Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how Firmdex ("we," "us") collects, uses and protects personal data when you visit firmdex.net (the "Website") and in the company records the Website publishes. The Website is a public company directory with no user accounts, logins or payment processing — this policy covers only the data practices described below.

2. Who We Are

Firmdex is the data controller for the personal data described in this policy. You can reach us at info@firmdex.net for any privacy-related question.

3. What Personal Data We Collect

When you use the Website, we collect personal data in two ways:

• Contact form: when you submit our contact form, we collect your first name, last name, email address and message.
• Automatically collected data: when analytics are active (production only — see Section 7), we may collect usage and technical data such as pages viewed, referrer, device/browser type and approximate location, depending on which tags are configured in our tag manager.

We do not collect account credentials or payment data. The company records the Website publishes are described in Section 4.

4. Company Records in the Directory

The Website publishes records about companies, such as each company's name, industry, location, size, founding year, website, contact details and social media profiles. We collect these records from public sources: company websites, business registries and public professional profiles. Company records can include contact details, such as email addresses and phone numbers, which may contain personal data.

To have a record corrected or removed, or to exercise any of the rights in Section 12, email us at info@firmdex.net.

5. How We Use Your Data

• To respond to inquiries submitted through our contact form;
• To understand how visitors use the Website and improve our content;
• Where analytics or advertising tags are enabled, to measure and, where applicable, remarket to Website traffic.

6. Legal Basis for Processing

We rely on your consent for analytics and marketing cookies where applicable, and on our legitimate interest in operating and securing the Website and responding to inquiries you submit voluntarily. For the company records described in Section 4, we rely on our legitimate interest in providing a public company directory.

7. Cookies & Similar Technologies

We use Google Tag Manager to load analytics and, where enabled, advertising/remarketing tags. Tag Manager is loaded only on the production Website — never during local development — and is a container: the specific tags it fires (for example, analytics or advertising pixels) are configured separately, so the cookies actually set will depend on what's enabled there at any given time. When you first visit, a cookie banner lets you accept or reject our use of analytics cookies; your choice is remembered in your browser, and you can revisit it anytime using the "Cookie Preferences" link in the footer. You can also manage cookies directly using your browser's own controls.

When you use the theme button, the Website saves your choice of a light or dark theme in your browser's local storage under the name firmdex-theme. It stays in your browser until you clear the Website's data there and is not sent to us.

8. Third-Party Data Processors

• Cloudflare — hosts the Website and its database, and processes the technical data of each request, such as your IP address, to deliver the Website. See Cloudflare's own privacy policy for how they handle this data.
• Web3Forms — receives and delivers contact-form submissions (name, email, message) on our behalf. See Web3Forms' own privacy policy for how they handle this data.
• Google (Tag Manager and any tags configured within it, e.g. Google Analytics) — may process usage and device data per Google's privacy policy. Google may act as an independent controller for some of its own products.

9. International Data Transfers

Because Cloudflare, Web3Forms and Google operate globally, your data may be processed in countries other than your own. Such transfers rely on the safeguards those providers offer as part of their own compliance programs (for example, standard contractual clauses).

10. Data Retention

We retain contact-form submissions and any analytics data only for as long as necessary for the purposes described in this policy, or as required by law.

11. Data Security

We use reasonable technical and organizational measures to protect personal data, but no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

12. Your Rights

Depending on where you live, you may have the right to access, rectify, erase or restrict the processing of your personal data, to object to processing, to receive your data in a portable format, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority. If you are located in Türkiye, you have equivalent rights under the Law on the Protection of Personal Data (KVKK). To exercise any of these rights, contact us using the details in Section 15.

13. Children's Privacy

The Website is not directed at children, and we do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent version, and material changes will be reflected on this page.

15. Contact Us

For privacy questions or to exercise your rights, email us at info@firmdex.net or visit our contact page.

These practices operate alongside our Terms of Service.