Privacy Policy – WhoTelephonedMe.co.uk

1. Who We Are

WhoTelephonedMe.co.uk ("we", "us", "our") is a UK-based reverse phone number lookup service. We operate a community database allowing UK residents to find out who telephoned them, who phoned them from a UK number, and to submit reports about calls they have received. Our website is accessible at https://whotelephonedme.co.uk.

2. What Data We Collect

2.1 Data you provide voluntarily

• Phone number searches: When you search a number to find out who telephoned you, we log the number searched and the date/time of the search. We do not log your IP address in association with searches.
• Community reports: If you submit a report describing a call you received, we collect the phone number, your optional display name, your report text, the call category you selected (scam/spam/safe/unknown) and a timestamp. We do not require your email address or any personal identification to submit a report.
• Contact form: If you contact us via the contact page, we collect your email address, the subject of your message and the message text. This data is used only to respond to your enquiry and is not added to any marketing list.

2.2 Data collected automatically

• Server logs: Our web server records standard log data including your IP address, browser type, pages visited and timestamps. These logs are retained for up to 30 days for security purposes only.
• Cookies: We use essential session cookies and, if you consent, Google Analytics cookies. See our Cookie Policy for full details.

3. How We Use Your Data

Purpose	Legal basis
Providing the reverse phone lookup service	Legitimate interests
Maintaining and displaying community reports	Legitimate interests
Responding to contact form enquiries	Contract / Legitimate interests
Analytics to improve the service	Consent (cookie consent)
Security monitoring and fraud prevention	Legitimate interests
Legal compliance	Legal obligation

4. Community Reports and Third-Party Data

Reports submitted by users describe call experiences relating to phone numbers. These reports may contain information about third parties (the callers). We assess reports for appropriateness and remove any that contain personal data unrelated to the call (e.g. individual names, addresses). Phone numbers themselves are not personal data under UK GDPR as they cannot alone identify an individual without additional information we do not hold.

5. Sharing Your Data

We do not sell, rent or share your personal data with third parties for marketing purposes. We may share data with:

• Google Analytics: Anonymised analytics data under a Data Processing Agreement. IP addresses are anonymised before transmission.
• Hosting provider: Our server provider processes data to host and deliver the website.
• Law enforcement: Where legally required, for example in response to a valid court order or to prevent serious harm.

6. Data Retention

Community reports are retained indefinitely as they form the core of our community database, but may be removed on request if they contain inaccurate or inappropriate information. Server logs are retained for 30 days. Contact form enquiries are retained for 12 months then deleted. Analytics data is retained for 14 months as per Google Analytics defaults.

7. Your Rights Under UK GDPR

You have the right to access, rectify, erase, restrict or object to our processing of your personal data. You also have the right to data portability and to withdraw consent at any time. To exercise any right, contact us at [email protected]. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use essential session cookies that are necessary for the website to function, and optional Google Analytics cookies subject to your consent. See our Cookie Policy for a full breakdown and to manage your preferences.

9. Security

We use HTTPS encryption for all data in transit. Our servers are protected by firewalls and access controls. We conduct regular security reviews. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page will change when we do. Continued use of the site after an update constitutes acceptance of the revised policy.

11. Contact

For privacy enquiries: [email protected]
For general enquiries: Contact page