Privacy Policy

If you’re browsing the directory

We don’t require an account to search or view listings, and we don’t use tracking or advertising cookies. When you view a listing, we record an anonymous count of that view against the listing, with no personal or device information stored alongside it. This is used only to show partners how their listing is performing, which is a legitimate interest that doesn’t need your consent.

If you list your organisation, or sign up

We collect the contact details and business information you give us: name, email, phone, company details, and anything else you add to your listing. We use this to provide the listing and account service you’ve signed up for. If you create an account, we use a session cookie to keep you signed in; this is required for the site to work and isn’t used for tracking.

Submissions to the directory are reviewed before they go live. If you contact us for support, we’ll use your details only to respond to you.

When you register a listing we also record your IP address and the country it indicates. We use this solely to help prevent fraudulent listings, for example spotting several registrations from the same source, and we keep it for 12 months before deleting it.

Payments

Paid listings are processed by Stripe. We never see or store your card details; Stripe handles payment data directly under its own privacy policy.

Who else sees your data

We use a small number of service providers to run the directory:

• Supabase: hosts our database and handles account sign-in.
• Stripe: processes payments for paid listings.
• Mailjet: sends account and listing-related emails on our behalf.
• Anthropic: automatically checks listing text and images before they’re saved, to keep the directory free of inappropriate content.

Stripe, Mailjet and Anthropic may process data outside the UK, including in the United States. Where they do, they rely on legal safeguards such as the UK’s International Data Transfer Addendum or equivalent standard contractual clauses to protect it.

We don’t sell your data, and we don’t share it with anyone else for marketing purposes.

How long we keep it

We keep listing and account information for as long as your listing is active, and for up to 24 months afterwards in case you want to restore it. After that we delete it, unless we need to keep something longer to meet a legal obligation. You can also ask us to delete your data sooner; see below.

Your rights

Under UK data protection law, you can ask us to show you what we hold about you, correct it, delete it, or export it. To do any of this, contact us using the details below.

If you’re unhappy with how we’ve handled your data, you can also complain to the UK’s data protection regulator, the Information Commissioner’s Office, at ico.org.uk, though we’d appreciate the chance to sort it out directly first.

Contact

Questions about this policy, or a request about your data: directory-support@cctvusergroup.com.