This Privacy Policy explains how thelistdir.com (“we”, “us”, or “our”) processes personal information when you visit or interact with the Site. We are committed to transparency and to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) where they apply to our activities. This Policy should be read together with our Cookie Policy, which describes how we use cookies and similar technologies.
Data controller and contact
For the purposes of UK data protection law, the data controller responsible for personal data processed through the Site is the organisation operating thelistdir.com. If you have questions about this Policy, wish to exercise your rights, or need to escalate a concern, please contact info@thelistdir.com. You may also complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk. We encourage you to contact us first so we can try to resolve your concern promptly.
Categories of personal data we may process
Depending on how you use the Site, we may process the following categories of information: (1) technical and usage data, including IP address, browser type and version, device type, operating system, referring URL, pages viewed, approximate geographic area derived from IP, timestamps, and diagnostic logs generated by our servers and security tools; (2) cookie identifiers and similar technologies as described in our Cookie Policy; (3) communications data if you email us, including your email address, message content, attachments you choose to send, and metadata such as delivery timestamps; and (4) records we create when responding to requests, complaints, or regulatory correspondence. We do not intend to collect special category data (such as health information). If you voluntarily include sensitive information in an email, we will only use it to handle your enquiry unless a separate lawful basis applies.
Purposes and lawful bases of processing
We process personal data for specific purposes and only where we have a lawful basis under UK GDPR. We rely on: (a) legitimate interests to operate, secure, and improve the Site, to detect and prevent abuse, to analyse aggregated traffic patterns, and to defend legal claims, balanced against your rights and freedoms; (b) consent where required for non-essential cookies or similar technologies, as managed through our cookie banner and browser settings; (c) performance of a contract where we have a direct agreement with you (for example responding to a paid service request, if offered); and (d) legal obligation where we must retain or disclose information to regulators, law enforcement, or courts. Where we rely on legitimate interests, you may object to processing that affects you, and we will assess your objection in line with applicable law.
Automated decision-making and profiling
We do not use automated decision-making that produces legal or similarly significant effects solely from profiling in relation to visitors to the Site. Analytics tools may process usage data in aggregate to understand trends; such reporting typically does not identify you as an individual.
Sharing and recipients
We may share personal data with service providers who host the Site, provide content delivery, security monitoring, email delivery, analytics, or backup services. These providers process data on our instructions under contractual terms that require confidentiality and appropriate security measures. We may disclose information if required by law, court order, or regulatory request, or to protect the rights, property, or safety of users, the public, or ourselves. If the Site structure includes affiliate tracking, third-party operators may receive referral signals when you click outbound links; their privacy notices govern data collected on their domains.
International transfers
If personal data is transferred outside the United Kingdom, we ensure appropriate safeguards such as the UK International Data Transfer Agreement, standard contractual clauses, or adequacy regulations, unless a derogation applies. You may request further information about transfers by contacting us.
Retention
We retain personal data only for as long as necessary for the purposes described, including satisfying legal, accounting, or reporting requirements. Server logs and security records may be kept for limited periods consistent with incident investigation needs. Email correspondence may be retained to manage ongoing relationships or disputes unless you request deletion and we have no overriding obligation to keep records.
Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. No internet transmission is completely secure; you should use updated browsers and protect your devices with strong passwords and current security patches.
Your rights
Subject to applicable law, you may have the right to access your personal data, rectify inaccuracies, erase data in certain circumstances, restrict processing, object to processing based on legitimate interests, data portability where processing is automated and based on consent or contract, and withdraw consent where processing is consent-based. You may lodge a complaint with the ICO. We will respond to rights requests within one month unless complexity requires an extension, in which case we will explain the reason.
Children
The Site is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe we have received such information, please contact us so we can delete it promptly.
Changes to this Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. The revised version will be posted on this page, and where appropriate we will provide a more prominent notice. Continued use of the Site after updates take effect constitutes acknowledgement of the revised Policy where permitted by law.