Privacy notice

Who we are

Suffolk Development Directory is run by Nenyo Consulting Ltd, a company registered in England and Wales (no. 14696300). VAT no. GB438068479. That company is responsible for (the “controller” of) the personal data described here.

Questions, requests and complaints about your data: support@suffolkdevelopmentdirectory.co.uk.

What we collect and why

For each kind of data, this says what it is, what we use it for, and the legal basis data protection law requires us to name.

Your account

Your name, email address and password. We store the password only as a one-way hash, so nobody can read it. We use these to run your account, confirm your email address and send password resets. Basis: it’s needed to provide the account you asked for (contract).

Saved listings

Listings you save and any notes you add to them. Only your account can see them. Basis: contract.

Listing requests

The business name, website, location, contact email and description you give on the request form. We use them to review the request, reply to you and, if we accept it, create the listing. Basis: steps you’ve asked us to take, and our legitimate interest in running the directory.

Listing claims

The business email and message you send when you claim a listing. We use them to check you represent the business before giving you control of its listing. Basis: legitimate interests (keeping listings in the right hands).

Published listings

A listing shows the business’s name, description, location, website, phone and email, and anything else added to it. This is personal data where the business is a sole trader or names a person. The details come from the business itself, or from what it publishes, such as its own website. We publish them so developers can find and contact the business. Basis: legitimate interests. A business can ask us to correct or remove its listing at any time.

Emails we send

We email you to confirm your address, reset your password, give our decision on a listing request or claim, and tell you when a listing goes live. We keep a record of each email: the address and name it went to, which email it was, and whether it was delivered. Basis: contract for account emails, and legitimate interests for the rest. We don’t send marketing emails.

Emails you send us

Whatever you include when you write to support@suffolkdevelopmentdirectory.co.uk. We use it to reply. Basis: legitimate interests.

Security logs

For each request to the site: your IP address, browser type, the page requested, the time, and a random identifier for your device. We use these to keep the site working and secure, to limit repeated requests and to block abuse. Basis: legitimate interests (security).

You don’t have to give us anything to browse the directory. To create an account, request a listing or claim one, we need the details the form asks for. Without them we can’t do it.

We don’t sell personal data, use it for advertising, or make automated decisions about you.

Cookies

We use one cookie, called session. It keeps you signed in and holds the random device identifier we use to limit repeated requests. It expires after 24 hours. The site needs it to work, so we don’t ask for consent. We use no analytics, advertising or third-party cookies.

Who handles it for us

• Hetzner Online GmbH (Germany) hosts the site, its database and its backups on servers in Helsinki, Finland.
• Resend, Inc. (USA) sends our emails from its EU region in Ireland. Its data processing terms cover any transfer to the US with the UK’s standard contractual clauses.
• Fastmail Pty Ltd (Australia) hosts our support inbox, which it stores in the EU and the US.

They handle the data only to provide their service to us. Where it leaves the UK and EEA, we rely on the safeguards in their data processing terms. We share data with anyone else only if the law requires it.

How long we keep it

• Your account, saved listings and claims: until you ask us to delete your account. Deleting it also deletes its saved listings, notes and claims. A listing the account managed stays up unless you ask us to remove it too.
• Published listings: while the business is listed.
• Listing requests and email records: as a record of our decisions and of what we sent. Ask and we’ll delete yours.
• Security logs: these have a fixed size, so the oldest entries are deleted automatically as new ones arrive.
• Sign-in sessions: 24 hours.
• Backups: taken daily and kept for 14 days, so deleted data can stay in a backup for up to 14 days.

Your rights

You can ask us to:

• give you a copy of your personal data;
• correct it;
• delete it;
• restrict how we use it, or object to our using it, including having a listing removed;
• send you the data you gave us in a machine-readable form.

Email support@suffolkdevelopmentdirectory.co.uk. We’ll reply within one month. Some rights have limits, for example where the law requires us to keep something, and we’ll tell you if one applies.

Complaints

If you’re unhappy with how we’ve handled your data, email support@suffolkdevelopmentdirectory.co.uk. We’ll acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome.

You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes

When the way we use personal data changes, we’ll update this page and the date at the top.