Privacy notice

1. Scope and controller

This notice covers account and service data relating to MapsData customers, as well as professional information relating to individuals that may appear in search results.

120 FPS LLC is the controller for processing for which it determines the purposes and essential means. A customer that exports or uses results for its own outreach normally acts as a separate controller for that use.

2. Customer and account data

• Identity and contact details supplied during registration or account management.
• Authentication events and account-security information.
• Plan, purchase, invoice and credit-balance information, excluding full payment-card data handled by the payment service.
• Search queries, selected areas, saved projects, exports and support communications.
• Technical logs, device information, IP address and security events where necessary.

3. Professional information in results

• Business name, category, address, locality, public telephone number and public website.
• Public ratings and review counts.
• Professional email addresses visibly published on a business website, together with the source URL and discovery date where available.
• A professional address identifying a natural person remains personal data even when publicly available. Generic company addresses may relate only to the legal entity, depending on applicable law.

4. Sources and purposes

Professional information is obtained from publicly accessible business sources and pages intentionally available without restricted access. It is organised so professional customers can identify businesses in an area, review relevant business information, save searches and export selected results.

The service must retain source information sufficient to answer access, correction and objection requests. Source-site restrictions and expressed objections must be respected.

5. Legal bases

Account and billing processing may be necessary to perform the customer contract or comply with legal obligations. Security and limited service-improvement processing may rely on legitimate interests after balancing the relevant rights. Optional marketing or non-essential tracking requires consent where applicable.

Reuse of professional personal data may rely on a documented legitimate-interest assessment only where the use is necessary, proportionate and within reasonable expectations. Consent is required when applicable electronic-marketing or privacy law requires it. Public availability alone is not a legal basis.

6. Recipients and international transfers

Data may be accessed by authorised personnel and by categories of service providers supporting identity, payments, infrastructure, storage, security and customer support. Search results are disclosed to the customer that requested them and may be exported by that customer.

Where an international transfer requires safeguards under applicable law, 120 FPS LLC uses the safeguards required for that transfer.

7. Retention

Personal data must be kept only for the period necessary for the stated purpose, legal obligations, security, dispute handling and suppression of renewed contact. Customers can delete saved projects where the product provides that control.

A minimal suppression record may be retained to prevent deleted or objected-to data from being reintroduced.

8. Information when data was collected indirectly

Where personal data was not collected from the individual, applicable law may require notice within one month, at first contact or before the first disclosure to another recipient. Because a professional email address may make individual notice possible, 120 FPS LLC must not rely automatically on a general public notice or on a disproportionate-effort exception.

9. Rights

• Access to personal data and available source information.
• Correction of inaccurate or incomplete information.
• Deletion or restriction where legal conditions are met.
• Objection at any time to direct-marketing processing.
• Withdrawal of consent where processing is based on consent.
• Complaint to the competent privacy authority.

10. Security and children

The service should use proportionate technical and organisational safeguards, access controls, audit logs, encryption where appropriate, backups and incident procedures. No online service can guarantee absolute security.

MapsData is a professional service and is not intended for children. It must not be used to target minors or collect private or sensitive information about them.

11. Contact and changes

Material changes to this notice are dated and may be communicated through an appropriate channel.