Privacy Policy

Who we are and what this covers

Bizglocal ("we", "us", "our") is a curated software discovery platform. We research software across business functions, shortlist options, and connect businesses with the vendors behind them. Our current coverage includes transportation, human resources and marketing software, and we are adding more industries and categories over time.

This policy applies to bizglocal.com and its subdomains (the "Site"), and to emails, calls and messages connected with it (together, the "Service"). It covers visitors, people who submit a recommendation request or quote request, and representatives of software vendors who list or promote products with us.

For most of the data described here, Bizglocal decides why and how it is processed. Under the laws that use these terms, that makes us the Data Fiduciary (India), the controller (EEA, UK, Switzerland) or the business (California and other US states).

Information we collect

We collect only what we need for the purposes in Section 4. The table lists what we collect today. If we add new categories as the platform grows, we will update this table before the collection starts.

We do not ask businesses looking for software for passwords or government ID numbers.

Where it comes from

• From you. When you complete the recommendation form, request a quote, contact us, subscribe to updates, or respond to a survey.
• Automatically. When you use the Site, through cookies, server logs and similar technologies.
• From vendors and partners. If you reach Bizglocal through a partner link, or a vendor tells us about the outcome of an enquiry you made through us, we may receive the details they hold about that enquiry.
• From public and professional sources. Business contact details from public professional profiles and company websites, used to understand a request or reach the right person.

Why we use it

Each use has a legal basis. The table shows the basis under the GDPR and the UK GDPR, and the ground under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Where we rely on consent, you can withdraw it at any time (see Section 12).

We do not use your data to make decisions with legal or similarly significant effects about you through solely automated means. Our matching tools help produce a shortlist, and our team reviews the editorial content.

Who we share it with

Software vendors you ask about

If you click "Request a Quote" or submit the recommendation form naming vendors or categories, we send your name, work email, company details and the requirements you wrote to the vendors your request is about, or that we match to your needs. They use it to respond to you. Each vendor then handles that data under its own privacy policy, as an independent controller, and subject to the terms in Section 6.

Service providers

We use trusted providers to host the Site, store data, send email, run analytics and tag management, manage consent, provide customer relationship tools, and keep the Service secure. They may only use your data to provide services to us, under contracts that require appropriate protection.

Others

• Affiliates and advisers such as lawyers, auditors and insurers, who are bound by confidentiality.
• Authorities and courts when the law requires it, or to protect rights, safety and the integrity of the Service.
• A successor if Bizglocal is involved in a merger, acquisition, financing or sale of assets. We will tell you if your data becomes subject to a different privacy policy.
• Anyone else you tell us to, with your consent.

We do not sell your personal data to list brokers or other third parties. The disclosure to a vendor is made at your direction. If you allow advertising cookies, advertising partners may receive online identifiers and activity data. You can switch this off at any time (Sections 7 and 15).

For software vendors

This section applies to people at software companies that list, claim or advertise products with Bizglocal, and to vendor contacts we hold for sales and partnership purposes. The rest of this policy applies to you too. Any separate agreement you have with Bizglocal applies in addition, and if it conflicts with this section, the agreement applies.

What we hold about vendors

• Business contact details of your representatives: name, work email, phone, job title, company.
• Listing content you give us or that is public: product and company descriptions, features, pricing, logos, screenshots and links.
• Correspondence with us about your listing.
• Reports on how your listing performs, such as visits and the number of requests sent to you. We do not promise any volume of visits or requests.

We use this to run your listing, send you requests, measure performance, communicate with you and meet legal duties. Listing content is published on the Site and may be seen by anyone. Please do not include personal data about other people in it, such as customer names or photos, unless they have agreed.

