Privacy Policy of Scamadviser

September 11, 2025

This Privacy Policy explains how ScamAdviser (operated by Ecommerce Operations B.V., "we," "our," or "us") collects, uses, and protects personal data in connection with the use of our website, mobile applications, and services (collectively, the "Services"). "Personal data" means any information that directly or indirectly identifies, relates to, or is capable of being associated with a natural person.

ScamAdviser is committed to complying with applicable data protection and privacy laws, which may vary depending on your jurisdiction. While we strive to align with globally recognized standards, such as the General Data Protection Regulation (GDPR), this Privacy Policy is intended to be jurisdiction-neutral. Where specific local laws apply, those laws shall prevail to the extent of any conflict.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. You may choose whether to provide us with your personal data. However, if you choose not to provide the information required for account registration or use of the Services, or if the information provided is incomplete or inaccurate, certain features or functionalities of the Services may not be available to you. Further, If you do not agree with this Policy, please do not use our Services or provide us with your personal data.

PERSONAL DATA WE COLLECT

We may collect personal data from you directly or automatically through your devices when you use the Services. The categories of data we may collect include:

  1. Identity data: name, phone number, email address, address and internet platform account;
  2. Government-Issued Data: National ID number, company registration number, tax identification number;
  3. Security Information: Passwords, security codes, and authorization settings;
  4. Network connection information: Information associated with your internet or mobile network connection, such as your IP address, mobile carrier, internet service provider, and the quality of your communication service.
  5. Account information: Information associated with your ScamAdviser account, including your subscription status, and your account settings.
  6. Services usage information: Information associated with your use of the Website and the Services, such as registration records, login timestamps, landing page visits and general browsing behaviors, such as visits, searches, clicks on the Website.
  7. Device information: Technical data about your device, including but not limited to device name and operating system, browser type and language, mobile device identifiers (e.g. advertising IDs), and license-related information (e.g. unique device identifiers).
  8. Log data: Logs and technical records generated by your use of the Website, and the Services, including but not limited to application usage records, log files, access timestamps, diagnostic or crash reports, system performance logs, error messages or reports, and aggregated usage history.
  9. Demographic and location data: Location data derived from your IP address, used solely to determine your approximated country or region.
  10. Other information you voluntarily provide: such as when you submit your inquiry, comment or request, or otherwise communicate with us. This may include attachments that you choose to upload (for example, screenshots, pictures, files, or documents).
  11. Cookies and similar technologies: Information collected using cookies or other tracking technologies.
  12. Call and Caller Identification Data (Android only): When you authorize our app to access call functionalities, we may collect call-related metadata including call timestamps, dialed or received numbers, click actions related to calls, and call log entries. This data is used solely to provide caller identification and call log display functions. We do not access or store the content of your calls.
  13. Offline Number Database and Search Data: When you download and use the offline database or use the number search feature, we may collect data related to your usage such as search queries, click actions, interaction timestamps, data pack version, and any usage errors for service optimization purposes.

2. PERSONAL DATA USE, LEGAL BASES  


We use your personal data for the following purposes, in accordance with applicable data protection laws and depending on the context in which you interact with us:

2.1 To enable and deliver the Services

  1. Account creation and management: To create and manage your account, including verifying your login credentials, confirming your acceptance of our Terms and Conditions, and saving your account settings.
  2. Subscription and payment processing: To process your subscription, trial application, or refund request, including but not limited to, by confirming your order, verifying your payment or any discount applicable, issuing invoice, and processing refund upon your request.
  3. Service provision and access: To provide access to the Services, enable features under your subscription, and perform any specific service you request.
  4. Campaign and event participation: To manage your participation in online/off-line events, including but not limited to, by confirming your eligibility to participate, sending you winner notifications, and delivering prizes.
  5. Service-related communication and customer support: To send you Service-related notifications, such as subscription confirmations, invoices, updates to our warranty policies, and account security alerts, and to respond to your inquiries and provide customer support, including but not limited to, by forwarding your request to our relevant teams, contacting you for further details, arranging you replacements, and maintaining internal records of the request handling process.
  6. Platform security and policy enforcement: To ensure the safety, security, and integrity of our Services, including but not limited to, by forming ongoing account verification and investigating and addressing violations of our Terms and Conditions.
  7. System management and statistical analysis: To manage and maintain the Services, and other systems, including troubleshooting, and data analysis, testing, research, statistical and survey purposes.

