Privacy policy

Who is responsible

PUT_YOUR_FULL_NAME_OR_COMPANY, of PUT_YOUR_FULL_POSTAL_ADDRESS. Contact: hello@whocalledmehq.com. We are the data controller for this site.

What we process

If you just look something up: no account, no name, no email. We keep aggregate usage figures, and if you accept advertising cookies, the identifiers our advertising partner uses.

If you submit a report: the text you write, the name you choose to display (a nickname or nothing at all is fine), and a hashed version of your IP address. The address is never stored in readable form: it is put through a one-way function that only lets us spot repeat submissions from the same source. It cannot be reversed to identify you.

Phone numbers: a mobile number can be personal data where it identifies a living person. We publish a number only where there is genuine public interest in doing so, which in practice means somebody has reported receiving an unwanted call from it.

Our lawful basis

For visitors in the UK and Ireland we rely on legitimate interests under Article 6(1)(f) of the UK GDPR and the EU GDPR respectively: helping people protect themselves from nuisance and fraudulent calls. We have weighed that interest against the rights of number holders, and it is why we operate a free, straightforward removal process and do not publish pages for numbers nobody has reported.

Advertising and analytics cookies rely on your consent, which you can withdraw at any time.

How long we keep it

Reports stay while the page remains useful. Technical data attached to a report is deleted after twelve months. Removal requests are kept long enough to show we dealt with them properly.

Who we share it with

We do not sell personal data. The only third parties involved are our hosting provider, and Google as our advertising partner if you have accepted those cookies.

Your rights

You can ask for access, rectification, erasure, restriction, objection and portability by emailing hello@whocalledmehq.com. We will respond within one month.

To remove a phone number, use the removal form. When we accept a request the page is deleted and the number is permanently blocked, so it will not reappear even if someone searches for it again.

If you are unhappy with how we have handled your request you can complain to the regulator in your country: the Information Commissioner's Office (ico.org.uk) in the UK, the Data Protection Commission (dataprotection.ie) in Ireland, the Office of the Australian Information Commissioner (oaic.gov.au) in Australia, or the Office of the Privacy Commissioner (privacy.org.nz) in New Zealand.

Visitors from the United States

We do not sell personal information. If you live in California or another state with a privacy law, you can ask us to tell you what we hold about you, to delete it, or to correct it by emailing hello@whocalledmehq.com or using the US removal form. We will reply within 45 days. We do not discriminate against anyone who makes a request. Advertising partners may collect information through cookies; you can opt out through the consent settings on the site or through your browser.

Visitors from Australia and New Zealand

We handle personal information in line with the Privacy Act 1988 (Australia) and the Privacy Act 2020 (New Zealand). Information we collect may be stored on servers outside your country. You can ask to see or correct what we hold, or to remove a number, using the removal form for your country or by email.

Visitors from Canada and continental Europe

Each of our Canadian and continental European country sites has its own privacy policy, in the local language and naming the local regulator, under /ca/privacy, /se/privacy, /pl/privacy, /fi/privacy, /cz/privacy, /dk/privacy, /nl/privacy, /it/privacy, /de/privacy, /pt/privacy and /fr/privacy.

Children

This site is not aimed at children and we do not knowingly collect their data.