How we do GDPR.
We treat GDPR as a feature, not a checkbox. This page walks through the specific design decisions that make Visitorscheck fit for legitimate B2B use under EU data protection law.
Last reviewed: 2026-04-16
Legal basis: Legitimate Interest
We rely on Art. 6(1)(f) of the GDPR for B2B visitor identification. Our Legitimate Interest Assessment is documented and available on request. The essence: identifying the company behind a business IP that chose to visit a commercial website is a narrow, proportionate interest, and we balance it by excluding non-business IPs up-front.
Residential IP gate
Before any enrichment happens, we classify the IP via MaxMind. Residential, cellular, and hosting-provider IPs are flagged and the pipeline stops. No company lookup is performed and no company-level profile is ever attached to that visit.
No cookies, no fingerprinting
Our script does not set cookies, does not read or write to localStorage, and does not fingerprint the browser. Identification is per-visit at the company level, not per-individual across sessions.
Opt-out
End-users can opt out via a standard query parameter. Customers include a short opt-out notice on their privacy page (snippet provided at onboarding). Opted-out visits are dropped before enrichment.
Sub-processors and DPA
Every customer signs a DPA. A full list of sub-processors (MaxMind, IPinfo, our hosting provider, Stripe, Postmark) is maintained and you are notified of changes before they take effect.
Data residency
All customer data is stored on EU-based infrastructure. Business-tier customers get tenant-isolated PostgreSQL schemas (stancl/tenancy) rather than shared-table multi-tenancy.
Data subject requests
Access, rectification, deletion, and portability requests go to info@visitorscheck.com and are answered within the legal timeframe. Customers can also action deletions directly from the dashboard.
This document is a plain-language summary maintained by Allround Web. The authoritative legal text is being finalised with counsel for launch — if anything here is material to your decision to use Visitorscheck, please reach out and we'll share the draft.