What we hold, and how to make us stop.

Make a request

This reaches us directly and does not go through a person first. We answer within 30 days.

Your email address

What would you like us to do? Tell me what you hold about me Delete what you hold, and stop contacting me

Send the request

What we collect about a business

Business contact details and public listing information — name, website, address, phone number, category — from public directories and from the business's own website. Snapshots of public pages of that website. Public reviews. None of it is behind a login, and our crawler obeys robots.txt (details).

Where a published business address happens to be a person's name — a sole trader, a named practitioner — it is personal data and everything below applies to it.

What we collect about a subscriber

What you typed into the signup form: your business name, its website, its postal address, your name and your email address. Which reports we produced and sent you, and whether you opened the billing page.

Your password is stored as a scrypt hash. We cannot read it, which is why we cannot tell it back to you.

Stripe holds your card details and we never see them. We keep the customer and subscription identifiers Stripe gives us, so we know what you are owed.

Why we are allowed to

For subscribers: to perform the contract you entered into. For business contact data before that: our legitimate interest in offering a relevant business service to a business, balanced against the interest of the person whose address it is — which is why every message carries a one-click opt-out that works without a reply, and why opting out is permanent.

Who else sees it

Stripe, for payments. Our email provider, to deliver messages. Our hosting provider. Nobody else: we do not sell, rent or share this data, and we do not use one customer's evidence to write another customer's report.

How long

Reports and the evidence behind them are kept while you are a subscriber and for one year after, so a finding stays traceable. Suppression records — the list of addresses that asked not to be contacted — are kept permanently and deliberately: deleting one is how somebody gets emailed again after asking us not to.

Your rights

Access, correction, deletion, restriction, objection, and portability, and the right to complain to your data protection authority. Use the form above, or write to us.

Cookies

This site sets no cookies and runs no analytics or advertising script. The only place a cookie is set is the operator's own dashboard, which is not part of the public site.