1. Who we are
scam-i.uk operates a free, public scam-intelligence database. This policy explains how we handle personal data in accordance with the UK GDPR, the Data Protection Act 2018 and, where applicable, other privacy laws. For any privacy query please use our contact form.
2. Data we collect
- Scam reports: the description you write, scam category, amount lost, scammer contact details and an optional general location (city/country). We ask you not to include your own name, address or other identifying information.
- Additional occurrences and comments: a display name you choose, your comment text, optional location and amount lost.
- Contact form: your name, email address, subject and message.
- Technical data: IP address, browser type, device, pages viewed and referring URL, collected automatically through server logs and privacy-respecting analytics for security and performance.
We do not require an account, and we do not knowingly collect data from children under 16.
3. How we use your data
- To publish scam reports, occurrences and comments so the public can be warned (legal basis: legitimate interests in consumer protection and public interest).
- To respond to your enquiries (legal basis: legitimate interests / performance of a request).
- To keep the Site secure, prevent abuse and spam, and understand aggregate usage (legal basis: legitimate interests).
- To comply with legal obligations, including lawful requests from authorities.
4. Public nature of submissions
Reports, occurrences and comments are published publicly and may be indexed by search engines, quoted, or shared. Do not submit anything you are not comfortable being public. Contact-form messages are private.
5. Sharing
We do not sell personal data. We share data only with service providers that host and operate the Site under contract, and with authorities where legally required. Scammer contact details published in reports are not treated as the reporter’s personal data.
6. Retention
Published reports and comments are retained indefinitely as part of the public record unless removed following a valid request. Contact-form messages are retained for up to 24 months. Server logs are retained for up to 90 days.
7. Cookies
The Site uses only strictly necessary cookies and local storage required to operate. We do not use advertising or cross-site tracking cookies.
8. Your rights
Depending on your location you may have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. To exercise these rights, or to request removal of a submission you made, contact us. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.
9. Security
We use encrypted connections (HTTPS), access controls and reputable hosting providers. No system is perfectly secure, and we cannot guarantee absolute security of data transmitted over the internet.
10. International transfers
Our hosting providers may process data outside the UK/EEA. Where they do, appropriate safeguards such as standard contractual clauses are in place.
11. Changes
We may update this policy from time to time. Material changes will be indicated by updating the date above.