Privacy policy
You can read the whole site without an account and without giving us anything. This page explains what we process when you do create an account, write a review, ask for an intro or receive our mail.
Last updated:
Who is responsible
Digitalk Limited, 36, FL3, Abbate Savoia Street, Naxxar NXR1141, Malta, company number C98676, VAT MT28103535, operates FieldTested and is the controller of the personal data described here. Contact for every privacy question: hello@fieldtested.eu.
Without an account
- Statistics: Vercel Web Analytics counts visits without cookies and without storing your IP address. Google Analytics only sets cookies after you accept them in the banner. Details and your choice: cookies.
- Counters: we count how often a page, a website link or a “request a quote” button is used, per vendor and per week, without linking it to you. Searches without a result are stored as the search words only.
- Ask a question: the question box sends your question to an AI model to answer from our data. We do not store the question.
With an account
| What | Why | Legal basis |
|---|---|---|
| E-mail address, name if you give it, login method (e-mail link, Google) | Your account and login | Contract |
| Shortlist, followed categories, alert settings | The features you use | Contract |
| Company name, VAT number, city, company domain, the KBO legal form and sector of that company | The company step, so a review or intro is linked to a real company | Contract |
| The date and version of the terms you accepted | Proof of what you agreed to | Legal obligation and legitimate interest |
You can export or delete your data yourself on your account page, or ask us at hello@fieldtested.eu.
Buyer signals
When you are signed in, we record which topics your account reads (the page, the topic, the week). Vendors that pay for signals only ever see company × topic × week, for example “a construction company in Antwerp is comparing time registration apps this week”. They never see your name, e-mail address, IP address or the pages you read.
- Legal basis: legitimate interest (GDPR art. 6.1.f). We explain it at sign-up and in the terms of use.
- Never for sole traders (the company is then a person), never when your browser sends Global Privacy Control or Do Not Track, never without a company.
- You switch it off on your account page at any time. You can also object by mail.
- Events are deleted after 12 months.
Reviews
A review stores your ratings, texts and answers, your role and company size, how we verified it (work e-mail or company number) and where it came from (organic or invited). Your IP address is only stored as a salted hash, to detect fraud. A published review shows the name you chose to show (or none) and your company only if you tick it. Legal basis: contract (you ask us to publish) and legitimate interest (fraud checks). Deleting your account deletes your reviews.
“Compare 3” intros
When you request an intro, we store what you need, your team size and timing, your contact details and your company. Only the vendors you tick receive your contact details, one by one, with your consent. A vendor that has not claimed its profile gets nothing. When none of the vendors you picked could receive the request within 30 days, the request and its contact details are deleted. Legal basis: consent per vendor, and contract.
We send mail through Resend. We keep a record of each mail (address, type, when it was sent, whether it was delivered or bounced) to apply our contact limits and to respect opt-outs. Every optional mail has a one-click unsubscribe; an address that bounces hard or marks us as spam is suppressed. Feedback buttons in mails store your answer to that request only.
Vendors
For software vendors we process the work e-mail used to claim a profile, the public contact address the vendor publishes on its own website, portal visits, and plan and billing details. Legal basis: contract, and legitimate interest for B2B contact about the vendor’s own profile. Every such mail has an opt-out.
Who processes data for us
| Processor | For | Where |
|---|---|---|
| Vercel Inc. | Hosting, cookieless statistics, file storage, scheduled jobs | EU and US |
| Neon (Databricks) | Database and login | EU region (Frankfurt) |
| Resend | Sending mail | US |
| Login with Google (if you choose it), Google Analytics after consent | EU and US | |
| Stripe | Payments by vendors (once billing is live) | EU and US |
Transfers outside the EU rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. We do not sell personal data and we do not use it for advertising.
How long we keep data
Account data: until you delete your account. Signal events: 12 months. Intro requests: until you delete your account, or after 30 days when no vendor could receive them. Mail records and opt-outs: as long as we may mail the address, so an opt-out keeps working. Every admin look at buyer data is logged.
Your rights
You can ask to access, correct, delete, export or restrict your data, and object to processing based on legitimate interest (such as signals). Mail hello@fieldtested.eu; we answer within one month. You can complain to the Maltese Information and Data Protection Commissioner (idpc.org.mt) or to the data protection authority where you live, in Belgium the Gegevensbeschermingsautoriteit / Autorité de protection des données (gegevensbeschermingsautoriteit.be).
Changes
When this policy changes, the date at the top changes. Material changes are announced on the site and by mail to account holders.