Privacy Policy

Slanya is a discreet venue-safety alert system used by bars, clubs, and venues in the UK. This policy covers data collected through the Slanya website, the patron alert flow, and the venue portal.

Patrons submitting an alert are not identified. The alert flow (scanning a QR code and tapping an option) doesn't ask for a name, an account, or any personal detail — we only know the alert type, the venue, and which stall it came from (if applicable). A short-lived browser cookie is used purely to rate-limit submissions (one per device per minute) and carries no personal information.

Venue and staff accounts — a venue's name, address, and staff contact details; individual portal staff accounts (name, email, hashed password — we never store a recoverable copy of your password).

Alert and incident records — timestamp, alert type, cubicle/stall, status, resolution notes, and which staff member responded. This builds a venue's own incident history.

Leads — if you fill in the contact form on this site, we collect your name, email, venue name, and message, to follow up with you.

Data is stored in a Postgres database (hosted via Neon, provisioned through Vercel) and encrypted in transit.

Alert and incident records are currently retained to build and preserve a venue's own incident history (useful for staff training review, and for a venue's own records).

We don't sell or share your data for marketing. It's only shared with the providers that make the service work:

• Twilio — sends the SMS alert to venue staff.
• Resend — sends account and lead-notification emails.
• Vercel / Neon — hosting and database infrastructure.

Under UK GDPR, you have the right to access, correct, delete, or export your data, and to object to or restrict how it's used. To exercise any of these, email us. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Slanya uses only functional cookies — the patron rate-limit cookie described above, and session cookies that keep staff, portal, and admin logins signed in. We use Vercel Analytics for site traffic, which is cookieless and doesn't track individuals across sites, so no cookie consent banner is required for it.

We may update this policy as the product changes. Material changes will be reflected here with an updated date at the top of the page.

Questions about this policy or your data — get in touch.