Privacy notice

This is the whole of it. durma keeps as little as it can and sells none of it.

What is kept

• Your email address or phone number, and the name you chose — so you can sign in and so your team can see who is who.
• Whatever you publish: business details, products, announcements, photos. These are public by design.
• Verification documents, in separate private storage that the public site cannot read. Only a moderator opens them.
• Who you follow, and the notifications sent to you.
• A session record when you sign in: a hashed token and its expiry. The token itself is never stored in readable form.

Location

When you ask for what is nearby, your browser sends the coordinates with that one request so we can sort by distance. They are not written down and not attached to your account.

Photos you upload

Location and camera metadata (EXIF) is stripped from every image before it is stored — a photo of your workshop does not carry your home address in it.

Who else sees it

• Google, if you choose to sign in with Google — only to confirm the address is yours.
• Amazon SES, to deliver sign-in codes and notification emails.
• Cloudflare, which stores the images and serves the site.

There is no advertising network and no analytics tracker on this site.

Your rights

You may ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Deleting a business removes its products, announcements and photos with it. Write to [email protected] and it is done within thirty days.

How long

Sign-in codes expire in five minutes. Sessions expire and are then removed. Published content stays until you delete it or the account goes. Verification documents are deleted once the decision is made.