Privacy policy

Who we are

Promote Your Business is a free UK business directory operated by InstaWebsite (Codemind Ltd, UK). Our domain is promoteyourbusiness.co.uk. For any privacy questions, contact [email protected].

What we collect

When you submit a business listing via our form, we collect:

Email address (required)
Business name, contact name, mobile number (optional)
Business category, city / region, description (optional)
Whether you have a website and the URL if you provide it (optional)
Your IP address and browser user-agent at submission, for spam-prevention purposes only

When you visit the public site, we record click events on outbound listing links. These store a one-way hash of your IP (salted daily, never stored as plain text) and the page that referred you, so we can show listing owners how many clicks their entry received. We do not use third-party analytics or advertising trackers.

Why we collect it

To publish your listing in the directory once approved
To email you when your listing goes live, or to let you know if we couldn't publish it
To detect and reject spam submissions (rate limiting + Cloudflare Turnstile)
To give listing owners traffic stats on their listing page

If you submit a listing, we may add your contact details to our internal CRM (operated by InstaWebsite) so we can follow up about your business's online presence. You can ask us to remove you from this CRM at any time.

Listings we research ourselves

Some listings are added by our own research process (assisted by automated tools) rather than submitted by the business. For these we collect only information that is already publicly available: the business name, category, city, whether it has a website, its website address, and — where the business publishes one on its own website — a phone number and business contact email address. We write our own short description of the business; we do not copy text from its website.

Our lawful basis for this processing is legitimate interests (UK GDPR Article 6(1)(f)): operating a public directory of trading businesses using information those businesses have chosen to publish.

If we list your business this way and a contact email is published on your own website's domain, we may send you a single notification email telling you about the listing, with one-click options to claim it, correct it, have it removed, or opt out of any further email. We only email addresses at the business's own domain (never personal or generic mailbox providers), we honour opt-outs permanently via a suppression list, and we cap the number of such emails we send per day. To have a listing removed at any time, use the removal link in the email or contact [email protected].

Who we share with

We share your data with:

Cloudflare — runs Turnstile (the "I'm not a robot" check on the submit form)
The mail server hosting our domain — used to send your confirmation and approval emails
Hetzner Cloud (EU) — hosts our servers

We do not sell or rent your data. We do not pass it to advertisers.

How long we keep it

Approved listings: published indefinitely until you ask us to remove them
Rejected submissions: kept for 6 months for spam-pattern analysis, then deleted
Click-tracking events: 12 months, then aggregated anonymously

Your rights (UK GDPR)

You have the right to:

See what data we hold about you
Correct anything that's wrong
Have us delete your data ("right to be forgotten")
Withdraw consent and have your listing removed

Email [email protected]with your request and we'll act on it within 30 days. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We don't set tracking cookies. The only cookies on this site are essential ones from our session-management framework when you sign in to the admin area, and third-party cookies set by Cloudflare Turnstile during the security check on the submit form.

Changes to this policy

If we make material changes we'll update the "last updated" date at the top and, where appropriate, email submitters of active listings.