Last updated: 2nd September 2026
Wight Explorer Ltd ("WightExplorer", "we", "us" or "our") operates the WightExplorer mobile application and website.
This Privacy Policy explains what personal information we collect, how we use it, who we may share it with and the rights you have in relation to your personal information.
Wight Explorer Ltd is the data controller responsible for your personal information when you use WightExplorer.
By using WightExplorer, you acknowledge that your personal information will be handled as described in this Privacy Policy.
WightExplorer is a local discovery service for finding events, places to visit, groups, classes, parks, walks and other activities on the Isle of Wight.
WightExplorer is intended for people aged 18 and over.
You must be at least 18 years old to create an account or use WightExplorer. We do not knowingly permit people under 18 to create accounts or use the Service.
If we become aware that a person under 18 has created or is using an account, we may suspend or delete the account and take appropriate steps regarding the associated personal information, subject to any legal obligation requiring us to retain information.
The information we collect depends on how you use WightExplorer.
When you create or use a WightExplorer account, we may collect:
WightExplorer supports authentication using email one-time passcodes and third-party authentication providers including Google, Apple and Facebook.
If you use Google, Apple or Facebook to sign in, we may receive information from that provider that is necessary to create and authenticate your WightExplorer account. The information provided to us depends on the relevant provider, your account settings and the permissions associated with the authentication method.
If you use features that allow you to save events or create an itinerary, we may store information about:
This information is used to provide the features you have requested.
With your permission, WightExplorer may access your device's location to help show events, places and other listings that are relevant to your location.
Location access is optional. You can refuse or withdraw location permission through your device settings.
We will only use location information for purposes described in this Privacy Policy and the relevant in-app permission request.
Where location information is not required to be stored to provide a particular feature, we aim to avoid retaining precise historical location information.
When you use WightExplorer, certain technical information may be processed automatically, including information such as:
Some of this information may be provided to our service providers as part of authentication, security, analytics, crash reporting, push notification delivery and other technical services.
We may collect information about how you interact with WightExplorer, such as:
We use this information to understand how WightExplorer is used and to improve the Service.
If you contact us, we may collect the information you provide, such as your name, email address and the contents of your message.
We use this information to respond to your enquiry, provide support and maintain appropriate records of our communications.
We use personal information for the following purposes:
We do not sell your personal information.
Under UK data protection law, we need a lawful basis for processing your personal information.
Depending on the circumstances, we rely on the following lawful bases:
We process information where it is necessary to provide the WightExplorer services you have requested, such as creating and maintaining your account, authenticating you and providing saved events and itinerary functionality.
We may rely on your consent where you choose to enable optional features such as device location access or certain notifications or analytics technologies.
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before you withdrew it.
We may process information where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.
These interests may include:
We may process personal information where necessary to comply with a legal or regulatory obligation.
If you enable push notifications, WightExplorer may send notifications relating to events, saved events, itinerary reminders and other relevant WightExplorer information.
Push notifications are optional and can be disabled through your device settings and, where applicable, within the WightExplorer app.
To deliver notifications, we use Expo's notification infrastructure. This may involve processing technical information such as a device or push notification token and information required to deliver the notification to your device.
We do not use push notifications to require you to provide additional personal information.
WightExplorer uses Supabase to provide authentication services.
Where you use email authentication, Supabase manages the authentication process and sends one-time passcode emails using our configured email delivery service, Resend.
Your email address is used for authentication and account-related communications.
Authentication emails are not used as a substitute for marketing consent. We will not treat the delivery of an authentication email as consent to send unrelated marketing communications.
We use Google Analytics 4 to understand how people use WightExplorer and to help us improve the Service.
Analytics information may include information about your device, browser, app or website usage, pages and screens viewed, interactions with features, approximate location derived from your IP address, and referral source.
On our website, Google Analytics sets cookies (including _ga and
_ga_<container>) to distinguish visitors and sessions. These cookies are
not strictly necessary, so we only set them if you give consent through our cookie banner.
Until you consent, Google Analytics is not loaded. You can withdraw or change your consent
at any time using the "Cookie settings" link in the website footer.
We have configured Google Analytics to use Google Consent Mode and we have disabled Google Signals and the sharing of analytics data for advertising purposes. Google Analytics 4 does not log or store IP addresses; IP addresses are used only transiently to derive approximate location and are then discarded. We do not use analytics data to serve advertising to you.
