Privacy Policy
What we collect, why we have it, and who can see it. Short version: your business details are the product, your personal data is not for sale.
Last updated
What we collect
- Company details you give us — name, address, country, telephone, fax, website, logo, the activities and products you select, and the description you write.
- Contact people you choose to list — name, job title, department, direct line, mobile, email.
- Account details — the name and email of each person who signs in, and a one-way hash of their password. We never store a password we could read.
- What you post — offers, inquiries, job vacancies, job applications and any documents attached to them.
- Billing records — invoices, payments and the membership they relate to.
- Technical data — a sign-in cookie, and basic server logs. See our cookie policy.
- Sign-in records — the date and time of each successful sign-in to your account, the IP address it came from and the browser used. We keep these for 24 months and then delete them. They are used for two things only: answering you if you ask who has been in your account, and letting us see which accounts have gone unused. They are never used for marketing, never sold, and never shown to anyone outside your company except our own staff. A member of our staff opening your account is recorded here too, and is labelled as staff.
Who can see it
This is the part worth reading carefully, because a directory only works if what is public is public on purpose.
- Anyone can see a listed company's name, country, activities, products and description.
- Members only can see contact details — telephone, email, website, named contacts and their direct lines. This is enforced on our servers, so the data is not in the page for someone to read out of the source.
- Only the company that posted a vacancy can see who applied for it, their email and the document they attached. That file is served through a permission check rather than sitting at a public URL.
- Only you and our staff can see your billing records, sign-in details and anything you have not published.
What we do with it
We use it to run the directory and marketplace, to bill you, to send transactional messages such as verification codes, invoices and replies to your listings, and to keep the site secure.
We send marketing email only where you have not opted out, and every marketing message carries an unsubscribe link that works. Transactional messages — an OTP, an invoice, a reply to your offer — are not marketing and are not suppressed.
Analytics
We use Google Analytics 4 to count visits and see which pages are read. It is off until you accept it: the page asks Google to store nothing by default, and the bar at the foot of the page is what changes that. Decline, and no analytics cookie is ever set.
Advertising features are switched off, so nothing is matched to your Google account and nothing is used to target advertising anywhere.
The address of the page you are on is sent, with any token taken out of it first — an invoice reference, an unsubscribe link or an email address in a URL is replaced before it leaves your browser. We send Google no name, no email address and no company name, ever.
Google is the processor for this and their own policy applies to what they do with it. You can decline it here, change your mind from the cookie policy page, or block cookies in your browser.
What we do not do
- We do not sell your personal data.
- We do not sell or rent our member list.
- We do not run advertising networks or retargeting pixels, and we have turned off the advertising features of our analytics.
- We do not use your data to train anything.
Who we share it with
Only where it is needed to run the service: our hosting provider, our email delivery, and our payment processor when card payment is used. They act on our instructions. Beyond that, we share data when the law requires it.
How long we keep it
Listings and the content you post stay while your account is open. Billing records are kept for as long as tax and company law require. When you close an account we remove your listing from public view and delete what we are not required to keep.
Some of our records go back to 2000. If you have been a member that long, we still hold your original registration and invoice history — ask and we will tell you exactly what.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Most of it you can change yourself from your dashboard at any time.
Use contact us and we will respond. If we cannot do what you ask — usually because we are required to keep a billing record — we will tell you why.
Security, honestly stated
Passwords are hashed. Sign-in uses a cookie that JavaScript cannot read. Uploaded files are stored so they cannot be executed, and files containing personal data — job applications, member documents — are served through a permission check rather than from a public folder.
No system is perfect. If you find a security problem with this site, please tell us (contact us) before telling anyone else, and we will fix it.