What we do with your details.

NowVetted is a directory of licensed residential trades. We publish dated records from official licensing sources. When you send a request through a business record, we pass it to that one business. We are not a contractor, a licensing authority, or a party to the work agreement between you and a business.

This notice covers nowvetted.com, including the request form and the shortlist. It does not cover a business's own website, or what a business does with your details after we pass them on.

When you send a request, we collect:

• Your name, phone number, ZIP code and the job description you type.
• Your email address, if you choose to give one. It is optional: the email field can be left empty and the request still goes to the business.
• The business and trade you chose, the page you sent from, and the date and time.
• The exact consent sentence you ticked, its version, your IP address and your browser and device string.

Those fields are written to our Convex database. The consent record exists so we can show what you agreed to if a contact is disputed.

Our network and hosting providers also process standard technical information: your IP address, browser string, the page requested and the time. This is ordinary server logging used for security and reliability.

We also use PostHog for product analytics. It records the page type, city and trade of a directory page, the page path, whether you clicked a phone or website link on a business record, and whether you started or sent a request. Those events carry a random identifier kept in your browser's local storage. They do not contain your name, phone number, email address, ZIP code, job description or anything else you type into the request form.

We publish business records: names, licence numbers and status, business phone numbers, websites, addresses and related evidence from official registers and business websites. These are business records from public sources, not information we collect from homeowners.

The shortlist runs in your browser. It keeps your choices in page memory and sends nothing to us. It disappears when you close or reload the page.

At launch we do not collect an account, a password, a street address, payment card details, precise location, contacts, or SMS consent.

To pass your request to the one business you chose. That is the main purpose, and it happens because you asked us to.

To send you a confirmation email, if and only if you gave an email address. That message confirms the request; it contains no advertising, no upsell and no cross-sell.

To keep a record of your consent, so we can answer a dispute about a call or an email.

To run and protect the service: prevent spam and abuse, investigate a complaint, correct a business record, and keep pages working.

To measure which directory pages and request steps are used, so we can fix the ones that do not work. The analytics events carry no request details.

To meet a legal obligation or defend a legal claim.

We do not use request details for advertising, profiling, or automated decisions about you.

The business you chose receives your name, phone number, ZIP code and job description, with the trade and the business record. If you gave an email address, it receives that too. We do not send your IP address or browser string. That business is responsible for its own copy and its own privacy notice.

Service providers run the site for us: Convex (database and backend functions), Cloudflare (network and TLS), Resend (the request emails), PostHog (product analytics) and the server that serves the pages. Resend receives the confirmation address and the request details to send the two transactional request emails: a confirmation to you when you gave an email address, and an alert to our operator. PostHog receives the analytics event name, page path, city, trade, page type, the random browser identifier and general browser and device information. It is configured not to record your IP address, session replays or form input, and we do not send it your name, phone number, email address, ZIP code, job description or exact address.

We may disclose information if the law requires it, to defend a legal claim, or to investigate fraud or abuse.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

Requests are kept for up to five years from the request date. Five years is an evidence window for consent and contact disputes. We delete the row after that, or earlier if you ask us to.

If you ask us to delete a request, we may keep a minimal suppression record so we do not contact you again, plus anything we must keep for a legal claim. Email us if you want to know what would be kept in your case.

Technical logs are kept for a short operational period by our network and hosting providers under their terms. We do not use them to build a profile of you.

Business records are kept while the record is published and for the evidence period needed to support it. A business can ask us to correct or remove its record.

You can ask us to send you the request information we hold, correct it, delete it, stop contacting you, or explain how we handled a request.

Email records@nowvetted.com with the subject "Privacy request". Include the reference shown when you sent the request (NV-XXXXXXXX), the name and phone number you used, and what you want. You do not need an account. If you gave an email address on the request, you can reply to the confirmation instead.

We acknowledge a request within 10 business days and respond within 45 calendar days. If we need more time, we will tell you why and may take up to another 45 days. We may ask for information to confirm the request belongs to you.

We will not treat you differently because you made a request.

If we already sent your request to a business, ask that business as well. We can tell you which business received it, but we cannot delete its copy.

We apply this process to everyone, whatever state you live in. California residents have the rights in the CCPA/CPRA, including to know, delete, correct and opt out of sale or sharing, when those thresholds apply. Texas residents have the rights in the TDPSA, including to know, correct, delete and opt out of sale, targeted advertising and profiling, when that law applies. We do not sell personal information, run targeted advertising or profile you. Washington has no general consumer privacy law; we still honour these requests.

We use PostHog for product analytics. It stores one random identifier in your browser's local storage so the events from one visit can be grouped; it does not set an analytics cookie. It is configured without session recording, without automatic click or form capture, and without advertising or cross-site tracking. We do not run advertising cookies or sell data for advertising.

Cloudflare, our network provider, may set a strictly necessary security cookie when it screens traffic for bots. It is not used for advertising.

The shortlist is held in page memory. We do not write it to localStorage, sessionStorage or a cookie, and we do not send it anywhere.

The site uses HTTPS. Access to the request database is limited to the operator and protected by Convex's access controls. We do not publish request rows or store payment card details.

No system is perfectly secure. If you think a request was mishandled, email records@nowvetted.com.

The service is for adults arranging work on a home. We do not knowingly collect information from anyone under 18. If you believe a child sent a request, contact us and we will delete it.

We do not make automated decisions about you that produce legal or similarly significant effects. The rule that decides which business records are published uses licence and coverage evidence about businesses, not information about you. Any later ranking or matching ranks businesses, not homeowners.

If we add a tool that makes a decision about you, we will update this notice before it is used.

We may update this notice. The version and effective date on this page will change. If a change materially affects information we already hold, we will post it here before it applies. If you gave an email address on a request, we can also email you about a change that affects that request; at launch we hold no other contact list.

Privacy requests and questions: records@nowvetted.com. Put "Privacy request" in the subject line.

If we cannot resolve a complaint, you can contact your state attorney general. California residents can also contact the California Privacy Protection Agency.