Privacy Notice

Revised 5 October 2026

We keep personal data to a minimum. This notice explains what we process, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

Controller

The operator of Legit Pages is a company registered in the Netherlands.

Privacy questions and requests: [email protected].

Visitors to this site

• Server logs. To deliver pages and protect the site, our server and our network provider Cloudflare process your IP address, the time of the request, the page requested, your browser's user agent and the referring page. Legal basis: our legitimate interest in running a secure website (Article 6(1)(f)). Our server deletes these logs after 10 days.
• No cookies, no analytics. We do not set cookies and do not use analytics, advertising or tracking tools. No consent banner is needed because nothing is stored on your device.
• Email. If you write to us, we process your address and message to answer you. Legal basis: legitimate interest (Article 6(1)(f)). We keep the correspondence for up to 24 months.

Information about contractors

Legit Pages shows whether contractors in California hold the state license their work requires. We describe the business, not the people behind it, and we publish only what that check needs.

What we publish: the business name as registered with the California Contractors State License Board (CSLB), license number and classification, license status, bond and workers' compensation status, disciplinary actions recorded against the license (with the CSLB case reference and date), the city where the business is registered, and facts the business publishes on its own website (with the page and date).

What we do not publish: street addresses of businesses run by one person, personal phone numbers, and the names of qualifying individuals, officers or employees listed in CSLB records.

Some licenses are held by one person, and the registered business name can then include that person's name. In that case the business name is personal data. We obtain it from CSLB public records, not from the person (Article 14). To match records correctly we also process, without publishing, the full CSLB record of a license, including qualifier names and the registered address.

Purpose: to help consumers check a contractor before hiring. Legal basis: our legitimate interest and the interest of consumers in checking licenses that the state already makes public (Article 6(1)(f)).

Retention: we keep a listing while the contractor holds a license or the license ended recently. We remove listings, and the records behind them, of contractors whose license ended more than 24 months ago.

We do not make decisions with legal or similarly significant effects based solely on automated processing. Each check shows the public records it is based on.

Recipients and transfers outside the EU

We do not sell personal data. Service providers process it on our behalf:

• Cloudflare: network delivery, security and email forwarding.
• Interserver: hosting of our server in New York, United States.
• Google: email.

These providers process data in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.

Your rights

You can ask for access to your data (Article 15), correction (Article 16), erasure (Article 17), restriction (Article 18) and portability (Article 20). You can object at any time to processing based on legitimate interest (Article 21); we then stop unless we have compelling grounds. Write to [email protected]. We reply within one month.

You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the authority in your country.

Changes

We update the revision date at the top when this notice changes.