Privacy notice

Last updated 5 October 2026

Who we are

Siftdata is a trading name of Sakariya Adan, sole trader, Borgergata 3, 1767 Halden, Norway. We are the data controller for the personal data described here. Because we are based in Norway, the GDPR (as it applies in Norway) covers our processing, and the UK GDPR applies to people we deal with in the UK. Contact: [email protected].

The data we sell is about organisations, not people

Seattle build-outs: these lists come from the City of Seattle's public building-permit data. We include the project address, the description, the estimated cost, the permit dates and the name of the business moving in when the permit names one. We don't include the names of individual applicants, owners or contractors.

Care services in England: these lists come from the Care Quality Commission's public register, reused under the Open Government Licence. We only include services run by companies and other organisations. We leave out services registered to a named individual, and we don't include the names of registered managers or nominated individuals. Our filter works on CQC's ownership details and the provider's name, so it can occasionally miss a case. A service's phone number or address can also relate to a small business run by one person. If you think a row identifies a person, email us and we'll remove it within five working days.

People we contact about Siftdata

We email companies whose customers are the businesses on our lists (for example sign companies and low-voltage installers in Seattle, or companies that sell to care providers in England), to ask whether our list would be useful to them.

• What we hold: the company name, its generic contact address (such as info@ or sales@) or contact form, its website, and our notes on replies. If someone replies to us, we also hold their name, work email address and message.
• Where it comes from: the company's own website and public business registers (such as Companies House in the UK).
• Why and on what basis: to offer our service to businesses it is relevant to. Our lawful basis is legitimate interests (Article 6(1)(f) of the GDPR and the UK GDPR): offering a relevant business service to companies whose customers are new commercial premises or care services. We only email companies at generic business addresses (such as info@), never personal addresses. In the UK we only email limited companies and similar organisations, never sole traders.
• Opting out: reply "no" or "unsubscribe" to any email. We add the address to a suppression list the same day and never email it again. We keep only the address on that list, so we can respect your choice.
• How long: up to 12 months after our last contact, unless you become a customer.

People who ask for a free list

• What we hold: the work email, company name, region and service type you enter in a sign-up form on our website, and the date.
• Why and on what basis: to send the free list you asked for and one follow-up email about the paid version (steps you asked us to take before a possible contract, and legitimate interests for the follow-up). Reply "no" to stop.
• How long: up to 12 months after our last contact, unless you become a customer.

Customers

• What we hold: your name, company name, email, billing address, VAT number if you give one, and your purchase history.
• Why and on what basis: to deliver the lists you buy, send invoices and answer your questions (performance of a contract), and to keep accounting records (legal obligation).
• How long: for as long as you're a customer, then as long as Norwegian bookkeeping law requires for accounting records (currently five years).

Stripe processes card payments. We never see or store your card number.

Who we share data with

We don't sell or share personal data with anyone for their own use. These service providers process data on our behalf:

• Stripe (payments and invoices)
• Google Workspace (email)
• Cloudflare (website hosting, DNS and storage of sign-up forms)

Some of these providers process data in the United States. They do so under the safeguards the law requires, such as standard contractual clauses or the EU-US and UK-US data frameworks.

This website

This website sets no cookies and uses no tracking or advertising tools. Its fonts are served from our own site, not from a third party. Our host, Cloudflare, keeps standard technical logs, such as IP addresses, for security.

Your rights

You can ask us for a copy of your personal data, and ask us to correct or delete it, restrict how we use it, or object to our using it, including for direct marketing. Email [email protected] and we'll reply within one month.

You can also complain to a data protection authority: in Norway, where we are based, Datatilsynet; in the UK, the Information Commissioner's Office.