Privacy Policy
What data we collect, why we collect it, how long we keep it, and the control you have over it.
Last updated 4 September 2026
1. Our approach
We collect only what the directory needs to work, and we never sell personal data.
This policy explains what we collect from brands browsing the directory, from applicants and listed experts, and from people who leave reviews.
2. What we collect
- Application and listing details: business name, website, contact email, services, locations and supporting descriptions.
- Match requests: the needs, stage and budget you select, plus the contact details you choose to share.
- Reviews: your name, company, email address, rating and written feedback.
- Case studies: the content, metrics and files an expert uploads.
- Basic technical data such as IP address and browser information, used to prevent abuse and spam.
2b. Identity verification data and retention
Identity documents are private, never published, and deleted on a defined schedule.
- We collect only what a manual identity review needs: your country, the accepted document type for that country, the document number where applicable, your full legal name, a photo of the government document and a selfie.
- Documents and selfies are stored in private storage. They are never shown on public profiles, never included in emails, and never shared with third parties. Only administrators can open them, through short-lived links that expire after ten minutes.
- Document numbers are stored masked (last four characters only) alongside a one-way hash used to spot duplicate submissions. We never keep the full number in readable form.
- Retention: identity documents and selfies are deleted 90 days after a verification decision. The verification record itself (country, document type, masked number, decision, decision date and reviewer) is kept for 24 months as proof that the check was carried out, then deleted.
- Rejected or withdrawn submissions follow the same schedule. You can ask us to delete your identity files sooner, which removes your Verified badge.
- Every view, submission and decision on identity data is written to an internal audit log.
3. How we use it
- To publish and maintain accurate listings.
- To review applications, reviews and case studies before anything is published.
- To respond to match requests and, where relevant, introduce you to recommended experts.
- To send transactional emails triggered by actions you take, such as approvals or access links.
- To detect fraudulent, duplicated or manipulated submissions.
4. What is published
Listing information is public by design. Reviewer email addresses, IP data and internal moderation notes are never published, and are visible only to the directory team.
6. Retention
Data is kept only as long as needed to operate and moderate the directory. Rejected applications and rejected reviews are retained for a limited period so we can handle appeals and prevent repeat abuse, then deleted.
7. Your rights
Email hello@faireagencydirectory.com and we will respond within a reasonable period.
- Request a copy of the personal data we hold about you.
- Ask us to correct anything inaccurate.
- Ask us to delete your data or remove your listing.
- Object to a particular use of your data.
Other policies