Privacy Policy

1. Introduction

This Privacy Policy explains how Kontaktee ("we", "us", "our") collects, uses, and protects personal information when you use this website. We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What information we collect

We collect personal information in the following ways:

• Business directory data: Publicly available company information sourced from Companies House (e.g. company name, registered address, status, business activity). This is not personal data about individuals in most cases, though it may include names of company officers where Companies House makes this public.
• Forms you submit to us: When you use our Contact form, Join Kontaktee forms (business or professional), or Claim a Listing feature, we collect the information you provide, which may include your name, email address, phone number, postcode, business or professional details, and social media links.
• Account information: when you create an account, we collect your email address and a password. Passwords are stored in securely hashed form by our authentication provider (Supabase) and are never visible to us.
• Logo and image uploads: claimed businesses may upload a logo or images to their listing, which we store and display on the public directory.

3. How we use your information

We use the information you provide to:

• Respond to enquiries submitted via our Contact form;
• Process business claim requests and Join Kontaktee submissions;
• Notify our team by email when a new submission is received;
• Improve and maintain the directory.

We do not use your information for marketing communications unless you have separately opted in, and we do not sell personal data to third parties.

Information submitted for business listings and professional profiles will, once reviewed and approved, be published on the public directory. This means your name, business or professional details, and any contact details or social links you provide for the listing become publicly visible on the site. Please only include contact details you are happy to display publicly.

4. Legal basis for processing

We process your personal information on the following legal bases:

• Consent: when you submit a form, you are voluntarily providing your information for the stated purpose;
• Legitimate interests: to operate, maintain, and improve the directory service, and to respond to enquiries;
• Contract: processing your account details is necessary to provide you with the account and related services.

5. Where your data is stored

Form submissions are stored using Supabase, a database and hosting provider. Email notifications of new submissions are sent via Resend, an email delivery service. Both providers act as data processors on our behalf and are contractually required to keep data secure.

6. How long we keep your data

We retain form submissions for as long as necessary to fulfil the purpose they were collected for (for example, processing a claim or registration), or until you ask us to delete it, whichever is sooner.

Account data is retained while your account remains active. You can delete your account at any time from your Account settings page. This permanently deletes your account and sign-in, your professional profile submissions, and reverts any claimed businesses back to unclaimed. It does not delete the business listing itself; see below for how to request that separately.

7. Your rights

Under UK GDPR, you have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your data;
• Object to or restrict our processing of your data;
• Withdraw consent at any time, where processing is based on consent.

You can delete your account directly from your Account settings page at any time. A business listing itself is sourced from public Companies House records rather than account data, so it isn't deleted when an account is. To request removal or correction of a listing, please contact us via our Contact page. For any other rights above, please contact us via our Contact page.

8. Cookies and analytics

This website uses strictly necessary cookies for authentication, session cookies set when you log in, provided by our authentication provider (Supabase), which are essential for account features to work. We do not use advertising or cross-site tracking cookies.

We use Vercel Analytics to understand aggregate website usage, such as page views. This is a privacy-focused analytics service that remains cookie-free and does not track individual visitors across websites.

9. Server logs

Our hosting provider (Vercel) automatically logs technical information for every request to our site, including IP address and browser/device information (user-agent). This is standard practice for maintaining site security, diagnosing issues, and detecting abuse, and is retained according to Vercel's own data retention policies. We do not use this information for tracking or marketing purposes.

10. Third-party links

This site may contain links to third-party websites, including Companies House. We are not responsible for the privacy practices of external websites.

11. Changes to this policy

We may update this Privacy Policy from time to time. Continued use of the site after changes are posted constitutes acceptance of the revised policy.

12. Contact us

If you have questions about this Privacy Policy or how we handle your data, please contact us via our Contact page. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.