Privacy notice
How Xedir uses personal data. Last updated 13 October 2026.
Xedir runs xedir.com, where businesses find and compare technology providers and providers list their services. We follow UK GDPR and the Data Protection Act 2018. Questions about your data go to hello@xedir.com.
What we collect
- Provider accounts: your name, work email, sign-in details from Google if you use it, and the company information you publish.
- Enquiries: the name, email, company and message a buyer sends, and the replies between buyer and provider.
- Reviews: the review, the reviewer's name or job title as they choose to show it, and the invitation it came from.
- Usage: pages visited and actions taken, only if you accept analytics cookies.
- Listing counts: when a provider's profile or service page is viewed, or the provider appears in a list, we add one to a daily total for that provider. We store nothing about you for this (no cookie, IP address or device details), and we skip it if you turn analytics down or your browser sends Do Not Track or Global Privacy Control. Providers see the totals, never who looked.
Why we use it
- To run your account and publish your profile and services (contract).
- To pass an enquiry and its replies between the buyer and the provider, and to check how the enquiry went (legitimate interests).
- To check reviews before they're published and keep them genuine (legitimate interests).
- To understand how the site is used and improve it, with your consent.
- To show ads from Google, with your consent.
- To send service emails such as review invitations and enquiry alerts.
Who sees it
A provider sees your first name and your message, never your email address or company. They reply through Xedir, and we email you when they do. Providers can't browse buyers. Published reviews are public. We use Google Cloud and Firebase (hosting, database, sign-in and email delivery), Stripe for payments, Google Analytics if you consent, and Google AdSense to show ads if you accept advertising cookies. Some of these suppliers may process data outside the UK under the UK's approved safeguards. Providers listed on Xedir may be based outside the UK; anything you choose to write in a message goes to them.
How long we keep it
Accounts and profiles are kept while the account is open. Enquiries are kept for two years, then deleted. Published reviews stay up while the provider is listed.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, by emailing hello@xedir.com. You can also complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use a sign-in cookie that the site needs to work. Analytics cookies are set only if you accept them. Ads on Xedir come from Google AdSense and load only if you accept advertising cookies. They are always labelled “Advertisement” and kept apart from search results and provider listings, and Google may use those cookies to choose which ads you see (how Google uses information from sites that use its services). You can change either choice at any time from the link in the footer.