Last Updated: [May 1, 2025]
Version 1.1



1. Information We Collect

a. Information You Provide

  • Registration, newsletter sign-ups, comments, tips, form submissions
  • Payment details if you purchase directory listings or sponsored content

b. Information Collected Automatically

  • Usage data (pages viewed, session duration, click paths)
  • Cookies, web beacons, device identifiers

c. Information from Third-Party Sources

  • Social login details (e.g., Google, Facebook)
  • Analytics and advertising partners (e.g., Google Analytics)

2. How We Use Your Information

  • Operate & Improve the Site: Deliver content, diagnose issues, personalize your experience
  • Communicate: Send newsletters, marketing, survey requests
  • Legal Compliance & Safety: Prevent fraud, respond to legal requests, enforce our Terms
  • Business Purposes: Mergers, acquisitions, site analytics

3.1 GDPR (EU) Rights

If you’re in the EU, we process data under:

  • Consent (e.g., newsletter opt-in)
  • Legitimate Interests (site analytics, fraud prevention)
  • Contractual Necessity (fulfilling paid services)

You have the right to: access, rectify, erase, restrict processing, data portability, object to profiling, and withdraw consent. To exercise, contact our DPO at [[email protected]].

3.2 CCPA/CPRA (California) Rights

California residents may:

  • Know what personal information we collect, use, share, or sell
  • Delete personal information we hold (with legal exceptions)
  • Opt-Out of the “sale” or “sharing” of personal information
  • Limit use of sensitive personal data

To submit a request, visit Do Not Sell My Info or email us at [[email protected]]. We verify requests by matching account details; responses are provided within 45 days.

3.3 COPPA (Under-13) Safeguards

We do not knowingly collect data from children under 13. If we learn that we have, we will promptly delete it. Parents may request deletion by contacting us at [[email protected]].


4. Cookies & Tracking Technologies

We use cookies and similar tech to remember preferences, analyze traffic, and deliver personalized ads. You can manage or disable cookies via your browser settings; note that disabling may impact functionality. See our Cookie Policy for details.


5. Automated Decision-Making & Profiling

We use analytics and advertising tools that may profile your interests to serve tailored content or ads. You may opt out by disabling cookies or using browser Do-Not-Track settings.


6. Information Sharing & Disclosure

We do not sell your personal data. We may share it:

  • With service providers (hosting, email, analytics) under confidentiality agreements
  • To comply with legal obligations (subpoenas, court orders)
  • In business transfers (merger, acquisition) with confidentiality covenants

7. Third-Party Data Processors

Key partners include:

  • Google Analytics (analytics.google.com)
  • Active Campaign (activecampaign.com)
  • Stripe (stripe.com)

All processors are bound by Data Processing Agreements requiring GDPR-level protections.


8. Data Retention Schedule

Data TypeRetention Period
Newsletter sign-up & email logs6 months after last interaction
User account dataUntil account deletion + 6 months backup
Comments & tipsIndefinitely, unless removal requested
Analytics & cookie IDs12 months
Transaction records (paid listings)7 years (tax/legal compliance)

9. Data Security Practices

We employ:

  • Encryption in Transit: TLS 1.2+ for data transfer
  • Access Controls: Role-based permissions, MFA for admin access
  • Regular Audits: Quarterly security reviews and vulnerability scans

10. Data Breach Notification

In the event of a data breach, we will:

  1. Investigate and contain the incident promptly
  2. Notify affected users within 72 hours of confirmation via email and/or site banner
  3. Report to supervisory authorities as required by law

11. International Transfers

Data may be stored or processed outside your country. We safeguard transfers via Standard Contractual Clauses or equivalent measures to ensure continued protection.


12. Changes to This Policy & Version History

We may update this Policy periodically. Material changes will be highlighted via email or a prominent banner.

VersionDateNotes
1.001/10/2025Initial release
1.105/01/2025Expanded breach & retention details

13. Contact & Supervisory Authority

Privacy Inquiries & Requests:

EU DPO Contact: [[email protected]]
California CCPA Office: [[email protected]]

If you believe your rights have been violated, you may lodge a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France, or the California Attorney General).