Privacy Policy

DataLists is a trading name of DEMC Digital Limited, a company registered in England and Wales. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

ICO Registration Number: [PENDING — to be added upon registration]
Data controller: DEMC Digital Limited
Contact: privacy@datalists.co.uk

1. What data we collect

From buyers (people submitting a data brief):

• Full name
• Business email address
• Company name and website
• Details of the data you are looking to source (use case, target audience, volume)

From data providers applying to list on the directory:

• Company name and contact name
• Business email address and phone number
• Company website and description
• Data specialisms and geographic coverage

From all visitors:

• Pages visited and time spent on site (via Google Analytics 4)
• Search queries entered on the site
• Approximate location (country/city level, via Google Analytics)
• Device type and browser

2. How we use your data

3. Legal basis for processing

We process your data under the following lawful bases:

• Legitimate interests — for brief submissions and provider matching, where both parties have a clear commercial interest in the connection
• Consent — for any marketing communications, which you can withdraw at any time
• Legal obligation — where we are required to process data by law

4. Who we share your data with

We share buyer brief details with B2B data providers listed on our directory who are relevant to your requirements. We do not sell personal data to any third party.

We use the following third-party services which may process your data:

• Supabase — database and authentication (data stored in the EU)
• Resend — transactional email delivery
• Google Analytics 4 — website analytics (Google LLC, US — subject to standard contractual clauses)

5. How long we keep your data

• Brief submissions: 24 months from the date of submission
• Provider listings: for the duration of the listing plus 12 months after removal
• Analytics data: 14 months (Google Analytics default retention)
• Enquiry and contact form messages: 12 months

6. Your rights

Under UK GDPR you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data in certain circumstances
• Restriction — request that we limit how we process your data
• Portability — receive your data in a portable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time where consent is the lawful basis

To exercise any of these rights, email us at privacy@datalists.co.uk. We will respond within 30 days.

7. Cookies

We use Google Analytics cookies to understand site usage. These are analytics cookies only — we do not use advertising or tracking cookies. By continuing to use the site you accept the use of these cookies. You can opt out of Google Analytics tracking at any time using the Google Analytics opt-out browser add-on available at tools.google.com/dlpage/gaoptout.

8. International transfers

Google Analytics data may be transferred to and processed in the United States by Google LLC. This transfer is subject to appropriate safeguards including standard contractual clauses approved by the UK ICO.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last updated. We will notify registered users of any material changes by email where possible.

10. Complaints

If you are unhappy with how we handle your data you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.