Privacy

What the forms collect

Enquiries, claims, contact messages and paid-plan requests collect your name, email and the message, plus a phone number if you choose to give one on a claim. Each of those forms requires a tick saying we may contact you about that request. A second tick, off by default, covers directory news. Marketing is not a condition of the request.

Reviews collect a display name, the review, a rating, the relationship you declare, and an email address that is not published. The email is used to investigate suspected fake reviews. That is a separate purpose from marketing.

Listings that are not personal data

Example listings are fictional. A later import from the Companies House basic company data product would store company name, number, status and registered office. It would not import officer names or home addresses. Those personal details are opt-in, and only via a claim or a form the person sends.

If a business supplies a Google place id, that id is the only Google field stored. Place details, if shown, are fetched live and are not written into the directory database. Attribution is shown beside them.

CRM

Leads, claims, contact messages, reviews and payment requests emit an event. If a webhook URL for ktech-crm is configured, the event is posted there. If it is not, the event stays in the local outbox. Payment events do not contain card numbers. The form never asks for them.

Cookies and retention

The site does not set analytics or advertising cookies. A rate limit for public forms is stored in the database against the network address. It is not a cookie. Town and category pages also increment a view counter for that page. The counter is not tied to a person.

Draft retention, to be confirmed before launch: enquiry, claim, contact and payment records for 24 months, then delete or anonymise; review emails for as long as the review is published and for a short period after removal if a dispute is open. You can ask for access, correction or deletion of your personal data through the contact form. A published review may be kept where the review policy says it should remain, with the email removed or reduced where that can be done without hiding a genuine review.

Legal bases

Contact about a request you submitted is steps toward a contract, or a request you made. Marketing uses the optional tick, which is consent and can be withdrawn. Publishing a company from the public register would rely on legitimate interests, weighed against the fact that officer personal data is excluded. Investigating fake reviews is legitimate interests in running a lawful review site.