Privacy policy
This notice explains what information Harkster Limited uses when you browse, contribute to or administer Directory, why we use it and what choices you have.
Who we are
Directory is part of Alpha Capture and is operated by Harkster Limited. We are the data controller for the information described in this notice. Harkster Limited is registered in England and Wales under company number 14661786. Our registered office is 5 Providence Court, Pynes Hill, Exeter, Devon, England, EX2 5JL.
You can contact us about privacy at hello@harkster.com.
Cookies
We use an antiforgery cookie to protect public forms. A short-lived encrypted cookie may carry a confirmation reference after a form is sent. Administrator sign-in uses authentication and identity-provider cookies. These cookies support the features you request and keep the service secure. Directory does not use analytics, advertising or other non-essential tracking technologies.
Submissions and corrections
If you suggest a Source, we receive its proposed name, website, publisher, topics, geography, pricing and access details, your reasons for suggesting it and any relationship you disclose. The public form does not ask for your name or email address.
If you suggest a correction, we receive the Source, your proposed change, any evidence link and, if you choose to provide it, your contact email. Please do not include unnecessary personal, confidential or sensitive information in free-text fields.
Technical and administrator data
We use your IP address in memory to limit repeated public form requests within a 15-minute window. We do not save that rate-limit key in Directory's database. Hosting and security logs may record your IP address, browser or device details, pages requested, times and errors so we can operate and protect the service.
Authorised administrators sign in through Microsoft Entra. We use their account identifier and role to control access. We also record an administrator identifier against editorial and workflow actions where an audit trail is needed.
How and why we use information
We use this information to:
- review Source suggestions and corrections, improve listings and respond to enquiries;
- run, secure and troubleshoot Directory; and
- control administrator access and keep appropriate editorial and security records.
Our lawful basis for these activities is our legitimate interests in providing, protecting and improving Directory and responding to the information people send us. Where we must keep or disclose information to comply with the law, we rely on a legal obligation. You can object to processing based on our legitimate interests.
Providing information is optional, although a feature cannot work without its required details. We do not use this information to make solely automated decisions with legal or similarly significant effects.
Who receives information
Authorised Harkster Limited personnel can access information they need to operate, secure or review Directory. We use Microsoft Azure for website hosting and Front Door delivery, and Microsoft Entra for administrator sign-in. Service providers also support database hosting, email, security and service operations on our behalf. They receive only the information needed for their role. We do not sell personal data or share it for another company's marketing.
International transfers
Some service providers may process information outside the UK. Where this involves a restricted transfer, we use an applicable UK adequacy regulation or approved transfer safeguards, such as the UK International Data Transfer Agreement or UK Addendum, together with any supplementary measures needed for the transfer. You can ask us about the safeguards for a particular transfer using the contact details below.
How long we keep information
- The in-memory rate-limit key lasts for a 15-minute window. Hosting and security logs are kept according to the time needed to investigate errors, misuse and security incidents, and the settings of those services.
- Optional correction contact email is marked for retention review after 12 months. It can then be anonymised separately from the correction record; that action is not automatic.
- Source suggestions and correction details remain while needed for editorial review, listing history or resolving a concern, unless removed earlier.
Security
We use access controls, rate limiting and form protections to help keep Directory secure. No online service can guarantee absolute security.
Your rights
Depending on the circumstances, UK data protection law may give you the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- ask us to erase data or restrict how we use it;
- object to processing based on legitimate interests; and
- receive a portable copy of data where that right applies.
Send a request to hello@harkster.com. We may need to verify your identity before responding.
Complaints
Please contact us if you are concerned about how we handle your information. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
Children and changes
Directory is intended for professional research and is not directed at children. We do not knowingly seek personal data from children.
We may update this notice as Directory and the services supporting it change. The effective date above identifies the version currently published.
Contact
Questions about this notice or your personal data can be sent to hello@harkster.com or to Harkster Limited at 5 Providence Court, Pynes Hill, Exeter, Devon, England, EX2 5JL.