Privacy Policy

Last updated: October 22, 2026

1. Who we are

NJ Business Directory (https://njbusinessdirectory.org, the “Site”) is operated by Victor International Vantage LLC, doing business as VIV Digital (“VIV Digital,” “we,” “us,” or “our”).

Email (for all privacy, Daniel’s Law, and account questions): [email protected]
Mailing address: 1 Kalisa Way, Paramus, NJ 07652

This policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and the choices and rights you have. It applies to the Site, your NJ Business Directory account, and the emails we send. It does not cover other websites, including the websites of businesses listed in the directory.

2. The short version

We collect what we need to run a business directory: account details, listing details, billing through Stripe, and basic technical and security data.
We do not sell your personal information, and we do not share it for targeted (cross-context behavioral) advertising.
We use Google Analytics only to understand how the Site is used. We do not use it for advertising or remarketing.
If you give us a private street address, we use it to verify your business. We do not publish it.
You can ask to see, correct, delete, or get a copy of your information by emailing [email protected].
We honor Global Privacy Control (GPC) browser signals.
The Site is for people 18 and older.

3. Information we collect

Information you give us

Contact and account information: name, email address, phone number, and your login details (username and password; passwords are stored in hashed form).
Business listing information: business name, category, description, business phone, website, public business address or service area, hours, photos, logos, and other details you submit for a listing.
Private street address: if you provide a street address that you mark as private (or that we need only for verification), we use it to confirm the business is in New Jersey and to contact you if needed. We do not publish private street addresses.
Messages: what you send us by email or through forms, including support requests, listing claims, disputes, and privacy or Daniel’s Law requests.

Payment information

Paid subscriptions are billed through Stripe. You can pay by credit or debit card, Google Pay, or Apple Pay. Your full card number is entered into and stored by Stripe, not by us. We receive limited billing details from Stripe, such as your name, billing email, card brand, last four digits, expiration date, billing ZIP or country, and payment history. Stripe’s use of your information is governed by its own privacy policy (https://stripe.com/privacy). We do not accept PayPal.

Information collected automatically

Technical and security data: IP address, browser and device type, pages requested, referring URL, date and time, and similar log data. This is collected by our host and by our security and network services, Cloudflare and Wordfence, to deliver the Site, block attacks and spam, and keep the Site secure.
Analytics data: we use Google Analytics 4 to see aggregate information such as which pages are visited, how long visits last, and how people find the Site. See Section 7 (Cookies).
Spam protection: we use Google reCAPTCHA on forms. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google to tell humans from bots. Use of reCAPTCHA is subject to Google’s Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms).
Checkout and abandoned-cart data: we use a tool called CartBounty. If you start checkout for a paid listing and type your name, email, or phone into the checkout form, that information and the contents of your cart may be saved even if you do not finish checking out, so that we can send you a reminder email about the incomplete purchase. See Section 9 for how to stop these emails.

4. How we use information

We use personal information to:

create and manage your account and listings;
review, verify, and moderate listings (including confirming a business is located in New Jersey);
process subscription payments, renewals, cancellations, and refunds;
send service messages, such as receipts, renewal and billing notices, listing status updates, and responses to your requests;
send abandoned-cart reminders and, if you opt in or as permitted by law, occasional news about the directory;
protect the Site and our users from fraud, spam, abuse, and security threats;
understand and improve how the Site works (analytics);
comply with law, respond to legal requests, and enforce our Terms of Service.

We do not use your personal information for profiling that produces legal or similarly significant effects about you.

5. What we share and with whom

Published listing information. Information you submit for a public listing (for example, business name, business phone, website, public address or service area, description, and photos) is published on the Site and can be seen by anyone. Do not include personal information in a listing that you do not want made public. Private street addresses are not published.

Service providers. We share information with companies that help us run the Site, only as needed for them to provide their services to us:

Hostinger (web hosting, United States)
Stripe (payment processing)
Cloudflare (content delivery, security, and network protection)
Wordfence (website security and firewall)
Google (Google Analytics 4, reCAPTCHA, Google Maps, Google Fonts, and Google Pay)
CartBounty (abandoned-cart capture and reminder emails; runs on our website)
SMTP2GO (delivery of emails the Site sends, such as receipts, account notices, and reminders)
MXRoute (receiving email sent to us, and spam protection)
EmailOctopus (email newsletters for listing owners)

Legal and safety reasons. We may disclose information if we believe in good faith it is required by law, subpoena, or court order, or is needed to protect the rights, property, or safety of our users, the public, or VIV Digital.

