Privacy

What is collected, why, who sees it, and how to have it removed. Written against the Personal Data (Privacy) Ordinance (Cap. 486).

If you ask for quotes

The enquiry form collects what you type: your name, an email address, a phone number if you give one, and your answers about the work. That is collected for one purpose - offering the enquiry to firms who do that work - and it is used for nothing else.

A firm that accepts your enquiry receives those details. That is the point of submitting it, and it is worth being explicit: your contact details are passed to a business that will contact you. Firms that decline see only the category and district, never your identity.

If you run a listed firm

Directory entries are built from public registers and from business contact details already published by the firm. Business contact information is not personal data under the Ordinance, but a person who is a sole practitioner reasonably feels otherwise, so a removal request is honoured either way and without argument.

If you have an account

An email address, a password hash, and a record of credits bought and spent. Card details are handled by Stripe and never reach this server.

Email we send

Outreach to firms carries a working unsubscribe link and our identity, as the Unsolicited Electronic Messages Ordinance requires. Unsubscribing takes effect immediately, not within ten days, and it is permanent: the address is kept as a one-way hash on a suppression list so that a later import cannot resurrect it. That hash is the only thing retained, and it exists solely to keep the promise not to write again.

How long things are kept

• Enquiries: kept while they are useful to match, then deleted.
• Account and billing records: kept as long as the account exists, and afterwards only as long as tax and audit obligations require.
• Suppression hashes: kept indefinitely, on purpose, as above.
• Map coordinates from third-party sources: not retained beyond the period their licence allows.

Your rights

Under the Ordinance you may ask what personal data is held about you, ask for it to be corrected, and ask for it to be erased. Ask via Contact and it will be answered.