2.2 To Improve and/or Develop the Services

  1. Personalized service experience: To customize your experience with the Services by enabling specific features or device-level settings, such as accepting analytical cookies.
  2. Service efficiency and module integration: To aggregate user information across different modules within the Services in order to enhance operational efficiency and centralized management.
  3. Product development: To improve, optimize, enhance the Services, evaluate new features and functionalities, and develop new product/service components.
  4. Performance monitoring and metrics: To collect and aggregate metrics (such as website traffic, load speed) for the purpose of monitoring service performance, ensuring reliability, and improving service quality.
  5. User engagement and feedback: To manage our relationship with you and gather your feedback regarding your experience with the Services.

2.3 To Comply with Applicable Law, to Protect Us or A Third Party

  1. On the basis of our legal obligation under the applicable laws, our legitimate interest in protecting our operations, and/or the necessity to safeguard the vital interests of you or of another natural person, we collect and process necessary personal data for:
  2. Compliance with legal obligations: To comply with legal obligations to which we are subject, such as sharing your information in accordance with a request by a competent court or other law enforcement authority, or collect personal data from government entities, courts, or law enforcement agencies in detecting and handling scam and fraud.
  3. Contract enforcement: To enforce our Terms and Conditions or other contracts with you.
  4. Accounting and financial administration: To perform internal accounting and financial activities such as auditing and tax withholding.
  5. Security and risk mitigation: To maintain security and integrity of the Services and network infrastructure, investigate suspect misconduct, prevent, or act in reprisal in the event of suspected illegality or fraud, and to protect the safety, rights, or property of us, our users, or the other person.
  6. Group-wide risk management: To share any relevant information within our affiliates and group entities for the purpose of detecting, preventing, or mitigating fraud and abuse involving our IT systems.
  7. Legal proceedings and right defense: To establish, exercise, or defend a legal claim, including by obtaining legal counsel or initiating or participating in legal proceedings where necessary.
  8. Cooperation with authorities or partners: To share relevant information with competent government authorities or other third parties for purposes of scam detection and prevention.

2.4 Promotion

We may inform you about new products or services via e-mail or push notifications (i) where you have explicitly consented to such notifications via the Website or App, or, (ii) where permitted under applicable law, such as when contacting existing customers about our own similar services, or, in some jurisdictions, when addressing business e-mail accounts. You can object at all times against this promotional communication. Every email or push notification contains a cancellation link.

  1. Promotional offers and targeted advertising: To provide personalized promotional offers through the Website and Services as well as via other websites and services 
  2. Marketing communications: To deliver marketing communications through available channels, including by email or via social media messages.
  3. User behavior analysis: To track content you access in connection with the Services and your online behavior.

2.5 Advertisements


Our website shows advertisements. We do not publish these ourselves, but we collaborate with advertising companies. These companies keep track of what you like and use that information to show interesting advertisements or offers in the future. See the section ‘How Advertisers Track’ for more information.

2.6 Phone Number Verification Feature


Our Website offers a feature that allows visitors to crosscheck phone numbers against a database of numbers potentially connected to scams. This Service is designed to help users identify and avoid fraudulent activities. The database is a combination of various third-party sources, each with their own data categories, as indicated in the phone lookup results.

When you use this feature, we collect the phone number you input for the sole purpose of performing the crosscheck. We do not store this phone number after the check is complete. We also do not use the provided phone numbers for any other purpose, nor do we share them with third parties.

If you believe that a phone number has been unjustly included in the database, you may submit a removal request. To do so, please follow our notice and takedown procedure as described here. In case the phone number qualifies as your personal data, you may invoke your Right of Rectification as described below under the section “Your Rights”.

2.7 Additional Purposes with Your Consent 


From time to time, we may request your explicit consent to use your personal data for purposes not described elsewhere in this Policy, such as research, promotional campaigns, or participation in events organized by us or our business partners. When we do so, we will clearly explain how your data will be used and your rights regarding such processing. You may withdraw your consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal. If you withdraw your consent, we will stop the processing concerned, unless there is another legal basis for us to continue.