Business transfers. If VIV Digital or the Site is sold, merged, or reorganized, information may be transferred to the new owner, who must continue to protect it consistent with this policy.

No sale, no sharing for targeted advertising. We do not sell personal information for money or other valuable consideration, and we do not share personal information for targeted or cross-context behavioral advertising, as those terms are used in the New Jersey Data Privacy Act and the California Consumer Privacy Act. We have not done so in the past 12 months.

6. Sponsored listings

Some listings are paid placements, including listings included in VIV Digital client service packages. These are labeled “Sponsored.” Being a VIV Digital client does not give a business access to visitors’ personal information.

7. Cookies and similar technologies

We use a small number of cookies. “Strictly necessary” cookies make the Site, your cart, checkout, payments, and security work, and the Site will not work properly without them. “Analytics” cookies help us understand how the Site is used. We do not use advertising or remarketing cookies.

These are the cookies a visitor may receive on the Site:

Cookie	Who sets it	What it does	How long it lasts	Type
wp_woocommerce_session_*	Us (WooCommerce)	Remembers your cart and checkout when you are not signed in	2 days	Strictly necessary
woocommerce_items_in_cart woocommerce_cart_hash	Us (WooCommerce)	Tells the Site whether your cart has items and when it changes	Until you close your browser	Strictly necessary
wordpress_logged_in_* wordpress_sec_* wordpress_test_cookie	Us (WordPress)	Keeps you signed in and protects your account (only if you sign in)	Until you close your browser, or 14 days if you choose “Remember me”	Strictly necessary
wfwaf-authcookie-*	Wordfence	Lets our firewall recognize signed-in users (only if you sign in)	12 hours	Strictly necessary
__stripe_mid __stripe_sid	Stripe	Fraud prevention when you pay	1 year (__stripe_mid); 30 minutes (__stripe_sid)	Strictly necessary
m (on m.stripe.com)	Stripe	Fraud prevention and device check when you pay	Up to 2 years	Strictly necessary
hmt_id __cf_bm __cflb (on hcaptcha.com)	hCaptcha, loaded by Stripe’s payment form	Checks for bots and fraud on the payment form	30 days (hmt_id); less than 1 day (the others)	Strictly necessary
NID (on google.com)	Google, through the Google Pay button and reCAPTCHA	Security and remembering your Google preferences; Google’s own use is covered by Google’s Privacy Policy	About 6 months	Strictly necessary
_GRECAPTCHA	Google reCAPTCHA	Tells people from bots on our forms	6 months	Strictly necessary
sbjs_current sbjs_current_add sbjs_first sbjs_first_add sbjs_udata sbjs_migrations sbjs_session	Us (WooCommerce order attribution)	Records how you reached the Site (for example, a search engine or a link) so we can see which sources lead to sign-ups. This stays with us and is not used for advertising	Until you close your browser (sbjs_session: 30 minutes)	Analytics
_ga _ga_*	Google Analytics 4	Tells visits and visitors apart so we can count Site usage in aggregate	Up to 2 years (your browser may shorten this)	Analytics

Tools that do not set cookies: Cloudflare Turnstile (spam protection on forms) and Cloudflare Web Analytics (privacy-friendly page counts) do not use cookies. Google Maps (maps on listing pages) and Google Fonts (the Site’s typefaces) load from Google’s servers, which receive your IP address and browser details, but they did not set cookies when we tested the Site. Your browser’s session storage also holds a small WordPress setting that checks emoji support; it is deleted when you close the tab.

No advertising: Google Signals and ads personalization are turned off in our Google Analytics account, we do not link analytics data to advertising, and we do not use advertising, remarketing, or social media tracking pixels.

Your choices: you can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on (https://tools.google.com/dlpage/gaoptout). Blocking strictly necessary cookies may stop parts of the Site, such as the cart and checkout, from working.

Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of the sale of personal information and of targeted advertising for that browser. Because we do not sell or use data for targeted advertising, this mainly confirms your choice.

8. How long we keep information

We keep information only as long as we reasonably need it for the purposes above, and then delete or de-identify it. Our standard retention periods are:

Type of information	How long we keep it
Account and contact information	While your account is open, plus 24 months after it is closed or last used
Published listing content	While the listing is live; removed listings deleted within 12 months of removal
Rejected listing submissions	12 months
Private street address	While your listing or account is active, plus 24 months
Billing and transaction records (from Stripe)	7 years, for tax and accounting purposes
Abandoned-cart data (CartBounty)	30 days if checkout is not completed
Support emails and messages	3 years after the conversation ends
Server, security, and firewall logs (host, Cloudflare, Wordfence)	Up to 90 days, unless needed longer to investigate a security incident
Google Analytics data	14 months (Google Analytics retention setting)
Privacy and Daniel’s Law requests and our responses	3 years after the request is resolved; a Daniel’s Law nondisclosure request stays in effect, and its record is kept, until it is withdrawn

We may keep information longer if the law requires it or if it is needed to resolve a dispute or enforce our agreements.

