for a short period for security.

Your rights

You can ask us to:

give you a copy of your data;
correct anything that's wrong;
delete your data;
restrict or object to how we use it;
give you your data in a portable format.

Email hello@theofl.app and we'll respond within one month. You can also complain to the Isle of Man Information Commissioner (inforights.im).

Age

theOFL.app accounts are for people aged 18 or over.

Changes

If we make important changes to this policy, we'll update the date above and tell account holders by email.