3. RETENTION OF YOUR PERSONAL DATA


We retain your personal data for no longer than is necessary in relation to the purposes for which it was collected, or for which it is further processed. The specific duration for which personal data is stored may vary depending on the nature of the data, the Services provided, and our legal obligations under applicable data protection laws, including but not limited to the GDPR.

Where personal data is processed for the performance of a contract with you, we will retain it for the duration of that contract and for a period thereafter as required by applicable laws for the establishment, exercise, or defense of legal claims. Where we process personal data based on your consent, we retain the data only until you withdraw your consent or the data is no longer necessary for the stated purpose.

In some cases, we may need to retain certain information to comply with legal obligations, such as for tax, accounting, or regulatory purposes. Additionally, if you exercise your rights under applicable privacy laws (such as requesting deletion or restriction), we may retain a record of your request and our response for compliance and accountability purposes.

When we no longer require your personal data and there is no legal or operational need to retain it, we will ensure that it is either securely deleted, anonymized so that it can no longer be associated with you, or stored in a manner that complies with applicable data minimization principles.

If you require further details regarding specific retention periods applicable to your data, you may contact us using the information provided in the “Contact Us” section of this Policy.

4. DISCLOSURE OF PERSONAL DATA


We are committed to maintaining the confidentiality of your personal data and do not sell, rent, or trade it to third parties. However, we may share your data with certain trusted third parties when it is necessary to provide our Services, fulfill legal obligations, or protect our legitimate interests, all in accordance with applicable data protection laws.

Personal data may be disclosed to our service providers who act on our behalf and support us in delivering the Services. These third parties may include hosting providers, payment processors, customer support platforms, analytics providers, and marketing partners. All such entities are contractually obligated to process personal data strictly in accordance with our instructions and only for the purposes outlined in this Policy.

In some circumstances, we may be required to disclose your personal data to governmental or regulatory authorities, courts, or law enforcement agencies when mandated by applicable law, such as in response to a legal request, court order, or to comply with a legal obligation. We will take steps to verify the legitimacy of any such request and ensure that only the minimum necessary data is disclosed.

We may also share your data in the context of a corporate transaction, such as a merger, acquisition, restructuring, or sale of assets. In such cases, we will ensure that the receiving party agrees to process your data in a manner consistent with this Privacy Policy and applicable data protection principles.

Additionally, with your explicit consent or where otherwise permitted by law, we may share your data with advertising or analytics partners to support the delivery of personalized content or insights. You can find more information about how these partners operate in the section "How Advertisers Track."

Whenever personal data is transferred to third parties, we ensure appropriate contractual and technical safeguards are in place. For data transfers to countries outside the European Economic Area or other jurisdictions with differing privacy standards, we rely on lawful transfer mechanisms such as standard contractual clauses, adequacy decisions, or other appropriate safeguards, as required by law.

5. TRACKING TECHNOLOGIES AND COOKIES


We use cookies and similar technologies to enhance your experience with our Services, to understand usage patterns, and to deliver relevant content. A cookie is a small text file stored on your device that allows us to remember certain information about your visit, such as preferences or actions taken.

When you first access our website, you will be presented with a cookie banner or similar mechanism requesting your consent for the use of cookies. You have the option to accept all cookies, reject non-essential cookies, or manage your preferences. Your consent choices will be respected in accordance with applicable law. You may also adjust your browser settings to block or delete cookies, but please note that doing so may affect the availability and functionality of certain features on our website.

We use both first-party cookies (set by us) and third-party cookies (set by partners such as analytics providers or advertising networks). These technologies help us measure website traffic, monitor performance, and tailor advertising content to your interests. In particular, we use services provided by Ezoic Inc. ("Ezoic") and Freestar Inc. (“Freestar”). These partners facilitate the placement of advertisements on our Website(s) and may in turn rely on a broader network of third party vendors, which is made available via our cookie banner. 

Ezoic manages and delivers personalized advertising. Ezoic and its partners may employ cookies, tags, pixels, and other tracking tools to collect and process data such as your IP address, device type, operating system, browser, language preferences, hashed email (if available), and interaction patterns.

Such information may be combined with data obtained through other sources to build audience profiles and serve targeted advertisements across different websites, applications, or devices. Although these tools do not generally allow us to directly identify you, the data may qualify as personal data under the GDPR or other applicable laws.

