Below we describe which personal data is handled when someone browses Data Rooms Providers, our reasons for handling it, and what control you keep over it. We drafted this page with three laws in view: the EU General Data Protection Regulation (GDPR), its UK equivalent (UK GDPR), and the California Consumer Privacy Act (CCPA).
Data controller
Our research team runs Data Rooms Providers. If you need the name of the company acting as data controller, ask via the contact page and we will provide it.
How this directory is built
Data Rooms Providers consists of static pages delivered by Cloudflare. You cannot register, sign in or post comments here. Reading any page requires no name, email or other personal details from you.
Data we process
Hosting and security logs
Each time a browser asks for a page, Cloudflare, as our host, handles routine technical information such as the IP address, the browser in use, the URL requested and a timestamp. That information lets the pages load, shields them from abuse and keeps them online. We never use those logs to work out who an individual reader is.
Usage measurement
Only if you agree, two measurement tools help us see how readers move through the directory and what needs improving:
- Google Analytics 4 logs the pages you open, a rough location worked out from your IP address, your device and browser, the referring page and the length of your visit.
- PostHog logs comparable events and, when switched on, a session recording that rebuilds how you scrolled and clicked. Anything typed into a form field is hidden in those recordings, so it stays invisible to us.
We look at these figures in aggregate, to learn which pages help readers and where they drop off. They are never sold, and we never turn them into advertising profiles.
Clicks to vendor websites
If you click through to a vendor, that vendor may be told the visit was referred by us, including any campaign tags in the URL. A number of those links are affiliate links, which our disclosure explains. After you arrive on a vendor’s site, that vendor’s own privacy notice governs what happens next.
Contact form
The contact page displays a form, but it is not yet live and currently gathers no messages. Before we turn it on, we will add details here of what it collects and the period for which it is stored.
Cookies
The first time you arrive, a banner gives you the choice to Accept or Reject analytics.
- Accept lets Google Analytics 4 place its cookies and lets PostHog run.
- Reject instructs Google Analytics 4 to leave analytics storage switched off, which means no analytics cookies, and stops PostHog from loading entirely.
We remember your answer in local storage within your browser, so you are not asked again on each page. Want to revisit the choice? Delete the stored data for dataroomsproviders.com through your browser and the banner will return next time. We place no advertising cookies at all.
Lawful grounds
For readers covered by GDPR or UK GDPR, our grounds are:
- Consent for usage measurement and session recordings; you may decline it or take it back whenever you like.
- Legitimate interests for the technical handling required to serve and protect these pages.
Retention
We retain analytics information only while it helps us understand how the directory is used, subject to the retention controls built into each tool. Our host holds security logs briefly, for periods it determines.
Transfers abroad
Companies that provide services to us may handle data in other countries, the United States among them. For EU or UK data, we depend on the transfer protections those companies put in place, for example standard contractual clauses or an approved adequacy framework.
What you can ask us to do
Depending on the law where you are based, you may be entitled to:
- Obtain a copy of personal data we hold about you.
- Have that data fixed or erased.
- Object to processing or have it limited, and take back consent.
- Get your data in a portable, machine-readable form.
- Learn which categories of personal information we collect, and opt out of any sale or sharing. We never sell personal information and never share it for cross-context behavioral advertising.
Using any of these rights will not lead to different treatment. Send requests through the contact page. UK residents may also raise a complaint with the Information Commissioner’s Office; EU residents may contact their national data protection authority.
Children
This directory is aimed at business professionals, not children, and we do not knowingly gather data from anyone younger than 16.
Updates to this policy
Should our data handling change, we will revise this page and its date. Significant changes, for instance activating the contact form, will appear here before they come into effect.