Back to map

Privacy Policy

Last updated: 15 May 2026

This privacy policy explains how In London Today ("we", "us", "our") collects, uses, and protects your personal data when you use inlondontoday.com (the "Service"). We are committed to protecting your privacy and handling your data transparently and lawfully.

If you have questions about this policy or your data, contact us at hello@inlondontoday.com.

1. The data we collect

We collect different categories of data depending on how you use the Service.

If you browse the Service without signing in, we may collect:

  • Your IP address and general location (derived from IP)
  • Browser type, operating system, and device information
  • Pages you visit and actions you take on the Service
  • Swipe preferences (saved locally in your browser; if you sign in, your swipe history is synced to your account)

If you sign in with Google, we additionally collect:

  • Your name and email address (from your Google account)
  • Your Google profile photo, if available
  • A unique user identifier provided by Firebase Authentication

If you create a profile and use the Service, we additionally collect:

  • Your preferred event categories
  • Your "free events only" preference
  • Your preferred London area (if set)
  • Your event swipe history (events you've liked or skipped)
  • Aggregated scores derived from your swipes (used to personalise recommendations)
  • Whether you've opted in to receive marketing emails

If you contact us by email, we collect the content of your message and your email address.

2. How we use your data

We use your data for the following purposes:

To provide the Service (legal basis: performance of a contract). We need your Google account information to create your account, your preferences to personalise your experience, and your swipe history to remember what you've engaged with.

To send you marketing emails (legal basis: your consent). If you opt in, we send weekly emails featuring events we think you'll enjoy. You can withdraw consent at any time by clicking unsubscribe in any email or toggling marketing emails off in your profile settings.

To improve the Service (legal basis: legitimate interest). We analyse aggregated, anonymised usage patterns to understand which events are popular and how to improve recommendations. We do not use your personal data for this analysis at an individual level.

To prevent abuse and ensure security (legal basis: legitimate interest). We monitor for unusual activity, prevent unauthorised access, and respond to security incidents.

To comply with legal obligations (legal basis: legal obligation). Where required by law, we may process or retain data to comply with regulatory or law enforcement requests.

3. Who we share your data with

We share data with the following categories of recipients:

Service providers acting on our behalf, including:

  • Google Firebase (Google Cloud EMEA Limited): Authentication, database (Firestore), and hosting. Google processes data under Google Cloud's Data Processing Addendum and Standard Contractual Clauses.
  • Resend (Resend, Inc.): Email delivery for marketing emails you've opted in to. Resend processes recipient email addresses solely to deliver our emails.
  • Firebase: Web hosting and content delivery.
  • Google Maps Platform: Provides the interactive map. Google may collect data about your map interactions per their privacy policy.

Third-party services with separate controllership:

  • If you click affiliate links to ticketing partners (e.g. Tiqets, Eventbrite, GetYourGuide), you leave our Service and are subject to those partners' privacy policies. They may set their own cookies and collect data independently.

Legal and regulatory bodies, where required by law or to protect our rights, users, or others.

We do not sell your personal data to anyone, ever.

4. International transfers

Some of our service providers (notably Google and Resend) may process data outside the United Kingdom and European Economic Area, primarily in the United States. Where this happens, we rely on appropriate safeguards including Standard Contractual Clauses approved by the UK and EU authorities, and adequacy decisions where applicable.

5. How long we keep your data

We retain data for as long as necessary to provide the Service and comply with legal obligations:

  • Active accounts: kept until you delete your account.
  • Inactive accounts (no sign-in for 24 months): we may delete these automatically after notifying you.
  • Account deletion: when you delete your account via your profile page, your profile, swipe history, and Firebase Authentication record are removed within 30 days. Anonymised analytics data may persist.
  • Marketing email records: we retain a log of marketing emails sent for 3 years for compliance and audit purposes.
  • Administrative action logs: kept for 3 years.
  • Email correspondence: retained for as long as needed to handle your enquiry and a reasonable period afterwards.

6. Your rights

Under UK GDPR, you have the following rights:

  • Right of access: request a copy of your personal data.
  • Right of rectification: ask us to correct inaccurate data.
  • Right of erasure: ask us to delete your data (you can do this yourself for your account via your profile page).
  • Right to restrict processing: ask us to stop certain uses of your data.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent: where we rely on consent (e.g. marketing emails), you can withdraw at any time.

To exercise any of these rights, email us at hello@inlondontoday.com. We will respond within one month.

If you're not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

7. Cookies and similar technologies

We use a small number of cookies and similar technologies:

Strictly necessary cookies (no consent required):

  • Authentication session cookies for keeping you signed in.
  • Security cookies to protect against fraud and abuse.

Local storage (no consent required):

  • Your swipe history is stored in your browser to provide an instant, offline-capable experience.
  • Your sign-in prompt dismissal preferences.

We currently do not use analytics cookies, advertising cookies, or third-party tracking cookies on our own pages. If we add such technologies in future, we will update this policy and seek your consent through a cookie banner.

If you click on an affiliate ticketing link, the destination site may set its own cookies — those are governed by the destination site's privacy policy, not ours.

8. Security

We take security seriously and use appropriate technical and organisational measures:

  • All data is encrypted in transit (HTTPS).
  • Firestore data is encrypted at rest by Google.
  • Access to administrative functions requires authentication and is logged.
  • Sensitive credentials are never stored in our codebase or transmitted insecurely.

No system is perfectly secure. In the unlikely event of a data breach affecting your data, we will notify the ICO within 72 hours where required and notify you directly if the breach is likely to result in high risk to your rights and freedoms.

9. Children's data

The Service is intended for adults. It is not directed at children and we don't knowingly collect personal data from anyone under the age of 13.

If you are under 13, please do not use the Service or provide any personal data to us.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@inlondontoday.com and we will delete the relevant data and account promptly.

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the "last updated" date at the top and, where appropriate, notify you by email or in-product. Continued use of the Service after changes means you accept the updated policy.

11. Contact us

For any questions about this policy or how we handle your data:

You can also contact the UK Information Commissioner's Office:

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF