Privacy policy
What personal data Listopedia collects, why, how long it is kept, who it is shared with and your rights.
Last updated: 13 November 2026
1. Who we are
This policy explains how Listopedia (“we”, “us”) handles personal data when you visit listopedia.io, submit a listing or contact us. For any privacy question or request, use the contact form and choose “Privacy or data request”.
2. Data we collect
| Situation | Data | Purpose | Legal basis (UK/EU GDPR) | Retention |
|---|---|---|---|---|
| Visiting the site | IP address, browser and device type, pages requested, date and time (server logs) | Running and securing the site, preventing abuse | Legitimate interests | Up to 90 days, unless needed to investigate abuse |
| Submitting a listing | Your name, work email, company details, message, uploaded logo and image, IP address | Reviewing and publishing the listing, contacting you about it, preventing spam | Steps at your request before a contract; legitimate interests | For as long as the listing is published, plus 24 months; rejected submissions 12 months |
| Contacting us | Your name, email, message, the pages and sources you mention, IP address | Answering your request and keeping a record of corrections | Legitimate interests; legal obligation for data-rights requests | 24 months from the last message |
| Requesting a demo or quote from a Premium partner | Your name, work email, company, request type and message, IP address | Passing your request to the company you chose; spam prevention | Consent; legitimate interests | 24 months; the company you contacted keeps its own copy under its privacy policy |
| Company profiles | Names of companies and, where part of public company records, names of directors or owners | Publishing reference information about companies | Legitimate interests | While the information remains relevant and accurate |
Your name and email from a submission or message are never published. Company information you submit for a listing (description, logo, image) is published once approved.
3. Cookies and similar technologies
- The public site does not set advertising or analytics cookies.
- Forms use a short-lived security token to prevent automated abuse.
- To report views and clicks to sponsors, the page sends an anonymous event when a sponsored card is shown or clicked. No cookie is set; repeat events from the same IP address within 30 minutes are counted once, and the IP address is not stored with the count.
- Editors who log in receive the standard WordPress session cookies, which are needed for the account to work.
4. Third-party services
- Hosting: the site and its database run on servers operated by our hosting provider, which processes data on our behalf.
- Fonts: web fonts are loaded from Google Fonts. When a page loads, your browser requests the font files from Google’s servers, which receive your IP address. See Google’s privacy policy for how Google handles this data.
- Company logos: logos are stored on our own server; your browser does not contact company websites when you view a list.
- Email: notifications about submissions and messages are sent through the server’s email service.
We do not sell personal data and do not share it with advertisers.
5. International transfers
Where a service provider processes data outside the UK or the European Economic Area, we rely on an adequacy decision or on standard contractual clauses to protect it.
6. Your rights
Under UK and EU data-protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, where we no longer need it or you withdraw consent;
- restrict or object to processing based on legitimate interests;
- receive your data in a portable format, where processing is based on a contract or consent;
- withdraw consent at any time, without affecting earlier processing.
To exercise these rights, use the contact form. We reply within one month. You can also complain to a data-protection authority, such as the Information Commissioner’s Office in the UK or the authority in your EU country of residence.
7. Security
The site is served only over HTTPS. Access to submissions and messages is limited to editors with individual accounts, and backups are protected from public access.
8. Children
Listopedia is a business reference site and is not directed at children under 16. We do not knowingly collect their data.
9. Changes to this policy
We update this policy when our practices change. The date at the top shows the latest version.