Privacy Policy
What ThingDeck collects, why, and how to control it. Last updated August 2026.
1. What this covers
This policy explains what ThingDeck ("we", "us") collects from three groups of people who use this site: business buyers searching the directory, providers applying to be listed, and anyone who contacts us or subscribes to updates. It doesn't cover the privacy practices of the independent provider businesses listed on ThingDeck — once you contact a provider directly, their own policies apply.
2. Information you give us directly
We collect information when you fill out a form on this site — there's no account system, so this is the only way we get personal information from you:
- Provider applications (List Your Business) — business details, registration/license numbers, service area, brand certifications, and the contact person's name, role, email, and phone number. This is used to review the application and, once approved, to build the public profile shown on the directory. Fields marked "admin-only" in the application (registration numbers, contact details) are never shown publicly.
- Contact messages (Contact) — your name, email, optional company, and message. Used only to respond to your inquiry.
- Newsletter signups (footer, every page) — your email address. Used only to send you ThingDeck updates; every email includes an unsubscribe option.
3. Information collected automatically
We use Cloudflare's privacy-friendly analytics to understand traffic to this site: the page you viewed, the referring site, and a country/city/region derived from your connection's IP address (not stored as an address). This doesn't use cookies, doesn't require a consent banner, and isn't tied to any account or identity. We don't use third-party advertising trackers.
Your light/dark theme preference is saved in your browser's local storage. It never leaves your device and we never see it.
4. How we use this information
To review and publish provider listings, respond to messages sent through the Contact form, send newsletter updates to subscribers, keep the directory secure and working correctly, and understand which pages are useful so we can improve them. We do not sell personal information, and we do not use it for advertising.
5. What becomes public
If your provider application is approved, the business-facing fields — business name, category, services, brands, certifications, city/region, and any logo you provide — are published on your profile page. Your personal contact details (name, email, phone) submitted in that form are kept private and used only for verification and account correspondence, never shown on the public profile.
6. Sharing
We share information with the service providers that run this site's infrastructure (currently Cloudflare, for hosting and analytics) only as needed to operate it, and with a spreadsheet-based application tool we use internally to review submissions. We don't sell or rent your information to third parties, and we don't share your contact details with a provider unless you submit a quote request through their profile yourself.
7. Your choices
You can unsubscribe from the newsletter at any time using the link in any email. To ask us to update, correct, or delete information tied to a provider application or a contact message, reach out through the Contact page — we'll action requests within a reasonable time.
8. Changes to this policy
If this policy changes in a meaningful way, we'll update the date at the top of this page. Continuing to use the site after changes are posted means you accept the revised policy.
9. Contact
Questions about this policy or a request about your data can be sent through the Contact page.