People who appear in records
Last updated
Effective [PEOPLE IN RECORDS EFFECTIVE DATE]
URAKIMON gives businesses structured records of what public web pages show: products, job ads, property listings, reviews and public posts. Some of those pages show information about people. If you are one of them, this notice is for you. You do not need an account with us to use any of the rights below.
1. Who is responsible
[LEGAL ENTITY NAME], a [ENTITY TYPE] formed in [STATE OF FORMATION] decides which sources are read, which fields a record has and how long records are kept. That makes URAKIMON the "controller" of this information: the one responsible for it under data protection law. Contact: [PRIVACY EMAIL], [REGISTERED STREET ADDRESS]. Our representative in the European Union is [EU REPRESENTATIVE NAME, ADDRESS AND EMAIL], and in the United Kingdom [UK REPRESENTATIVE NAME, ADDRESS AND EMAIL].
Each business that asks for records decides what it uses them for once it receives them, and is a separate controller for that use. Our acceptable use rules say what they may not do with them.
2. Where the information comes from
Every record comes from a page of one of the sources on the sources page, and each record carries the address of that page (url) and the time it was read (collectedAt). All of them are pages the source shows to the public: anyone can open them without an account.
3. What records can contain
| Kind of data | Sources | Information about people it can include |
|---|---|---|
| Real estate | Zillow, Realtor.com, Rightmove, Zoopla, LoopNet | Property addresses and listing details, and the names, agencies, office addresses, phone numbers, profile photos and profile pages of listing agents and brokers, as the listing shows them. |
| Jobs and hiring | Indeed, Glassdoor | Employer names, the text of job ads (which can name a recruiter or hiring contact), and, for employer reviews, the reviewer's job title, location, employment status, ratings and review text as the source shows them. Sources usually show these reviews without the reviewer's name. |
| E-commerce | Amazon | Names of sellers and brands, and the display names, ratings, text, dates and photos of customer reviews, as the product page shows them. |
| Social media and video | TikTok, YouTube, Reddit | Usernames, display names, profile descriptions and pictures, follower and engagement counts, and the text, captions, comments and media links of public posts and videos. |
| Reviews | Glassdoor | Reviewers' display names, ratings, text, dates and the job title or location the source shows with them, and business replies. |
A record holds only what the page itself shows. We do not add information about you from anywhere else, and we do not combine records into a profile of a person.
4. How records are made
- A record is made only when a business sends a request naming a source page or a search. URAKIMON's automated software then loads the matching public pages over the internet, reads what they show and arranges it into fields.
- It loads only pages that are open to anyone. It never signs in to a source, never uses an account at a source, never reads private areas such as messages or members-only pages, and does not buy information about people.
5. Why, and our legal basis
We make records so that businesses can study markets, prices, products, job markets, property markets and public opinion. Under the GDPR and the UK GDPR we rely on legitimate interests (Art 6(1)(f)): our interest in providing this service, and our customers' interests in that research. We weighed those interests against yours. What tips the balance, in our view:
- the information is already shown to the public by the source, and records hold nothing the page does not show;
- records exist for a short time (below), and we keep no lasting store of people;
- customers must have their own lawful basis, and may not use records to profile people on sensitive traits, harass them, make eligibility decisions about them or re-identify them (acceptable use);
- you can object, and ask us the questions below, at any time.
6. Sensitive information
Public posts and reviews sometimes reveal health, religion, political views, sexuality or similar details. URAKIMON does not look for this information, does not sort or label records by it, and forbids customers from using records to profile or decide anything about people on the basis of it.
7. Who receives it
The business that asked for the record receives it. The providers on Service providers handle it for us while the record exists (hosting, the database, and the network provider that carries requests to sources' pages and their answers back). We do not give records to anyone else and do not publish them.
The example records on this website are made from real ones, but the names, usernames, photos and contact details of the people in them are replaced with fictional ones.
8. Records sent to other countries
URAKIMON's servers are in the United States. Businesses anywhere in the world can ask for records, so information about you can go to a business in any country. When information about people in the European Economic Area, the United Kingdom or Switzerland goes to a business in a country without an adequacy decision, our terms bind that business to the European Commission's Standard Contractual Clauses (controller to controller), with the UK Addendum for UK data. You can ask [PRIVACY EMAIL] for a copy.
9. How long records exist
URAKIMON removes a job and every record in it 24 hours after the job ends; removal runs every 15 minutes. After that we hold no copy, apart from database backups, which expire after [DATABASE BACKUP RETENTION PERIOD], and we cannot tell which business received a record. A business that received a record keeps its copy under its own rules, as a separate controller.
10. Why we do not contact you directly
The GDPR normally asks us to tell each person when we obtain information about them. We do not do that individually, because it would involve a disproportionate effort (Art 14(5)(b)): records are made on request from many public pages, we keep no contact details for the people in them, and records are gone within 24 hours. Reaching each person would mean collecting more information about them than records hold. Instead we publish this notice, keep records short-lived and limit what customers may do with them.
11. Your rights, and how to use them
Under the GDPR and the UK GDPR you can ask us for a copy of what we hold about you (access), to correct it, to delete it, to restrict its use while a question about it is settled, and you can object to our use of it. Email [PRIVACY EMAIL] with:
- the address of the page that shows your information (for example your profile, listing or post), or your username and the source;
- what you are asking for.
What we can do today: records exist only for 24 hours after the job that made them, so in most cases we hold nothing about you when your message arrives, and we will tell you so. We do not keep a list of people to leave out of future records, and we cannot tell afterwards which business received a record. We will consider every objection and request, and answer within one month (up to two more months for a complex request, and we would tell you why within the first month). We ask for more proof that the information is yours only when we have reasonable doubt. There is no charge.
You can also ask the source to remove or hide the information on its own pages: once a page stops showing it, no new record can contain it. If a business that received a record contacts you or uses your information, you can use your rights with that business directly.
12. US residents
Records hold information that the source shows to the general public. Some US state privacy laws exclude such publicly available information from the rights they give; others may not. Whatever your state, you can write to [PRIVACY EMAIL] to ask what we hold about you or to have it deleted, and we answer as described above. Because you have no account with us, tell us the page that shows your information and, if we need to confirm it is yours, show that you control it (for example by writing from an address shown on that page, or by a message posted from that profile). An authorised agent can write for you with your signed permission. We answer within 45 days, or tell you within that time if we need up to 45 more.
13. Complaints
Please tell us first at [PRIVACY EMAIL]. We acknowledge a complaint within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office in the United Kingdom (ico.org.uk) or to the data protection authority where you live or work in the European Economic Area (the list of authorities).
14. Changes to this notice
When this page changes, we post the new version here at least 30 days before it applies, and the effective date at the top changes with it. A change that the law, a court or an authority requires can apply sooner, from when we post it.