Google processes analytics information as our processor and in accordance with Google's own terms and privacy policy. Some processing may take place outside the United Kingdom (see section 16).
We use Sentry to help identify, investigate and resolve errors, crashes and technical problems affecting WightExplorer.
Sentry may receive technical and diagnostic information associated with an error or crash, which may include information such as:
We take reasonable steps to avoid intentionally sending unnecessary personal information to Sentry.
Crash and diagnostic information is used to maintain the security, reliability and performance of WightExplorer and to investigate technical problems.
WightExplorer may use Google services, including Google Sign-In, Google Analytics and Google Maps Platform.
Depending on the feature being used, Google may process information necessary to provide the relevant service.
For example, if you use Google Sign-In, Google processes information in accordance with Google's own privacy policies and your Google account settings.
Google Maps functionality may involve the processing of technical or location-related information necessary to provide mapping features.
Google's processing of information is governed by Google's own privacy policies and terms.
WightExplorer may allow you to sign in using Apple.
If you choose Apple Sign-In, Apple may provide us with information necessary to authenticate your account, subject to your Apple account settings and choices.
Apple's processing of your information is governed by Apple's own privacy policy and terms.
WightExplorer may allow you to sign in using Facebook Login.
If you choose to use Facebook Login, Facebook may provide WightExplorer with information necessary to authenticate and create your WightExplorer account. The information we receive depends on the Facebook Login configuration and the permissions associated with your Facebook account.
We use information received through Facebook Login to authenticate your identity, create and maintain your WightExplorer account and provide account-related functionality.
Facebook processes information in accordance with its own privacy policy and terms. You can manage certain aspects of your Facebook account and permissions through your Facebook account settings.
Using Facebook Login is optional. You can alternatively use the other authentication methods made available by WightExplorer.
We use third-party providers to operate and support WightExplorer.
These may include:
Supabase
We use Supabase for authentication, database services and storage.
Resend
We use Resend as our email delivery service for authentication emails sent through our
Supabase authentication system.
Google
We use Google services including Google Sign-In, Google Analytics and Google Maps Platform.
Apple
We may use Apple Sign-In to allow users to authenticate with an Apple account.
Facebook
We may use Facebook Login to allow users to authenticate with a Facebook account.
Expo
We use Expo's infrastructure and notification services to support the operation of the
mobile application and delivery of push notifications.
Sentry
We use Sentry for error monitoring, crash reporting and technical diagnostics.
These providers may process personal information on our behalf or as independent controllers depending on the particular service and processing involved.
We select service providers that we consider appropriate for the relevant services and take reasonable steps to ensure that personal information is handled securely and in accordance with applicable data protection requirements.
WightExplorer contains links to websites and services operated by event organisers, venues, businesses, ticket providers and other third parties.
If you follow a link from WightExplorer to another website or service, that third party may collect personal information from you in accordance with its own privacy policy.
WightExplorer does not control the privacy practices of third-party websites or services.
You should review the privacy policy of any third-party service before providing personal information or making a booking or purchase.
Event organisers and other businesses may also provide information to WightExplorer for inclusion in event or venue listings.
Where we receive personal information about you from another source, we will handle it in accordance with applicable data protection law and this Privacy Policy.
Our website may use cookies and similar technologies that are necessary for the website to operate securely and correctly.
These may include technologies used to:
We also use non-essential analytics cookies, but only where you have given consent through our cookie banner. You can accept or reject these when you first visit the website, and you can change your choice at any time using the "Cookie settings" link in the footer. Rejecting non-essential cookies will not affect your ability to use the website.
We do not use cookies for third-party advertising.
| Cookie | Provider | Purpose | Type | Expiry |
|---|---|---|---|---|
cc_cookie |
WightExplorer | Stores your cookie consent choices. | Strictly necessary | 6 months |
XSRF-TOKEN, wightexplorer_session |
WightExplorer | Security (cross-site request forgery protection) and session management for forms such as event submission. | Strictly necessary | Session / 2 hours |
_ga |
Google Analytics | Distinguishes visitors to measure site usage. Set only with your consent. | Analytics | 13 months |
_ga_<container> |
Google Analytics | Persists session state for Google Analytics 4. Set only with your consent. | Analytics | 13 months |
The mobile application may use technologies that are not technically cookies but perform similar functions, such as analytics, diagnostics or authentication technologies. These are described in the relevant sections of this Privacy Policy.
We may share personal information with:
We do not sell your personal information to third parties.
