Privacy
Privacy notice
We collect the minimum needed to run accounts, publish reviews, moderate content and understand aggregate usage. Email addresses are private; display names and reviews are public.
Data we collect
- Account data: email address, display name, hashed password, email-verification time, role and session metadata.
- Content: reviews, ratings, comments and their timestamps, including edit history where implemented.
- Safety data: reports, claims, corrections, moderation notes and audit actions.
- Technical data: session cookie, user-agent stored with a session, and aggregate analytics events such as page views and searches.
Analytics
The site sends a limited set of events (page_view, search, compare_view) to its own endpoint. Analytics respects Global Privacy Control and Do Not Track. We do not store IP addresses or raw query strings in analytics records. No third-party advertising scripts are included in the demo.
Cookies
A necessary session cookie keeps you signed in. It is HTTP-only and is not used for advertising. If non-essential analytics or embedded media are added later, this notice and any consent mechanism must be updated.
Why we use data
- To create and secure accounts.
- To publish and moderate user content.
- To respond to corrections, claims and reports.
- To measure aggregate usage and improve the directory.
- To meet legal obligations and prevent abuse.
Public information
Reviews, comments, ratings and display names are public. Do not publish personal data you do not want copied, indexed or retained. Email addresses are not shown on public pages.
Retention
Session and verification tokens expire. Account data remains while the account is active. Deleting an account anonymises the profile and removes login data, while published reviews may remain attributed to “Deleted trader” to preserve community integrity. Moderation and audit records may be retained for safety and legal reasons.
Your choices
You can update your display name, change your password or request account deletion from the account page. Depending on your jurisdiction, you may also have rights to access, correct, delete, restrict or object to processing, and to complain to a data-protection authority. Use the contact route below.
Security
Passwords are stored as scrypt hashes. Session and verification tokens are stored hashed. No system is perfectly secure; do not reuse a password from another site.
Children
The service is intended for adults who can enter a binding contract. It is not directed at children.
Contact
FirmScope is a trading name of GFFC LTD. Contact: info@firmscope.co.uk. Add a postal address, Data Protection Officer (if required) and jurisdiction-specific wording before launch.