Last updated: 7 September 2026

This policy explains how Grindstone Ltd ("we", "us", "our") collects and uses personal data through EMC Directory (emcdirectory.co.uk), in line with UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Who we are

Grindstone Ltd operates EMC Directory. For any question about this policy or your data, contact us at emc@emcdirectory.co.uk.

2. What we collect

• If you submit or claim a listing: the contact details you provide (name, email, phone, company details).
• If you contact a listed company through the site: the details you enter into that contact request.
• If you create a business account: your account email and password (stored securely; we don't see your password in plain text).
• Automatically, from every visitor: standard technical data such as IP address, browser type, pages visited and referring site, collected via cookies and similar technologies (see below).

We don't knowingly collect any special category (sensitive) personal data, and this site isn't intended for children.

3. Cookies and analytics

We use cookies for two purposes:

• Essential cookies, needed for the site to function (e.g. remembering your cookie consent choice).
• Analytics cookies (Google Analytics), which help us understand how the site is used — pages visited, general location, device type — so we can improve it. This data is processed by Google in line with Google's own privacy policy, and may involve data being processed outside the UK/EEA under Google's standard safeguards.

You can control or delete cookies through your browser settings at any time; blocking analytics cookies won't affect your ability to browse or search the directory.

Search on this site is powered by a third-party search provider (Typesense), used only to serve search results and not for tracking or advertising purposes.

4. How we use your data

We use the data described above to: operate and improve the directory; process listing submissions and account requests; respond to enquiries; and understand overall site usage. We don't sell personal data, and we don't use it for third-party advertising.

5. Who we share it with

• Google, for analytics (see above).
• Service providers who help us run the site (e.g. hosting, search), acting only on our instructions.
• We don't otherwise share personal data with third parties, except where required by law.

Note: the business contact details shown on a public listing (company name, phone, email, address) are published deliberately, at the request of, or on behalf of, the company concerned, as the whole purpose of a directory listing — this is separate from the personal data described above.

6. How long we keep data

We keep account and enquiry data for as long as needed for the purpose it was collected, or as required by law, and delete or anonymise it when it's no longer needed.

7. Your rights

Under UK GDPR, you have the right to: access the personal data we hold about you; ask us to correct or delete it; object to or restrict certain processing; and request a copy in a portable format. To exercise any of these, email emc@emcdirectory.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.

8. Changes to this policy

We may update this policy from time to time; the "last updated" date above will reflect the latest version.