Legal

Privacy Policy

How Steel.Directory collects, uses, stores and protects company, listing and account information — and the rights you have over your data.

About this policy

This Privacy Policy explains how Steel.Directory ("Steel.Directory", "we", "us" or "our") collects, uses, stores and shares information when you visit steel.directory, search the directory, claim a company profile, hold a membership, purchase advertising, or otherwise use our services.

Steel.Directory is a global directory of steel industry companies — mills, manufacturers, traders, stockists, processors, fabricators and service providers. The directory begins as a public index compiled from published sources, and every listing is marked unverified until an authorised representative of the company claims the profile and completes verification.

This policy describes the categories of information we handle, why we handle them, how long we keep them, and the choices and rights available to you. It applies to visitors, registered users, company representatives and advertisers alike.

Information we publish as public listings

Public listings contain business information compiled from published sources and from information supplied by companies themselves. This typically includes the company name, country, city, company type (for example mill, service centre, trader or fabricator), product categories, a short business description, an official website link where available, and once verified, a verification badge, verification ID and verification date.

Because the directory is a public reference, this listing information is visible to any visitor and may be indexed by search engines. We do not publish personal data of individual employees, financial details, customer lists, or commercially sensitive information as part of a public listing.

If a listing was compiled from a published source and the company has not yet claimed it, the information shown is presented as unverified. Claiming and verifying the profile lets an authorised representative correct, expand and take ownership of the displayed information.

Information we collect from visitors

When you visit the site we automatically collect limited technical information, such as the pages you view, the search terms you enter, the country and product filters you use, approximate geographic region derived from your IP address, browser type, device type and referring page. This information is used in aggregate to understand how the directory is used and to improve search relevance and site performance.

We use limited analytics to measure profile views, search impressions and aggregate usage patterns. We do not use this information to build a personal profile of individual visitors for behavioural advertising.

Information we collect from accounts and claims

When you create a Steel.Directory account we collect your email address and a password (stored only as a cryptographically hashed value). When you claim a company profile or submit a verification request we collect additional information, including the company legal name, registration number, country, registered address, business licence or registration certificate, authorised representative name, company email, official website, telephone number and a company logo.

For verification we may review the submitted registration document and may request clarification or supplementary evidence. This information is used only to assess the claim and to operate the verification, membership and certificate features described in this policy.

If you contact us about a listing, a verification decision, membership or advertising, we retain the content of your message and any attachments for as long as needed to respond and for a reasonable period afterwards for record-keeping.

How we use your information

We use listing and account information to operate the directory, review verification requests, maintain memberships, generate verification certificates and QR codes, and communicate with you about your listing, account or subscription.

We use contact information to send transactional messages such as welcome messages, claim confirmations, verification decisions, membership expiry reminders and security notices. These messages are part of the service and are not marketing emails.

We use aggregate usage information to improve search relevance, measure how the directory is used, and report anonymised profile-view and search-impression statistics to member companies.

Legal bases we rely on

We process information on the basis of providing the directory service you have requested, fulfilling our obligations under a membership or advertising agreement, complying with legal obligations, protecting the legitimate interests of Steel.Directory in operating and securing the directory, and where we have your consent.

Where processing is based on consent, you may withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Cookies and similar technologies

We use a small number of cookies and similar technologies to keep you signed in, remember your preferences, and operate limited analytics. We do not use cookies for cross-site behavioural advertising.

You can control or delete cookies through your browser settings. Disabling cookies may affect some features of the site, such as staying signed in between visits.

Third parties and processors

We rely on trusted processors to operate the service. Hosting, database and authentication are provided through our backend provider; payments are processed through our payment provider; and transactional email is delivered through our email provider using the sender address no-reply@notify.steel.directory.

Each processor only receives the information necessary to perform its function and is bound by obligations to protect it. We do not sell your personal information, and we do not rent contact lists to third parties.

When a company verifies its profile, the verification badge, verification ID and certificate are generated and stored so that the public profile can display them and so that the certificate can be downloaded and shared by the company.

Data retention

Public listing information is retained for as long as the directory remains active. Account information is retained for the life of the account plus a reasonable period afterwards for record-keeping and dispute resolution.

Verification documents are retained for as long as a verification is active and for a reasonable period after expiry or revocation, after which they may be deleted. Billing records are retained for the period required for accounting and tax purposes.

Data security

We protect information using access controls, encrypted storage, row-level database policies and session-based authentication. Administrative actions are restricted to authorised administrators and verified through server-side role checks rather than client-side flags.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you share information online at your own risk.

International transfers

Steel.Directory is a global service and your information may be processed in, transferred to or accessed from countries other than your own. We take steps to ensure that information is protected consistently with this policy wherever it is processed.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete or restrict the processing of your personal information, to object to processing, to port your information to another provider, and to withdraw consent.

An authorised representative may request correction or removal of their company's public listing at any time by contacting Steel.Directory. We will review and act on valid requests within a reasonable timeframe.

To exercise any right, or to ask a question about your information, contact us through the contact page. We may need to verify your identity before responding.

Children

Steel.Directory is a business directory intended for professional and commercial use. It is not directed at children and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of the page and, for material changes, provide a more prominent notice. Continued use of the service after a change takes effect constitutes acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy or about your information, please contact us through the contact page. See the terms of use for the other legal terms that apply to the service.

Questions about privacy? Contact Steel.Directory.