This policy applies to UK and EU customers only. If you are outside the UK and EU, please see our Terms & Conditions and general privacy notice linked in the footer.
1. Introduction
TraceLookup is operated by REM Vision LLC("we," "us," "our," or the "Company"), the data controller for the personal data described here. We are committed to protecting your privacy and to handling personal data in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR. This Privacy Policy explains how we collect, use, retain, store, and disclose personal data when you access or use the trace-lookup.comwebsite and its subdomains (together, the "Site") and our phone and email lookup services (the "Services").
2. Information We Collect
2.1 Types of information
We collect the following categories of information:
- Account data: the name and email address you provide when you create an account or contact support.
- Billing data: your subscription status and the payment details you enter at checkout. Payments are processed by our payment provider, Stripe, acting as a processor. We never receive or store your full card number.
- Search query data: the phone number or email address you enter to run a lookup.
- Lookup results: the factual signals our Services return for a query, such as number validity and format, region, carrier and line type, reachability and VoIP or do-not-call status for phone numbers, and mailbox deliverability for email addresses. For United States queries, where our lookup partner holds a consumer record for the number or address, the results may also include a registered name, a possible street address, an associated phone number or email address, and a possible employer.
- Usage and technical data: standard data such as browser type, IP address, timestamps, and log data that we need to operate, secure, and improve the Services.
2.2 Sources of information
- Directly from you when you register, contact us, or run a lookup.
- From open telephony metadata (via the libphonenumber library) that we use to validate and classify a number you enter.
- From our lookup partner (1Lookup), which returns validated number status, carrier and line type, reachability, VoIP and do-not-call flags, phone risk indicators, and email deliverability and mailbox state for the query you submit. For United States queries it may also return a consumer record it holds for the number or address, including a registered name and a street address, which we pass through to your report as returned. That coverage is limited to the United States and a match is never guaranteed.
We generate results for a query when you run it. We do not build a public directory of individuals, and we do not use lookup results for advertising targeting. Our Services do not process images, biometric or facial-recognition data, government identity documents, or real-time location or GPS data, and we do not track the physical movements of any person.
3. Legal Basis for Processing
- Account and billing data: processed to perform our contract with you (to provide the Services and manage your subscription) and to meet legal obligations such as accounting and fraud prevention.
- Search query and results data: processed to perform the lookup you request, which is the core of the Services you ask us to provide.
- Usage and technical data: processed on the basis of our legitimate interest in operating, securing, and improving the Services.
- Cookies and similar technologies: where required by law, we rely on your consent for non-essential cookies.
4. How We Use Information
We use the information we collect to:
- run the phone and email lookups you request and return the results to you;
- create and manage your account and your subscription, including billing;
- respond to your support requests and communicate about your account;
- operate, secure, and improve the Services and prevent fraud and abuse;
- comply with our legal obligations.
5. Email Communications and Tracking
We may send you service messages about your account and, where you have opted in, product updates. Marketing emails include an unsubscribe link, and you can opt out at any time. If we use engagement measurement (such as whether an email was opened or a link was clicked) in the emails we send, we rely on your consent where prior consent is required by law and on our legitimate interest in improving our communications elsewhere. Managing these preferences does not unsubscribe you from your emails.
6. Data Storage and Retention
- Account data: retained for as long as your account is active and afterwards only as needed for legitimate business purposes and legal compliance. You can request deletion by emailing support@trace-lookup.com.
- Search history: for Pro subscribers we store the queries you run and their results so you can re-open a report without running the same lookup again. This history is tied to your account, is not public or indexed, and can be deleted from your account at any time.
- Security and audit logs: retained for limited periods as needed to operate, secure, and protect the Services.
7. Right to Erasure (Right to Be Forgotten)
You have the right under the UK GDPR and EU GDPR to request erasure of personal data we hold about you. To make a request, email support@trace-lookup.com. We may ask for reasonable information to verify your identity and to locate the relevant records. Where a valid request applies and the law requires it, we will delete or anonymize the relevant personal data in our systems within a reasonable timeframe, subject to limited exceptions for security, fraud prevention, backups, and legal compliance. We cannot remove or change information held by third-party websites or data providers, so if you want data removed from the wider internet you should also contact those original sources.
8. Data Minimization
We collect and process only the data we need to provide the Services: your name, email, the queries you run and their results, and the payment details required to process your subscription. Payment details are handled by our PCI-DSS compliant payment provider.
9. Your Rights Under GDPR
As an EU or UK user, you have the right to:
- access the personal data we hold about you;
- have inaccurate personal data corrected;
- have your personal data erased;
- restrict how we process your personal data;
- receive your personal data in a portable format;
- object to processing based on our legitimate interests;
- not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
To exercise any of these rights, email support@trace-lookup.com. You also have the right to lodge a complaint with your local data protection authority.
10. Cross-border Data Transfers
Some of our providers, including our payment and infrastructure partners, may process data outside the UK and EU, including in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses and, where applicable, the EU-U.S. and UK data protection frameworks.
11. Automated Decision-Making and Profiling
Our lookup results are generated automatically from telephony metadata and our lookup partner's data. These results are informational signals about a phone number or email address; we do not use them to make decisions that produce legal or similarly significant effects about you without human involvement.
12. Data Security
We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure, including access controls, encryption in transit, authentication, and monitoring. Payment information is processed and stored by our PCI-DSS compliant payment provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
13. Security Incident Notification
We maintain procedures to identify, investigate, contain, and respond to security incidents involving personal data. Where an incident requires notification under applicable law, we will notify affected individuals and the relevant supervisory authorities in the manner and within the timeframes the law requires.
14. Children's Data
The Services are for adults only. We do not knowingly provide the Services to, or collect personal data from, anyone under 18 years old.
15. Cookies
We use cookies and similar technologies to operate the Site, remember your preferences, and measure and improve our marketing. Where required by law, we rely on your consent for non-essential cookies.
16. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will post a notice on the Site or notify you by email. Your continued use of the Services after an update means you accept the revised policy.
17. Contact Information
If you have any questions about this Privacy Policy or want to exercise your rights, contact us at support@trace-lookup.com.
TraceLookup is operated by REM Vision LLC.
By using the Services, you acknowledge that you have read and understood this Privacy Policy.