This policy explains what personal data AgencySeekr collects, why, who receives it, how long we keep it and what rights you have. It covers agencyseekr.com, its forms, the agency dashboard and the emails we send.
Who is responsible for your data
Filip Blomqvist AB (company registration number 559502-2772), Västanvindsgatan 6c, 417 17 Göteborg, Sweden, is the data controller for the personal data AgencySeekr (agencyseekr.com) collects, as described in this policy. Questions about your data, or requests to see, correct or delete it, go to hello@agencyseekr.com.
The short version
- We use no analytics, advertising or tracking of any kind, and we never sell personal data.
- We collect only what a feature needs: to publish a review, pass a message to an agency, run an account or take a payment.
- Personal data is deleted automatically when we no longer need it.
What we collect and why
Everyone who visits. Like every website, our server receives your IP address, your browser type and the pages you ask for. Our hosting provider keeps these in technical logs for a limited time, to keep the site running and secure. We also use a scrambled form of your IP address for a short time to limit how often a form can be sent. Legal basis: our legitimate interest in a secure, working site.
People who contact an agency. When you send a message through a profile, we collect your name, email address, company, phone number, budget and message. They are emailed to the agency and kept so the agency can read them in its dashboard. Legal basis: passing on your enquiry at your request, and our legitimate interest in running the directory.
Reviewers. When you review an agency, we collect your name, job title, company, work email address, your ratings, your review and details of the project, such as when it ran. Your email address is never shown: we use it to confirm the review, to make sure each person reviews an agency only once, and to contact you about your review. If you choose to stay anonymous, the review shows “Anonymous” and your job title. Legal basis: our legitimate interest in publishing honest, verified reviews.
Agencies with a listing. We collect a sign-in email address, a password (stored only in encrypted form), the agency’s website, the date you accepted our terms, the details you add to the listing (which can include the names and roles of the agency’s leaders) and a record of each purchase. Legal basis: our contract with you, and our legal duty to keep accounting records.
People who contact us. Messages sent through our contact page are emailed to us and not stored on the site. We use them only to answer you. Legal basis: our legitimate interest in answering questions.
People who report content. When you report content, we keep your name, email address, the page you reported, your explanation and our decision, so we can decide on the report, tell you the outcome and handle a request for a second look. We never tell the person you reported who you are, unless the law requires it. Legal basis: our legal duty under the EU Digital Services Act to handle reports, and our legitimate interest in keeping the site lawful.
Writers. People who write for us have a public profile with their name, photo, job title, experience, credentials and any links they choose to share, and an account to sign in with. Legal basis: our agreement with them, and our legitimate interest in showing readers who wrote and checked each article.
Job applications
When you apply through our careers page, we receive your name, email address, the link you give us and your message by email. The website doesn’t store them. We use them only to consider your application and reply to you, and we delete them within 6 months unless you agree that we keep them for future openings.
Listings managed by resellers
Some agencies have their listing managed by a reseller: a business that runs the listing for the agency. When you send a message through such a listing, it is emailed to the address on the listing and is also shown to the reseller in its dashboard, with your name, email address, company, phone number, budget and message. The reseller handles these details on the agency’s behalf, only to pass on and follow up your enquiry. The contact form on such a listing says that a partner manages it.
Messages sent through any listing are kept for 24 months, then deleted automatically.
Reseller accounts
For reseller accounts we keep the sign-in email address, payment records from Stripe, the listings the reseller created and the date it confirmed each agency’s permission.
Information about agencies
Profiles our team adds are built from public business information, such as the agency’s own website and public business directories: its name, addresses, website, phone number, services, clients, awards, and the names and roles of its leaders. We use it to help buyers find and compare agencies. An agency, or anyone named on a profile, can ask us through our contact page to correct or remove this information, and we will.
Who receives your data
- Agencies and the partners that manage their listings receive the messages you send them, as described above.
- Stripe handles payments, tax and invoices, and receives your billing details and, for businesses, a VAT number. Stripe is responsible for some of this data itself, under the Stripe Privacy Policy.
- Cloudflare Turnstile checks that forms are sent by a person. It receives your IP address and browser details when you use a form, and Cloudflare uses them only for that check.
- Our hosting and email providers store the site and send our emails for us, under data processing agreements.
- Authorities receive data only when the law requires it.
We never sell personal data or share it for advertising.
Transfers outside the EU
Some of our providers, such as Stripe and Cloudflare, may process data outside the EU and EEA, including in the United States. Where they do, the transfer is protected by the EU–US Data Privacy Framework, when the provider is certified under it, or by the European Commission’s standard contractual clauses.
Cookies and local storage
We use no analytics, advertising or tracking cookies. The site only stores what it needs to work, so it doesn’t ask for cookie consent:
- Sign-in cookies are set only when you sign in to your account, to keep you signed in. They are removed when you sign out, and expire after at most 14 days.
- A password reset cookie (ad_reset) is set only while you choose a new password, and removed once you have.
- Your colour mode. If you use the light and dark switch, your choice is saved in your browser’s local storage. It stays on your device and is never sent to us.
Payments take place on Stripe’s own checkout page, where Stripe sets its own cookies to prevent fraud.
Google Maps ratings
To show an agency’s Google Maps rating, our server asks Google’s Places API about the agency using its name and location. No information about you as a visitor is sent. If you follow a link to Google Maps, Google’s own Privacy Policy applies there.
How long we keep data
- Messages to agencies: 24 months, then deleted automatically.
- Reports of content: 12 months, then deleted automatically.
- Reviews nobody confirms: deleted 30 days after the last confirmation link was sent.
- Published reviews: until you ask us to remove yours, or we remove it under our Review Guidelines.
- Accounts whose email address is never confirmed: deleted after 7 days. Confirmed accounts that never pay: deleted after 90 days.
- Agency and reseller accounts: for as long as the account is open.
- Purchase records: 7 years after the end of the financial year, as Swedish accounting law requires.
- Messages to us: as long as needed to answer them, and no longer than 24 months. Job applications: within 6 months, as described above.
- Server logs: a short time set by our hosting provider.
Your rights
You can ask to see the personal data we hold about you, have it corrected or deleted, limit how we use it, get a copy in a common format, or object to our use of it where we rely on our legitimate interest. Email hello@agencyseekr.com or use our contact page. We confirm the request by email first and answer within one month. If the law requires us to keep some data, such as accounting records, we tell you why.
If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or to the data protection authority where you live. We’d be glad to hear from you first.
Security
The site is served over an encrypted connection, passwords are stored only in encrypted form, access to personal data is limited to the people who need it, and forms are protected against spam and abuse. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the authorities as the law requires. To report a security problem, see our Security page.
Children
AgencySeekr is made for businesses and is not meant for children under 16. We don’t knowingly collect their personal data.
Changes to this policy
We update this policy when the site or the law changes. The date of the latest version is shown at the top of this page, and we email account holders about important changes.