This policy explains what information Best Data Room collects when you use bestdataroom.net, what we do with it, who else handles it, and the choices and rights you have. We have tried to keep it short and plain.
Who is responsible for your data
The site is operated by the Best Data Room editorial team, which acts as the data controller for the personal data described here. Details of the operating entity are available on request through our contact page. Use the same page for any privacy question or request.
The short version
- You can read the whole site without creating an account or giving us your name.
- We use analytics to understand which pages are useful and where the site needs work, and you can opt out of it.
- If you contact us, we use what you send only to reply.
- We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
What we collect and why
When you browse
The site is a set of static pages served through Cloudflare. Like any web host, Cloudflare processes technical data such as your IP address, browser type, the page requested and the time, so it can deliver the page and protect the site from abuse and attacks. We may also use Cloudflare’s privacy-focused web analytics, which counts visits without cookies. Our legal basis is our legitimate interest in running a secure, working website.
Analytics
To see how the site is used, we also use:
- Google Analytics 4, provided by Google, to measure visits, traffic sources, the pages people read and the links they click, including clicks on partner links. This uses cookies and pseudonymous identifiers.
- PostHog, a product analytics tool, to understand how people use pages such as the rankings and the quiz. PostHog may also record anonymised session replays: a reconstruction of mouse movements, scrolling and clicks on our pages. Text you type into form fields is masked in these recordings and is not captured.
Our legal basis for these tools is our legitimate interest in improving the site, or your consent where local law requires it. On your first visit a cookie notice lets you accept or decline analytics. If you choose Decline, Google Analytics stops storing analytics cookies, PostHog stops recording and does not load on later visits, and we remember your choice in your browser’s local storage. You can also block cookies in your browser, use a tracker-blocking extension or Google’s Analytics opt-out add-on. To change a choice you made in the notice, clear this site’s data in your browser and the notice will show again. Opting out has no effect on what you can read.
When you contact us
If you send us a message through the contact form, we receive your name, email address and whatever you choose to write. The form is delivered to us through Resend, an email delivery service. We use the details only to read and answer your message, and to keep a record of corrections or requests. Our legal basis is our legitimate interest in responding to you, or taking steps you asked for.
When you click a partner link
Partner links pass through a redirect on our domain, which records the click. If you then visit a provider’s site, that provider (and the partner programme it uses) may set its own cookies to attribute a sign-up to us. That processing is governed by the provider’s own privacy policy, not this one. See our affiliate disclosure for how partner links work.
Cookies
We group cookies and similar technologies into two kinds:
| Type | Purpose | Needs consent? |
|---|---|---|
| Essential | Keep the site secure and working | No |
| Analytics | Google Analytics 4 and PostHog measurement and session replay (form inputs are masked) | You can decline in the cookie notice on your first visit |
We do not use advertising cookies. You can also block or delete cookies through your browser settings.
Who we share data with
We share personal data only with service providers that help us run the site, acting on our instructions:
- Cloudflare, for hosting, content delivery and security.
- Google, for Google Analytics 4.
- PostHog, for product analytics and session replay.
- Resend, for delivering contact form messages.
We may also disclose data if the law requires it, or to protect our rights or the safety of others. We do not sell personal data.
International transfers
Some of these providers process data outside your country, including in the United States. Where data leaves the UK or the European Economic Area, we rely on recognised safeguards such as adequacy decisions or the European Commission’s standard contractual clauses.
How long we keep it
- Analytics data is kept for no longer than 14 months in Google Analytics and for the retention period set in PostHog, then deleted or aggregated.
- Contact messages are kept for as long as needed to deal with them, and for up to two years afterwards in case the same issue comes up again.
- Server and security logs held by Cloudflare are kept for short periods under Cloudflare’s own policies.
Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct or delete it;
- object to or restrict how we use it;
- receive it in a portable format;
- withdraw consent at any time, without affecting earlier processing.
If you are in the European Union or the UK, these rights come from the GDPR and UK GDPR. You can also complain to your local data protection authority; in the UK that is the Information Commissioner’s Office.
If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined. We will not treat you differently for using any of these rights.
To make a request, use the contact page. We may need to confirm your identity before acting on it, and we will reply within the time the law allows, normally one month.
Children
The site is written for business readers and is not aimed at children under 16. We do not knowingly collect data from children.
Security
We collect very little personal data, and what we do collect is held with reputable providers that use encryption and access controls. No system is perfectly secure, so please do not send sensitive deal documents or confidential information through the contact form.
Changes to this policy
We will update this page when our tools or practices change, and the date at the top will show when it was last revised. If a change is significant, we will make it clear on the site.