Privacy Policy

What we collect

• Company details you give us — name, address, country, telephone, fax, website, logo, the activities and products you select, and the description you write.
• Contact people you choose to list — name, job title, department, direct line, mobile, email.
• Account details — the name and email of each person who signs in, and a one-way hash of their password. We never store a password we could read.
• What you post — offers, inquiries, job vacancies, CVs, applications and any documents attached to them.
• Billing records — invoices, payments and the membership they relate to.
• Technical data — a sign-in cookie, and basic server logs. See our cookie policy.

Who can see it

This is the part worth reading carefully, because a directory only works if what is public is public on purpose.

• Anyone can see a listed company's name, country, activities, products and description.
• Members only can see contact details — telephone, email, website, named contacts and their direct lines. This is enforced on our servers, so the data is not in the page for someone to read out of the source.
• Paid members only can see a candidate's email, phone and CV document. A CV carries somebody's home address, so the file itself is served through a membership check rather than sitting at a public URL.
• Only you and our staff can see your billing records, sign-in details and anything you have not published.

What we do with it

We use it to run the directory and marketplace, to bill you, to send transactional messages such as verification codes, invoices and replies to your listings, and to keep the site secure.

We send marketing email only where you have not opted out, and every marketing message carries an unsubscribe link that works. Transactional messages — an OTP, an invoice, a reply to your offer — are not marketing and are not suppressed.

What we do not do

• We do not sell your personal data.
• We do not sell or rent our member list.
• We do not run advertising networks, retargeting pixels or third-party analytics trackers on this site.
• We do not use your data to train anything.

Who we share it with

Only where it is needed to run the service: our hosting provider, our email delivery, and our payment processor when card payment is used. They act on our instructions. Beyond that, we share data when the law requires it.

How long we keep it

Listings and the content you post stay while your account is open. Billing records are kept for as long as tax and company law require. When you close an account we remove your listing from public view and delete what we are not required to keep.

Some of our records go back to 2000. If you have been a member that long, we still hold your original registration and invoice history — ask and we will tell you exactly what.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Most of it you can change yourself from your dashboard at any time.

Write to info@mesteel.com and we will respond. If we cannot do what you ask — usually because we are required to keep a billing record — we will tell you why.

Security, honestly stated

Passwords are hashed. Sign-in uses a cookie that JavaScript cannot read. Uploaded files are stored so they cannot be executed, and files containing personal data — CVs, applications, member documents — are served through a permission check rather than from a public folder.

No system is perfect. If you find a security problem with this site, please tell us at info@mesteel.com before telling anyone else, and we will fix it.