GDPR Policy

2.1 Lawfulness, Fairness and Transparency

• We process data lawfully under defined legal bases (contract, legitimate interests, consent, legal obligations)
• We are transparent about what data we collect and why (see Privacy Policy)
• We treat all data subjects fairly without discrimination

2.2 Purpose Limitation

• Data collected for specific, explicit, and legitimate purposes
• We do not use data for unrelated purposes without your consent
• Purpose clearly stated at point of collection

2.3 Data Minimisation

• We aim to collect only data that is adequate, relevant, and necessary
• We avoid collecting excessive or unnecessary information
• We do not collect your date of birth

2.4 Accuracy

• We take reasonable steps to ensure data accuracy
• You can update your profile information at any time
• We correct inaccuracies promptly upon notification
• Periodic verification of representative credentials

2.5 Storage Limitation

• Data retained only as long as necessary for stated purposes
• Retention periods for each category are set out in our Privacy Policy

2.6 Integrity and Confidentiality (Security)

Our security measures are described accurately in our Data Protection Policy.

2.7 Accountability

• We are registered with the ICO (registration ZA198500)
• We record admin review decisions against each listing
• We keep a record of personal data breaches

3.1 Contract (Article 6(1)(b))

• Account, registration and listing administration
• Delivering the directory service you sign up for
• Processing featured listing payments and related records

3.2 Legitimate Interests (Article 6(1)(f))

• Security, fraud prevention and site integrity
• Proportionate B2B outreach to firm business addresses (with PECR opt-out)

Where we rely on legitimate interests we balance our interests against yours. Details are in our Privacy Policy.

3.3 Legal Obligations (Article 6(1)(c))

• Complying with law enforcement requests
• Tax and accounting record retention
• Responding to regulatory enquiries

3.4 Consent (Article 6(1)(a))

• Public directory profiles and contact details you choose to publish (unticked consent box at registration)

You may withdraw consent at any time by contacting us or updating your listing.