Privacy at Smooth Spots.

Updated 28 October 2026. Smooth Spots is a directory by Winback Engine.

Saved studios

Saved places stay in this browser on this device. They are not synced to an account. Clearing browser storage removes them.

Requests and private status links

We store your name, email, studio details, role, message, consent choices, referral source, request reference and submission time to review and respond to claims, additions and corrections. Only approved business details appear publicly. Review notes and your personal contact details remain private.

Your private status link contains a secret token. Keep it private: anyone with the full link can see your submitted name and email, your request’s progress and, for approved owner claims, the studio’s activity counts. We store a hash of the token with the request. Confirmation emails in the private sending queue contain your full status link.

Requests, review history and confirmation records are retained so the team can resolve issues and document approvals. You can ask for deletion at the address below. We will confirm that the request belongs to you and explain any records needed to document a published correction or ownership decision.

Optional Winback Engine interest

The assessment checkbox is separate, unchecked by default and never required for a free listing. If you opt in, the team records your consent and follow-up stage. The directory does not automatically enroll you in marketing campaigns or an external CRM.

Directory activity

We count page views, searches, profile views, shares and clicks on booking or contact links. Events contain the page path (without any search text), the domain of the website that referred you (for example “google.com”, never the full address), the studio, selected area or service, result count, time, and a limited referral source and campaign label. Events are deleted after 90 days. We do not store raw search text, raw IP addresses, persistent visitor identifiers or advertising cookies in these events. Referral labels are kept in this tab’s session storage. Browsers that send Do Not Track and signed-in administrators are excluded. If you tap “Near me”, your browser asks for permission and your location is used on your device to sort studios by approximate distance; Smooth Spots does not record your coordinates. Opening a map contacts OpenFreeMap for map tiles and may reveal the area being viewed to that provider. Pins use postcode locations from Postcodes.io rather than verified building entrances. Events older than 90 days are deleted when new activity is recorded.

Providers and email

Cloudflare provides the application and database infrastructure and may process technical request data to operate the service. Confirmation, administrator sign-in and claim-verification emails use Cloudflare Email Service, sent from noreply@smoothspots.co.uk. Replies to hello@smoothspots.co.uk are forwarded to the operator’s mailbox by Cloudflare Email Routing. Phone verification is not enabled. Request receipts and delivery records are stored in a private email queue; the on-screen private status link also works without email.

Studio photos and logos are stored with the directory where available. External image fallbacks can contact the source image host. Booking, map and website links open external services with their own privacy practices.

Request protection

To limit repeated submissions, the app stores an hourly hash derived from the connecting IP and a request count. It does not store the raw IP in these counters. Expired counters are removed when new requests arrive.

Questions or deletion requests

Email hello@smoothspots.co.uk and include your request reference, if applicable. Do not send your private status token in a public message.