Leads you receive from Bizglocal

When a business asks to be contacted, we send you the details it gave us (Section 5). From that point you are an independent controller (or "business") for that data, and Bizglocal does not control what you do with it. Unless your agreement says otherwise, you agree to:

• use the data only to respond to that request, and for your own lawful business purposes as your privacy policy describes;
• follow the laws that apply to you, including marketing, email and phone rules (such as CAN-SPAM and TCPA in the US, GDPR and ePrivacy in Europe, and the DPDP Act in India);
• honour opt-out, deletion and correction requests from the people concerned, and tell us when we have asked you to act on one;
• not sell, rent or pass the data to data brokers or other third parties for their own marketing;
• keep the data secure, and tell us promptly if a breach affects data we sent you.

What we do not promise

We pass on what people submit. We cannot verify that it is accurate, complete or up to date, or that the person is the decision maker they say they are. Consent to be contacted extends only to what the form on our Site says at the time. We do not guarantee the quality of requests or that any request will lead to a sale.

Your privacy rights and our data terms

People at vendors have the rights in Section 12. If you need a data processing agreement or other data terms for your use of leads or your own account, contact us (Section 20) and we will discuss what is appropriate for your situation.

Cookies and tracking

We use cookies and similar technologies (pixels, local storage, log files) in four groups:

On your first visit the cookie banner lets you accept all, reject all, or choose by group. You can change your choice at any time using the cookie settings link or the "Your Privacy Choices" link in the footer. We use Google Tag Manager and analytics tools to understand Site use. These tools may set their own cookies and receive device and usage data.

Browser signals. Where we can detect a Global Privacy Control (GPC) signal, we treat it as an opt-out of sale, sharing and targeted advertising, as the law requires. We do not currently respond to Do Not Track headers. Our Cookie Policy lists each cookie, its provider and how long it lasts.

Marketing messages

With your consent, or where the law allows us to contact business email addresses, we may email you about Bizglocal, new software categories, and recommendations. Every email has an unsubscribe link, and you can also write to us at the address in Section 20. Opting out of marketing does not stop service messages, such as replies to a request you made. We do not send promotional text messages without your explicit consent. Marketing emails include our postal address and an unsubscribe link, and we process opt-outs within 10 business days, as the US CAN-SPAM Act requires.

International transfers

Bizglocal serves businesses worldwide, and its vendors, service providers and staff are in several countries. Your data may be processed in countries other than your own, including India and the United States.

• India. The DPDP Act allows transfers of personal data outside India except to countries the Government of India restricts by notification. We follow those restrictions and any stricter sectoral rules that apply.
• EEA, UK and Switzerland. When we transfer data from these regions to a country without an adequacy decision, we use an approved safeguard, usually the European Commission's Standard Contractual Clauses with the UK Addendum or Swiss amendments, plus supplementary measures where needed. You can ask us for a copy of the safeguards (Section 20).
• Elsewhere. We apply the protections in this policy to all personal data, wherever it is processed.

How long we keep it

We keep personal data only as long as the purpose requires, then delete it or anonymise it. These are our standard periods. Law, disputes or security investigations can require us to keep data longer.

Data a vendor has already received from a quote request is held by that vendor under its own retention rules. On request, we will pass your deletion or correction request to the vendors we sent your data to, where practicable, but we cannot delete data held by another company.

Security

We use reasonable administrative, technical and organisational safeguards, such as encrypted connections (HTTPS) and access limited to people who need the data. No system is completely secure, and we cannot guarantee that your data will never be accessed without permission, so please use care with what you submit.

If a personal data breach occurs, we will investigate it, take steps to contain it, and notify the affected people and regulators as the law requires. That includes affected residents and state attorneys general under US state breach notification laws, the Data Protection Board of India under the DPDP Act, and supervisory authorities within 72 hours under the GDPR where it applies.

Your rights

Whatever your location, you can ask us to do the following. We will respond to requests from anywhere. The rights you can enforce depend on the law that applies to you.

