Privacy

Verified profile management

A profile-scoped account is granted only after independent verification of representation. We store an organisational email, approval evidence and an access-code hash. Sessions use a secure HttpOnly cookie and expire after eight hours. Accounts expire after at most one year; expired account information is deleted after ninety days. Proposed updates and private image uploads are retained for up to ninety days for moderation. Public facts change only after editorial checks.

Public searches filter a downloaded catalogue in your browser. We do not request your browser location unless you choose distance search and give permission. Location is used to calculate distances and is not included in a correction submission.

Directory maps load OpenStreetMap tiles. Loading tiles discloses connection information to the tile service. Profile maps load after you choose to display them. Required map attribution remains visible.

Contact messages and corrections are stored in a protected queue and forwarded to the website administrator. Only the information needed to handle the request should be submitted. Records are retained for up to 90 days through the existing processing and purge workflow. Abuse protection uses a salted, time-limited connection hash rather than storing raw IP addresses in submissions.

Cloudflare hosts the website and processes technical connection information. We do not run advertising tracking scripts on these pages. External shop links lead to third-party websites with their own privacy terms; affiliate links may identify this website to bol.

Contact us about your information.