We also partner with Freestar to facilitate advertising placements on our website. Freestar may collect and process certain technical data for the purpose of serving advertisements. For more information on Freestar’s data practices, please refer to their privacy notice.

Where third-party partners are located outside the European Economic Area (EEA) or other jurisdictions with differing privacy standards, we ensure that appropriate data protection measures are in place, including standard contractual clauses or other recognized legal mechanisms. Nonetheless, we cannot control the actions of such third parties, and we recommend reviewing their respective privacy policies to understand how your data is used.

You may find more information on interest-based advertising and how to manage your preferences via the links provided in the cookie consent banner or by visiting recognized industry sites for opt-out mechanisms.

6. TRACKING IN MOBILE APPLICATIONS


While mobile applications do not use cookies in the same way as desktop browsers, we use equivalent technologies that serve similar purposes—namely, to store data, enable features, and support personalized advertising. These mechanisms include:

  1. Local Storage: On mobile devices, we may use local storage solutions provided by the operating system, such as User Defaults on iOS and Shared Preferences on Android. These are used to save preferences, session information, and other basic configuration data across app launches.
  2. Software Development Kits (SDKs) and APIs: Our app may incorporate third-party SDKs to enable certain features such as analytics, advertising, or user experience enhancements. These SDKs may process personal data to deliver personalized services or improve performance.
  3. Device Identifiers: We may use mobile-specific identifiers, such as Google Advertising ID (GAID) or Apple Identifier for Advertisers (IDFA), to provide tailored advertising. You may reset or limit these identifiers in your device settings.
  4. Authentication Tokens: To securely manage sessions, we may generate and store tokens when you log in to the app. These tokens facilitate secure and seamless access across sessions.
  5. Third-party Tracking Services: Some partners may use their own embedded technologies (such as pixels or SDKs) to collect interaction data for analytics or advertising purposes. These technologies may link behavioral data across apps and devices to deliver targeted advertising.

Although these technologies differ from traditional web cookies, they are used to achieve similar functions and are subject to the same principles of transparency, purpose limitation, and user control. By installing and using our mobile application, you agree to the use of these mechanisms. Where local law requires it, we will first obtain your explicit consent before engaging in any data collection or processing for advertising purposes.

We do not sell user behavioral data obtained through these technologies, nor do we allow its use for creating audience segments intended for resale or cross-contextual targeting outside our Services. However, our advertising partners may still process data in accordance with their own privacy policies. We encourage you to review those policies to understand how your data may be used. 

7. GOOGLE ANALYTICS 


We may use Google Analytics to understand how visitors interact with our website and mobile application, including which pages are most viewed, how users navigate the Services, and how performance can be improved. The data collected through Google Analytics helps us enhance functionality, troubleshoot issues, and better tailor our Services to users’ needs.

If we implement Google Analytics, we do so in accordance with applicable data protection laws. This includes entering into a data processing agreement with Google, as required under Article 28 of the GDPR. In addition, we configure Google Analytics to anonymize IP addresses so that individual users are not directly identifiable. We also disable data sharing settings that would allow Google to use Analytics data for its own purposes, such as benchmarking or advertising.


Please note that Google Analytics may set cookies or use similar tracking technologies to perform its analytics functions. These cookies are subject to your consent preferences, which you can manage through the cookie consent banner or your browser settings. For more information about how Google Analytics processes data, please refer to Google’s Privacy Policy and the dedicated page on Google Analytics data safeguards.

8. DATA SECURITY 


We are committed to safeguarding your personal data and have implemented appropriate technical and organizational measures designed to ensure a level of security appropriate to the risk. These measures are aimed at protecting personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, particularly where the processing involves the transmission of data over a network.


Our security practices include, but are not limited to, data encryption in transit and at rest, access control protocols, two-factor authentication for administrative accounts, regular security assessments, and the application of least privilege principles in data access permissions. We also maintain a framework for detecting and responding to data security incidents, and we regularly review our procedures and systems to ensure they remain effective.


Despite our efforts, no security system is impenetrable, and we cannot guarantee absolute security. You also play a critical role in protecting your own information. Please choose strong passwords, do not share them with others, and notify us immediately if you believe your account has been compromised.


