Privacy Policy
1. What we collect
When you buy a report, we collect:
- Address — the site you want evaluated (we resolve it to a geocoded location).
- Email address — where we deliver the report.
- Payment metadata — provided by Stripe, such as the checkout session and payment status. We do not receive or store your card number, and payments happen entirely on Stripe's hosted checkout.
- For a contact or custom-engagement enquiry (via our contact page): the topic, company name, approximate number of sites, decision timeline, the site or candidate list, a free-text message, and your email address.
2. Why we collect it
We collect this data to generate and deliver the report you paid for, to communicate with you about your order, and to respond to enquiries. This is necessary for the performance of the contract we have with you.
3. How we store and protect it
Data is stored in our secure systems and accessed only by people and processes that need it to fulfil an order. We apply reasonable technical and organisational measures to protect it. Stripe handles card payments under its own security obligations; we never handle card data.
4. How long we keep it
We keep order and delivery records as long as needed to provide and support the report, and to satisfy our legal and accounting obligations. You may request deletion of your personal data at any time (subject to legal retention requirements).
5. Sharing
We share personal data only with the payment processor (Stripe) and the email/SMTP provider that delivers your report, and with our service providers who help operate this site. We do not sell your personal data. We may share it where required by law.
6. Your rights
Under the PDPA you may request access to, correction of, or withdrawal of consent regarding your personal data. Contact us to exercise these rights, and we'll respond within the required timeframe.
7. Contact
Questions about this policy or your data? Contact us.