Privacy notice

This notice explains how Joe Shipton, trading as drayy (“we”) uses personal data when you use drayy. We're the controller of that data under the UK GDPR and the Data Protection Act 2018. Contact us at hello@drayy.app or 17 Withington, Milton Keynes, MK13 7DS.

What we collect

• Account details: your email address and, if you give it, your name.
• Business details: your brewery or pub's name, address, postcode (and its map location), phone, website, and ordering contact details.
• Listings: beers, prices, availability and images that breweries add.
• Order requests: what a pub requested, from whom, delivery date and any notes, plus the status the brewery sets.
• Technical data: server logs (such as IP address and browser) kept for security and troubleshooting.

How and why we use it

• To provide the service (performing our contract with you): signing you in, showing beer from breweries that deliver to your postcode, and sending order requests and related emails.
• To keep listings useful (legitimate interests): for example the weekly email reminding breweries to update stock.
• To keep the platform secure and running (legitimate interests): preventing abuse, fixing faults and understanding basic usage.
• To meet legal obligations where they apply.

We don't sell personal data and we don't send marketing emails without your consent.

Who sees it

• When a pub sends an order request, the brewery receives the pub's name, address, ordering contact name, email and phone, delivery notes and the request itself. The pub is copied in and the brewery replies to the pub directly.
• Public pages show brewery details and listings, and pub details only if the pub chooses to publish a page. Prices and order requests are never public.
• Service providers who process data for us under contract: database, authentication and file storage (Supabase, hosted in London), website hosting (Vercel), email delivery (Resend), and postcode lookup (postcodes.io, which receives only a postcode).

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

How long we keep it

• Account and business details: while your account is open, then deleted within 90 days of closure.
• Order requests: kept for 6 years so both parties have a record, then deleted.
• Server logs: up to 30 days.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, and for a copy in a portable format. Email hello@drayy.app. We'll respond within one month. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We only use cookies and storage that are strictly necessary for the site to work. See our cookie notice.