9. Emails and unsubscribing

We send two kinds of email:

Service emails (receipts, renewal and billing notices, account and listing updates). These are needed to run your account and will continue while you have an account or subscription.
Marketing and reminder emails (including abandoned-cart reminders and directory news). Every one of these includes an unsubscribe link and our mailing address. You can also unsubscribe by emailing [email protected]. We will process unsubscribe requests within 10 business days.

10. Your privacy rights

Residents of New Jersey (under the New Jersey Data Privacy Act) and of other states with similar laws have rights over their personal data. We extend these rights to all users, wherever they live. You can ask us to:

Access: confirm whether we process your personal data and get access to it.
Correct: fix inaccurate personal data.
Delete: delete personal data you provided or that we have about you.
Portability: get a copy of your personal data in a portable, readily usable format.
Opt out: opt out of the sale of your personal data, targeted advertising, and profiling in furtherance of decisions with legal or similarly significant effects. (We do none of these, but you may still submit an opt-out, and we honor GPC as described above.)

How to make a request: email [email protected] with the subject line “Privacy Request.” Tell us what you are asking for and the email address associated with your account. To protect you, we will verify your request, usually by confirming control of the email address on the account; we may ask for more information if needed. You may use an authorized agent; we may ask the agent for proof of authorization and may ask you to confirm your identity directly.

Our response: we will respond within 45 days. If we need more time, we may extend this once by up to 45 more days and will tell you why. We will not charge you for up to one request per year, and we will not discriminate against you for using your rights. Some information may be kept if the law requires it (for example, billing records), and we will tell you if that applies.

Appeals: if we decline your request, you can appeal by replying to our decision or emailing [email protected] with the subject line “Privacy Appeal.” We will respond in writing within 45 days and explain our decision. If you are not satisfied with the outcome of your appeal, you may contact the New Jersey Division of Consumer Affairs / Office of the Attorney General (https://www.njconsumeraffairs.gov).

Sensitive data: we do not knowingly collect sensitive data such as health, racial or ethnic origin, religion, or precise geolocation. Payment card numbers are collected and stored by Stripe, not by us, and are used only to process the payment you request.

11. Daniel’s Law requests (New Jersey covered persons)

New Jersey’s Daniel’s Law (N.J.S.A. 56:8-166.1 and related laws) allows certain “covered persons” (including active, retired, and former judges, prosecutors, and law enforcement officers, and their eligible family members living in the same household) to request that their home address and unpublished home telephone number not be disclosed.

We do not publish private street addresses. However, if a listing or any page on the Site shows the home address or unpublished home phone number of a covered person, you (or an authorized person) may send a written nondisclosure request to [email protected] with the subject line “Daniel’s Law Request.” Please include:

the name of the covered person;
the home address and/or unpublished home phone number to be removed;
the URL(s) where it appears, if known; and
a statement that the person is a covered person under Daniel’s Law.

We will remove or stop disclosing the protected information, and will not make it available again, within 10 business days of receiving the request, and we will confirm by email when this is done. We will not require more than the law allows in order to act on a request.

12. Children

The Site is intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, email [email protected] and we will delete it.

13. Security

We use reasonable administrative, technical, and physical safeguards, including encrypted (HTTPS) connections, a web application firewall and security monitoring (Cloudflare and Wordfence), spam protection, and payment processing through Stripe so that card numbers do not touch our servers. No system is completely secure, so we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you as required by law.

14. Where information is stored

We are based in the United States, and the Site is hosted in the United States by Hostinger. Some service providers may process information in other countries under their own safeguards. The Site is intended for New Jersey businesses and U.S. users.

15. Links to other sites

Listings link to other businesses’ websites and social pages. We are not responsible for the privacy practices of those sites. Please review their policies.

16. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page. If we make material changes to how we use personal information, we will give notice before the change takes effect, for example by email to account holders or a notice on the Site. If a change would let us use previously collected personal data in a materially different way, we will ask for your consent where the law requires it.

17. Contact us

Victor International Vantage LLC, dba VIV Digital at 1 Kalisa Way, Paramus, NJ 07652 – Email: [email protected]