Privacy Policy

Data Security  

​

At Indi Local, we take the security of our customers' data and applications very seriously.

 

Physical Security

​

All Indi systems are located within Microsoft Azure, which provides robust physical, network, application, and operational security controls.

 

Azure's datacentres are physically secured with protections like on-premises security officers, video surveillance, intrusion detection systems. Azure facilities also have environmental protections against temperature, humidity, and electrical issues.

 

Network Security and Monitoring

​

Indi uses Azure Defender for the cloud. This provides DDoS protection, network segmentation controls, end-to-end encryption, VLAN isolation, and extensive monitoring and logging. Firewalls, virtual networks, access control policies, and forced tunnelling provide further robust defence-in-depth capabilities. 

 

Encryption

​

All Indi data is fully encrypted at rest and in transit. This includes encryption for Azure Disk Storage, SQL databases, backup data, and virtual machine disks.

Encryption protects all Indi user data from unauthorized access.

 

Identity and Access Management

​

Indi uses Microsoft Entra ID (previously known as Azure Active Directory). Microsoft Entra ID provides advanced access policies allow granular control over account access, including delegation of user identity authentication to providers such as Microsoft, Google and Facebook.

 

Certifications and Compliance

​

Microsoft Azure is certified to ISO/IEC 27001 and major compliance standards like FedRAMP, HIPAA, and PCI DSS. Rigorous third-party audits validate Azure's security controls.

​

Data Retention  

​

We retain user data for as long as they maintain an account with us. Users can delete their account and associated data at any time through our [Account Deletion] page, or by contacting us at hello@indilocal.co.uk   

​

User Rights  

​

You have the following rights regarding your personal data:  

​

• Access: You can access, update, or delete your personal information through the "My Account" page.  

• Event Data: You can change, update, or delete event details.  

• Data Deletion: You can delete your personal information through the “My Account” page. Alternatively, you can request the deletion of your personal information by emailing us at [your email address].  

 

Cookies  

​

We do not use cookies for tracking or advertising purposes. However, please note that Google Analytics may run on our website due to the website editor (Wix). You can manage your cookie preferences through your browser settings.  

​

Age Restriction  

​

While our website is accessible to users of all ages, certain events may involve age-restricted content or promote alcohol use. We expect all users to act responsibly and in compliance with relevant laws and regulations regarding age restrictions. 

​

Prohibited Activities  

​

Events listed on our website must adhere to legal and ethical standards. We prohibit the promotion or display of any illegal activities, including but not limited to:  

• Solicitation of drugs  

• Solicitation of sex or any other sexual activity  

• Any activities that violate local, national, or international laws and regulations  

​

If you come across an event on our website that displays or promotes any of these illegal activities, we strongly encourage you to report it to us immediately. Please contact our email address at (hello@indilocal.co.uk) We will investigate all reports promptly and take appropriate action in accordance with applicable laws and regulations.  

​

Third-Party Services

  

We use Azure B2C Authenticator for user verification. We also integrate with Google Calendar and Google Maps to display event details on our map. Additionally, we preview event hosts' Instagram accounts and other vendors' presence on our website. 

​

Contact Us 

​

If you have any questions or concerns about our privacy practices or wish to exercise your data rights, please contact us at hello@indilocal.co.uk