How to ask. Email privacy@bizglocal.com or use our contact page and say which right you want to use. We will confirm who you are, which may mean asking you to reply from the email address you gave us. We respond within 30 days (GDPR and most other regions) or within 45 days for US state law requests, and sooner where local law requires. US residents can find the full process in Section 15. We may extend that once where allowed and will tell you why. We may decline or limit a request that is clearly excessive or repeated, as the law allows. If we refuse, we will explain the reason. You may also use an authorised agent, who must show written permission.

India: Digital Personal Data Protection Act, 2023

If you are in India, or we process your data in connection with offering services to you in India, the DPDP Act applies. In that Act you are a Data Principal and Bizglocal is a Data Fiduciary.

• Notice and consent. We ask for your consent for each specified purpose, in clear language, before we process your data. This policy and the notice shown at the point of collection describe the data and purposes. Our notice is in English. Where the law requires, we will also provide it in a language listed in the Eighth Schedule to the Constitution of India.
• Withdrawing consent. You can withdraw it as easily as you gave it, by the email link, cookie settings, or a message to us. We will stop processing, and ask our processors to stop, unless the law requires us to keep the data.
• Your rights. You can request a summary of your personal data and the processing we do, the identities of those we shared it with, correction, completion and updating, and erasure. You can also nominate another person to exercise these rights if you die or become incapacitated.
• Grievance redressal. Contact our Grievance Officer in Section 20 first. We will respond within the period the Rules set, and not later than 90 days. If you are not satisfied, you may complain to the Data Protection Board of India.
• Consent Managers. Once Consent Managers are registered under the Act, you may manage your consent with Bizglocal through one.
• Duties. The Act asks you to give accurate information and not to file false or frivolous complaints.
• Phased rollout. The Act and its Rules are being brought into force in stages. We apply their requirements as each takes effect and update this policy as the dates and details become final.

Where the Information Technology Act, 2000 and the rules under it apply, we also follow them, including reasonable security practices.

EEA, United Kingdom and Switzerland

If you are in these regions, the GDPR, UK GDPR or Swiss FADP applies to our processing of your data. In addition to Section 12:

• Section 4 lists our legal bases. Where we rely on legitimate interests, they are running a safe, useful software discovery service and marketing it to businesses, and we weigh them against your rights.
• You have the right to object, at any time and without giving reasons, to direct marketing.
• You have the right to lodge a complaint with your local supervisory authority, for example the ICO in the UK, or the authority in the EU country where you live or work.
• Where required, we appoint a representative in the EU or UK.
• Providing data is voluntary. Without it we may be unable to match you with software or answer your request.

United States: state privacy laws

This section applies to residents of California and of other US states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Florida (where applicable), Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. It supplements the rest of this policy and acts as our Notice at Collection under the California Consumer Privacy Act as amended by the CPRA ("CCPA").

Business contacts are covered. Bizglocal is a business-to-business service, but the California law and some other state laws protect information about people acting for a company, such as a work email address. We treat that information as personal information and give you the same rights.

Notice at collection

In the past 12 months we collected the categories below, from the sources in Section 3, for the purposes in Section 4. Retention periods are in Section 10. We do not intentionally collect sensitive personal information as defined by the CCPA, and we do not use it to infer characteristics about you.

Sale and sharing

We do not sell personal information for money. When you submit a quote or recommendation request, you direct us to send it to the vendors concerned. We treat this as a disclosure you asked for, not a sale. If you allow advertising cookies, advertising partners may collect identifiers and activity data to show you ads on other sites. California calls that "sharing" for cross-context behavioural advertising. You can turn it off at any time (see below). We do not knowingly sell or share the personal information of anyone under 16.

Your rights

• Know and access. The categories and specific pieces of personal information we hold about you, their sources, our purposes, and the categories of recipients.
• Delete. Ask us to delete personal information we collected from you, subject to legal exceptions. We will direct our service providers to do the same where required.
• Correct. Fix inaccurate personal information.
• Opt out of the sale or sharing of your personal information, targeted advertising, and profiling in furtherance of decisions with legal or similarly significant effects. We do not make such decisions.
• Limit use of sensitive personal information. Not applicable, because we do not collect it.
• Portability. Receive your data in a portable, commonly used format.
• Non-discrimination. We will not deny you service or give you a different level or quality of service for using these rights.
• California "Shine the Light". We do not disclose personal information to third parties for their own direct marketing, other than at your request.

