Who controls the data
[TODO: OWNER TO SUPPLY — legal name of the website owner/operator and country of establishment]. Data requests: [TODO: OWNER TO SUPPLY — monitored privacy/data-request email].
Data that may be collected
The site may receive information a visitor voluntarily submits by email or through future forms, including a name, contact details, business information and message content. Hosting and security services may process an IP address, browser and device information, requested URLs, timestamps, referral information and technical logs.
Business-directory submissions
When a business is submitted, the site receives the submitter’s name and email for review, plus information intended for publication: business name, description, category, service area, service languages and selected public contact details. The submitter name and verification email are not published. A submission is retained with its review status and may be rejected, corrected or removed to prevent fraud and abuse.
Cookies, analytics and Google
Cookies or local storage may support security, language preferences, audience measurement and, after approval, advertising. Third-party advertising vendors, including Google, may use cookies to serve and measure ads based on a visitor’s previous visits to this and other websites. Visitors can manage Google personalized advertising in Google Ads Settings.
EEA and UK consent and withdrawal
Before advertising technologies are enabled for visitors in the EEA and United Kingdom, the site must use a Google-certified consent management platform. Where consent is required, it will be requested before non-essential cookies are stored or personal data is used for personalized advertising. Visitors must be able to reject consent or withdraw it through a permanently accessible privacy-settings link. Withdrawal does not affect processing that was lawful before withdrawal.
Purposes, legal bases, sharing and retention
Data may be used to answer enquiries, secure the service, prevent abuse, measure performance and meet legal obligations. The legal basis may be consent, steps requested by the visitor, legitimate interests in operating and securing the publication, or a legal obligation. Infrastructure and analytics providers receive only data needed for their services under their terms. [TODO: OWNER TO SUPPLY — actual retention periods for enquiries, logs and analytics].
Rights and requests
Depending on applicable law, a visitor may request access, correction, deletion, restriction or portability, or object to processing. Requests should be sent to [TODO: OWNER TO SUPPLY — data-request email]. Reasonable identity verification may be required to protect personal data.