Where a service provider processes personal information on our behalf, we take reasonable steps to ensure that appropriate contractual and security arrangements are in place.
Some of the organisations we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take steps to ensure that the transfer is made in accordance with applicable UK data protection law.
Depending on the destination and circumstances, this may include relying on an adequacy regulation or decision, using appropriate contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum to standard contractual clauses, or relying on another lawful transfer mechanism where permitted.
Information about the safeguards used for a particular transfer can be requested by contacting us.
We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including where necessary to meet legal, accounting, security or dispute-resolution requirements.
Our general retention approach is:
Account information
We retain account information while your WightExplorer account remains active. When you
delete your account, we will delete or anonymise personal information that we no longer
have a legitimate or legal reason to retain.
Saved events and itinerary information
This information is generally retained while your account remains active and is deleted or
anonymised when the associated account is deleted, subject to necessary backups or legal
requirements.
Authentication information
Authentication and security information is retained for as long as necessary to maintain
account security and provide the authentication service.
Support communications
We may retain correspondence for as long as reasonably necessary to deal with your enquiry,
maintain appropriate business records and protect our legal interests.
Security, diagnostic and crash information
This information may be retained for a limited period appropriate to security monitoring,
troubleshooting and service improvement.
Backups
Information deleted from our live systems may remain temporarily in secure backups until
those backups are overwritten or deleted in accordance with our backup procedures.
Where we do not specify a fixed retention period, we determine the appropriate period based on the amount, nature and sensitivity of the information, the purpose for which it is processed, our legal obligations and whether we need it to establish or defend legal claims.
We take reasonable technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.
These measures may include access controls, authentication mechanisms, encryption and appropriate security practices for our systems and service providers.
However, no internet-based service can be guaranteed to be completely secure.
If we become aware of a personal data breach that requires notification under applicable data protection law, we will take the appropriate steps required by law.
Depending on the circumstances, you have rights under UK data protection law, including the right to:
These rights are subject to certain legal conditions and exceptions, meaning they do not apply in every circumstance.
Where we process your personal information based on legitimate interests, you have the right to object to that processing.
You may also have a right to object to certain forms of direct marketing.
We will explain any applicable exceptions or reasons if we are unable to comply with a request.
Where we rely on your consent, you can withdraw that consent at any time.
For example, you can withdraw device location permission through your device settings or disable optional notifications through your device settings or within WightExplorer where available.
Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew your consent.
You can request deletion of your WightExplorer account and associated personal information at any time.
You can do this by:
When your account is deleted, we will delete or anonymise associated personal information where we no longer have a lawful reason to retain it.
Some information may need to be retained for a limited period where required by law, necessary to establish or defend legal claims, necessary for fraud or security prevention, or contained in secure backups that have not yet been overwritten.
WightExplorer does not currently make solely automated decisions about users that produce legal effects or similarly significant effects on you.
We may use information about your location, saved events, preferences or interactions to help show you relevant events and places.
This type of personalisation does not make decisions about your legal rights or otherwise have a similarly significant effect on you.
WightExplorer may display information about events, venues, businesses and activities obtained from organisers, businesses, public sources and other third parties.
Event listings may contain links to third-party websites and may include photographs, logos or other materials.
WightExplorer does not generally collect personal information about members of the public merely because they attend an event listed in the app.
If an event organiser or third party provides personal information to WightExplorer, we will process that information in accordance with applicable data protection law.
WightExplorer is intended for users aged 18 and over.
We do not knowingly permit people under 18 to create accounts or use WightExplorer.
If we become aware that we have collected personal information from a person under 18 in connection with an account, we will take reasonable steps to assess the situation and, where appropriate, delete the account and associated personal information, subject to any legal requirement to retain information.
If you believe that a person under 18 has created an account or that we may have inadvertently collected their personal information, please contact us at app@wightexplorer.com.
We may update this Privacy Policy from time to time to reflect changes to WightExplorer, the services we use, our processing activities or applicable data protection law.
When we make changes, we will update the "Last updated" date at the top of this policy.
Where changes are significant, we will take reasonable steps to notify users where appropriate.
We recommend checking this Privacy Policy periodically to understand how your information is being handled.
If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
Information about contacting the ICO is available through the ICO's website.
If you have questions about this Privacy Policy, want to exercise your data protection rights, or have concerns about how your personal information is being handled, please contact us:
Wight Explorer Ltd
Email:
app@wightexplorer.com
We will respond to requests in accordance with applicable data protection law.