In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, and where required under applicable law, we will notify the relevant supervisory authority and, where appropriate, inform you without undue delay, including providing information about the nature of the breach, its likely consequences, and the measures taken or proposed to address it.


9. INTERNATIONAL TRANSFERS


We are based in the Netherlands and operate the Services globally. As such, your personal data may be transferred to, accessed from, or stored in jurisdictions outside of your country or region, including countries that may not provide the same level of data protection as your home jurisdiction.

Whenever we transfer your personal data to a third country (i.e., a country outside the European Economic Area or another jurisdiction that lacks an adequacy decision under applicable law), we ensure that such transfer is conducted in full compliance with applicable data protection legislation, including the GDPR, where applicable.

To ensure that your personal data continues to receive an adequate level of protection, we implement appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs) adopted by the European Commission or other approved model clauses that impose data protection obligations directly on the recipient;
  • Transfers to countries recognized as providing an adequate level of data protection by the relevant authorities (e.g., the European Commission);
  • Binding corporate rules, approved codes of conduct, or certifications (where applicable);
  • Reliance on your explicit consent for specific transfers, where legally permissible.

We regularly assess our data transfer arrangements and work only with partners who demonstrate an adequate level of data protection consistent with our obligations. If you would like to know more about the safeguards we apply to international transfers or obtain a copy of the relevant contractual clauses, you may contact us using the details provided in the “Contact Us” section below.

10. YOUR RIGHTS 


Subject to applicable data protection laws, including the GDPR, you have a number of rights regarding your personal data. These rights may vary depending on your location and the legal basis for our processing of your data, but generally include the following:

  1. Right of Access: You have the right to request confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data, including the purposes of the processing, the categories of data concerned, and the recipients or categories of recipient to whom the data has been or will be disclosed.
  2. Right to Rectification: You have the right to request correction of inaccurate personal data concerning you and, where applicable, to have incomplete personal data completed.
  3. Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request the erasure of personal data concerning you, such as where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
  4. Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data where one of the legal grounds applies, for example, where you contest the accuracy of the data or object to its processing.
  5. Right to Data Portability: Where processing is based on your consent or a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
  6. Right to Object: You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you, including profiling, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
  7. Right to Withdraw Consent: If we rely on your consent to process your personal data, you may withdraw that consent at any time. Please note that withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  8. Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes applicable data protection law.

To exercise any of your rights, please contact us using the contact details provided in the "Contact Us" section. We may need to verify your identity before processing your request. We aim to respond within one month of receiving a valid request; however, this timeframe may be extended if the request is particularly complex or if we receive multiple requests from you. In such cases, we will inform you of the extension and the reasons for the delay.

11. CHILDREN'S PRIVACY


Our Services are not intended for use by individuals under the age of 18 or any other age at which they are unable to lawfully provide valid consent under applicable data protection laws (collectively referred to as the “Restricted Age”). We do not knowingly collect personal data from individuals under the Restricted Age, nor do we knowingly allow such individuals to use the Services.

If you are a parent or legal guardian and believe that your child has provided us with personal data without your consent, please contact us immediately using the contact details provided in this Privacy Policy. Upon becoming aware that we have collected personal data from an individual under the Restricted Age, we will take appropriate steps to delete such information from our records, unless we are legally required to retain it.

We encourage parents and guardians to take an active role in monitoring their children’s online activities and guiding them in responsible use of digital services.

12. LINKS TO THIRD-PARTY SITES


Our Services may contain links to other websites or services not operated by us. We are not responsible for the privacy practices of third parties. Please review their privacy policies before providing any personal data.

13. CHANGES TO THIS PRIVACY STATEMENT 


We may update this Privacy Policy from time to time. We encourage you to review it periodically. Continued use of the Services indicates your acceptance of any changes.

14. CONTACT US


If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal data, you may contact our Data Protection Officer (DPO) directly. The DPO is responsible for overseeing our compliance with applicable data protection laws and handling data-related inquiries in a timely and impartial manner.

You may reach our DPO at:

Ecommerce Operations B.V.

Trading name: ScamAdviser.com

Keurenplein 41 UNIT A6311

1069CD Amsterdam, The Netherlands

Email: report@scamadviser.com

If you are not satisfied with our response or the manner in which your complaint has been handled, you have the right to lodge a complaint with your local data protection authority.