Privacy policy
Last updated 16 September 2026. This is a working template — have it reviewed by a qualified lawyer in your jurisdiction before launch.
What we hold about businesses
Our directory includes business records sourced from industry data. For a business that has not claimed its listing, we publish only the establishment name, city and state or region.
We may also hold, privately and unpublished, a business phone number, email address and postal address from that source record. These are stored encrypted and are used for one purpose only: verifying that someone claiming the listing genuinely controls the business. They are never displayed, never sold, and never shared.
Marketing
We do not send marketing communications to imported business records. Businesses receive marketing from us only after creating an account and explicitly opting in, and can withdraw that consent at any time.
What we hold about account holders
Name, email address, optional phone number, a securely hashed password, and the content you publish. We record sign-in activity for account security.
Your rights
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct anything inaccurate.
- Removal — request deletion of your account, or removal of an unclaimed business listing, using the link on that listing.
- Objection — object to how we process your data.
Contact us at support@samstrip.com to exercise any of these.
Security
Passwords are hashed. Private contact data is encrypted at rest. Access to private data by our staff is logged, and verification documents are stored outside the public web root and deleted after a defined retention period.