Privacy & your information

Submissions, enquiries and claims

Your account name, verified email and account identifier are stored so you can manage your submissions and approved listings. Passwords are stored as scrypt hashes, not readable passwords. Necessary secure sign-in cookies and server-side session records keep you signed in; these are separate from optional analytics. Verification and password reset emails are transactional messages, not a marketing subscription. Outgoing account messages use Resend when configured; their content and recipient address are passed to that service for delivery. Replies go to the directory contact address.

Business ownership, photos and billing

Claim evidence, contact details, draft changes and staff review notes stay private. We check ownership separately from email verification. Do not submit government identity documents, passwords or payment-card details. Submitted business information and photos become public only after review and approval. Pending photos can be viewed by their submitter and authorised staff.

Premium and advertising purchases are currently disabled. When enabled, payment details are collected through Stripe Checkout. The directory stores billing identifiers, package and payment status, dates and amounts; it does not store card details. Owners can view reports only for listings linked to their account.

Search and saved listings

Search terms appear in the page URL and are processed by the server to return results. Do not put sensitive information in a search. Saved listing IDs use local storage on this device. Remove a bookmark to delete it. Privacy choices also use local storage so this device can remember your decision.

Optional analytics

Measurement is off until you choose to allow it. Anonymous aggregate counts cover page and listing views, searches, website and map clicks, referring website hostname and a broad screen-size category. We do not store analytics cookies, IP addresses, visitor IDs, individual search terms, full referrer URLs or sessions. These counts cannot identify unique visitors.

Sponsored click and visible impression measurement require the additional promotion measurement choice. Visible impressions are counted only with consent to the current choice and after a placement is at least half visible for one second. Earlier click-only permission does not enable impression measurement. No advertising network or third-party tracking script is installed. Browser Do Not Track and Global Privacy Control signals disable this measurement. Use “Privacy choices” at the bottom of the screen to change or withdraw permission.

Retention and your requests

Analytics and resolved, rejected or spam submissions are configured for retention of 365 days, followed by the operator’s cleanup process. Pending cases remain until reviewed. Administrative change history is kept to maintain the directory and resolve disputes. Customer sign-in is managed by the directory. Hosting infrastructure and restricted staff sign-in are supplied by the hosting service under its own terms. Account sessions expire within seven days unless renewed, verification links within one hour, and password reset links within 30 minutes. Expired security records and email attempt logs older than 30 days can be removed through the restricted administration cleanup. Security rate limits use keyed hashes rather than storing raw IP addresses in the directory database. Pending claims and account records remain while needed for account management and review; contact us for a removal request.

For access, correction, removal or other privacy requests, contact contact@foundinfalkirk.co.uk.

External websites and open data

Business, booking, source and map links open other providers whose own policies apply. Public listing data comes from the sources and licences shown on each record and the sources page. A public record is not an ownership or trading-status check.