Privacy Policy

This covers everybody who uses LinksTC: people who browse the directory and contact a business, and people who create an account to list one.

If you are here to find a business, sections 2 and 3 are the ones about you — browsing and contacting, and reporting a listing. If you list a business here, those two still apply to you as a visitor, and sections 4 to 7 are about your account and your listing. Sections 8 onwards are about everybody.

You do not need an account to use this site, and we do not ask you for one. We set no advertising cookie, run no tracking pixel, and do not follow you to other websites. This site sets no cookie of its own at all — the only one that can ever appear is the short-lived cookie described in section 3, and only where the Cloudflare challenge is enabled on the report form.

The tap goes to the business, not through us. Once you have called, messaged or emailed them, that conversation is between you and them and we are not part of it and cannot see it.

The report form asks for three things: a reason from a short list, a description of the problem, and an email address. The description is required — a report with no explanation is one nobody can act on. The email address is optional: leave it empty and we hold nothing at all that identifies you.

If you do give an address, we use it for two things and no others. One is to come back to you about that report. The other is to limit how many reports one address can file in an hour, so the queue cannot be flooded. We store it lower-cased and with spaces trimmed off the ends, which is what makes the second of those work — otherwise the same address written two ways would count as two people. It is not added to a mailing list, because there is no mailing list.

Two checks run on every report, and neither collects anything about you. The form carries a hidden field that a person never sees and never fills in, so anything arriving with it filled in came from automated software. And a submission that arrives within a few seconds of the page loading is refused, because a person has not had time to read the form. Both are properties of the submission itself — there is nothing in either for us to store, and nothing is stored.

Where a Cloudflare Turnstile challenge is enabledon the form, a third check runs and it is not ours. Turnstile is a challenge run by Cloudflare that works out whether a submission is coming from a person or from a script, usually without asking you to do anything. To do that Cloudflare receives information about your connection and your browser — including your IP address — and may set a short-lived cookie on this site to remember that the challenge has already passed. That handling is Cloudflare’s and is described in their own documentation; we receive only its yes-or-no answer, and we use it for nothing but deciding whether to accept the report.

What happens to a report after that — who reads it and what the outcomes are — is in the Terms of Use, section 6.

Your account. Your name, your email address, and a contact phone number if you give us one during onboarding. Your password is never stored — our authentication provider keeps a one-way hash of it, and nobody at LinksTC can read it or recover it.

Your listing. Your business name and web address, your descriptions, the services and prices you enter, the categories and areas you choose, and the logo, cover image and portfolio photographs you upload. Also the public contact details you choose to publish — phone, WhatsApp, email, website, Instagram, Facebook.

Your agreement to these documents. The date you accepted them and which version you accepted. Nothing else about that moment is stored.

What happened to your listing. Its current state, when it was submitted and approved, the reason for any decision that went against you, and a dated record of every one of those decisions and who made it.

Notes and reports. Notes our staff write about a listing while reviewing it, and any report a member of the public files about your listing. Neither is shown to you.

Your listing is visible to anyone once it has been approved, and only then. A draft, a listing waiting for review, and a listing that was declined or suspended are visible to you and to our staff, and to nobody else.

Staff notes, the record of decisions, and reports filed about your listing are not public and are not shown to other vendors.

To run your listing, to review it, to tell you what happened to it, and to keep an honest record of decisions we made. That is the whole of it. We do not sell it, we do not share it with advertisers, and we do not send marketing email — every message from us is about something that happened to your account or your listing.

There is no advertising network on this site, no tracking pixel and no analytics cookie. This site sets no cookie of its own at all. The only cookie that can appear on it is the short-lived one described in section 3, and only where the Cloudflare challenge is enabled. The dashboard you sign in to in order to manage your listing is a separate site on its own address, and the cookie that keeps you signed in belongs to that one.

Running the platform means using a few services, and your information passes through them:

• Supabase — the database, the sign-in system and the storage your images sit in.
• Resend — sends the email we send you, so it handles your address and the contents of those messages.
• Cloudflare — serves the site and its domain names, and runs the Turnstile challenge on the report form described in section 3.

Each is used to run LinksTC and for nothing else. Nobody else is given your information.

Your account and your listing are kept while your account exists. Ask us to close it and the listing comes off the public site and the images you uploaded are deleted.

The dated record of decisions made about a listing is kept after that. A record of what was decided, and by whom, is not something we can honestly delete on request — but it holds the decision, not your listing’s content.

• a copy of what we hold about you;
• a correction, if something is wrong — most of it you can edit yourself;
• your account closed and your listing and images deleted.

Write to us at the address below. We will come back to you within 30 days, and normally much sooner.

Everything travels over an encrypted connection, and the database refuses a request for another vendor’s record regardless of what the interface offers — that rule lives in the database rather than in the screens, so a bug in a screen cannot get round it.

If we change this policy we publish the new version with a new date and email everyone with an account.

Write to hello@linkstc.com with any question about your information, or to ask for any of the things in section 10.