How to use your rights

• Opt out of sharing: use the "Your Privacy Choices" link in the footer or the cookie banner, or turn on a Global Privacy Control (GPC) signal in your browser. Where we detect a GPC signal, we treat it as a valid opt-out request for that browser and, where we can link it to you, for your email address.
• Everything else: email privacy@bizglocal.com or use our contact page. Because we operate online only, these are our designated methods.
• Verification. We will match details in your request to what we hold, and may ask you to reply from the email address you used with us. We ask only for what we need to confirm it is you.
• Timing. We confirm receipt within 10 business days and respond within 45 days. We may extend that once by up to 45 more days and will tell you why. You can make access requests twice in any 12-month period without charge.
• Authorised agents. You can use an agent. We may ask for your written permission and verify your identity directly.
• Appeals. If we decline a request, you can appeal by replying to our decision with "Appeal" within 60 days. We will answer within 45 days, and within 60 days where the state allows, and explain the reasons in writing. If you are still unhappy, you can contact your state attorney general or, in California, the California Privacy Protection Agency.

Other US laws we follow

• Email marketing (CAN-SPAM). Marketing emails identify us, carry a valid postal address and an unsubscribe link, and we honour opt-outs within 10 business days.
• Calls and texts (TCPA). We do not send marketing calls or texts using automated systems without your prior express written consent.
• Children (COPPA). We do not knowingly collect personal information from children under 13, or from anyone under 18 (see Section 16).
• Online tracking disclosures (CalOPPA). Section 7 explains how we handle tracking, Do Not Track headers and GPC.
• Security breaches. We will notify affected people and regulators as required by the data breach laws of each state (see Section 11).
• Truthfulness (FTC Act and state consumer protection laws). We describe our privacy practices accurately and keep this policy current.

Nevada residents can also submit an opt-out request for the sale of covered information to the email address above. We do not currently sell covered information as Nevada law defines it.

Children

Bizglocal is a business-to-business service for adults. It is not directed to anyone under 18, and we do not knowingly collect personal data from them. We do not track or profile children, and we do not target advertising at them. Where the law of your country sets a higher age, that age applies. If you believe a child has given us personal data, write to us and we will delete it. Under the DPDP Act, we would need verifiable parental or guardian consent before processing a child's data. In the US, we comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect data from anyone under 13.

Sensitive information

As Bizglocal adds more industries, requests will increasingly come from sectors such as healthcare, finance and education. Please do not put sensitive personal data in forms or free-text boxes. That includes health records, financial account numbers, government ID numbers, biometric data, or information about racial or ethnic origin, religion, sexual orientation or political views. We do not need it to recommend software. If you include it anyway, we will try to delete it, but it may already have been included in a request sent to a vendor.

If you describe your own employees or customers in a request, please do so in general terms and do not name individuals.

Other websites and vendors

Vendor profiles, links and embedded content may lead to sites we do not own or control. Their privacy practices are theirs, not ours. Read the policy of any vendor before you give them more information, and note that product details, ratings and pricing shown on Bizglocal come from public sources and vendors, and may change.

Changes to this policy

We will update this policy when our practices, the Service or the law change. We will always show the "last updated" date at the top. If a change is material, for example a new use of your data or a new category of recipient, we will tell you by email or a notice on the Site before it applies, and ask for fresh consent where the law requires it. You can ask us for earlier versions.

Contact and grievances

For any privacy question or request, or to complain, write to our privacy team:

Grievance Officer and Data Protection Officer (India and elsewhere)

You can also reach us through bizglocal.com/contact-us. Please include the email address you used with us and a short description of your request, so we can find your records quickly.