Privacy Policy

This Privacy Policy explains how personal information is handled when you use SimpleSearch.co.uk (“SimpleSearch”).

SimpleSearch is operated by Open Convergence Ltd, a company registered in England and Wales. Open Convergence Ltd is the controller of personal information processed through SimpleSearch.

Information we collect

The information we process depends on how you use SimpleSearch.

Accounts

If you create an account, we may process your email address, display name, account identifier and information associated with authentication and account activity.

You can sign in using an email address and password or, where available, Google sign-in.

Listings, suggestions and reports

If you submit a listing or use a signed-in reporting feature, we may process the information you provide together with your account identifier and the date and time of the submission.

This may include business or service information such as a name, website, category, location and information supplied in notes or reports.

Emails

If you contact us by email, we receive the information contained in your message and your email address. Email correspondence is handled separately from the SimpleSearch website database.

Directory and Phone Book information

SimpleSearch may publish business and organisational information obtained from official websites, public sources, businesses themselves or user suggestions.

This can include business names, locations, telephone numbers, email addresses, opening hours and links to official contact pages.

Published contact information is checked against a recorded source before publication.

Usage information

SimpleSearch records limited information about how the directory is used, including:

• pages viewed;
• categories viewed;
• searches and search terms;
• the number of results returned; and
• outbound listing clicks.

These records do not contain your SimpleSearch user ID, IP address, browser details or device information and are not designed to identify individual users.

Search terms are recorded as entered. Please avoid entering personal or sensitive information into the search box.

Abuse and spam prevention

We use limited technical information to protect submission and sign-up facilities from abuse.

An IP address and browser information may be used temporarily to create a one-way identifier for rate limiting. The raw IP address and browser information are not retained in the rate-limit record.

Why we use information

We process information where necessary to:

• create and operate user accounts;
• authenticate users and maintain signed-in sessions;
• review and administer listing submissions and reports;
• operate, maintain and secure SimpleSearch;
• prevent spam, abuse and unauthorised activity;
• provide and maintain the directory and Phone Book;
• respond to communications;
• understand how the directory is being used; and
• identify areas where SimpleSearch can be improved.

Our lawful bases

Depending on the circumstances, we rely on the following lawful bases under UK data protection law:

Contract — where processing is necessary to provide account features or services that you request.

Legitimate interests — where processing is necessary to operate, secure, maintain and improve SimpleSearch; review submissions; prevent abuse; understand use of the directory; and maintain useful business and organisational directory information.

When relying on legitimate interests, we consider the purpose of the processing, whether it is necessary and its potential impact on people's rights and interests.

Legal obligation — where we need to process or retain information to comply with a legal requirement.

Where another lawful basis is required for a particular activity, we will use the appropriate basis.

Information from public and official sources

Some information displayed by SimpleSearch is not collected directly from the person or organisation concerned.

Directory information may be obtained from official websites, government services and other publicly available sources. It may also be provided by users suggesting additions or corrections.

The categories of information obtained in this way can include business or organisation names, websites, locations and published contact information.

We use this information to operate and maintain the SimpleSearch directory and Phone Book.

If information about you is incorrect or you believe it should not be displayed, please contact us so that we can review it.

Who we share information with

We use service providers where necessary to operate SimpleSearch.

Lovable Cloud provides infrastructure used for hosting, database services and authentication.

Google is involved where you choose Google sign-in. SimpleSearch also currently uses Google-hosted web fonts, which means your browser may make requests to Google's servers when pages are displayed.

We may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal rights.

We do not sell personal information.

SimpleSearch does not currently use third-party advertising or third-party website analytics services.

International processing

Some service providers may process information using infrastructure outside the United Kingdom.

Where UK data protection law requires safeguards for an international transfer of personal information, we will take appropriate steps to ensure those requirements are met.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it is held, taking account of operational, security and legal requirements.

Detailed SimpleSearch usage records are retained for up to 90 days. They are then removed after aggregated daily statistics have been produced.

Temporary rate-limiting records used for abuse prevention are periodically removed, normally after approximately two days.

Account, submission and reporting information is currently retained while it remains necessary to operate and administer SimpleSearch. We periodically review the information we hold and may remove information that is no longer required.

Email correspondence is handled separately from the website database and may be retained where reasonably necessary to deal with the enquiry and maintain appropriate business records.

Browser storage

When you sign in, SimpleSearch uses browser local storage to maintain your authenticated session. This is necessary to provide the signed-in account functionality you request.

Google sign-in may also use storage or similar technologies as part of its authentication process.

More information about storage technologies used by SimpleSearch is available on our Cookies page.

Security

We use technical and organisational measures designed to protect information held by SimpleSearch.

Access to administrative information such as submissions, reports, subscribers and detailed analytics is restricted to authorised administrators. Public users can access approved listings and published contact information but not internal Trust Scores or administrative notes.

No internet service can guarantee absolute security.

Your data protection rights

Depending on the circumstances and the lawful basis involved, UK data protection law may give you rights including:

• access to personal information we hold about you;
• correction of inaccurate or incomplete information;
• deletion of your personal information in certain circumstances;
• restriction of processing in certain circumstances;
• objection to certain processing;
• data portability in certain circumstances; and
• withdrawal of consent where processing is based on consent.

You have the right to object to processing based on legitimate interests in certain circumstances.

These rights are not absolute and may depend on why and how the information is being processed.

To make a privacy request, email contact@simplesearch.co.uk.

Complaints

If you have concerns about how your personal information is handled, please contact us first at contact@simplesearch.co.uk so that we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Changes to this policy

We may update this Privacy Policy when SimpleSearch changes or where legal or regulatory requirements change.

The latest version will be published on this page with its revision date.

Contact

For privacy questions or requests, contact:

Open Convergence Ltd
Email: contact@simplesearch.co.uk