Privacy Policy

Information you give us

• Account details: name, email address, mobile number, company (optional), password (stored only as a secure hash) and whether you are a business owner or a provider.
• Your consent choices, saved with the exact wording you saw, the date, your IP address and browser type.
• Quote requests and "get matched" requests: the service, budget, hours, time zone and message you write.
• Reviews you write, and the providers you save to your shortlist.
• If you are a provider: your business listing, contact details, prices and the team members you add.
• Messages you send to our support or privacy team.

Information we collect automatically

• Sign-in sessions: a session cookie, plus the IP address and browser type of each signed-in session.
• Security records: when verification codes are sent, to which email address or number, and from which IP address, so we can stop abuse.
• A bot check on sign-up (Cloudflare Turnstile), which looks at signals from your browser to tell people from automated sign-ups.
• Standard server logs kept by our hosting provider, such as IP address, pages requested and time.

Information from others

• If you sign in with Google, Microsoft or LinkedIn, we receive your name, email address and profile picture from that service. We don't get your password or access to your other data there.
• Providers may update the status of a quote request you sent them (for example, "contacted").

• To run your account and the directory: create your account, verify your email address, sign you in, show listings and reviews, and send your requests to providers. Basis: performing our contract with you.
• To keep the directory trustworthy: block fake or duplicate accounts, check listings, moderate reviews, enforce rate limits and investigate abuse. Basis: our legitimate interest in a safe, reliable service.
• To send service emails: verification codes, password resets and important notices about your account or these policies. Basis: performing our contract.
• To send tips and offers by email, only if you ticked "Send me tips and offers by email." Basis: your consent.
• To call or message you about services that match your needs, only if you ticked the phone and WhatsApp consent. Basis: your consent.
• To improve the site using totals such as searches, sign-ups and requests, not individual tracking. Basis: our legitimate interest.
• To meet legal obligations and defend legal claims. Basis: legal obligation and legitimate interest.

• Providers you contact. When you request a quote, we send your name, email address, phone number, company and request to that provider. When you ask to get matched, we send the same details to up to three matched providers. Each provider then handles your data under its own privacy policy.
• Partner providers, with your consent. If you ticked the phone and WhatsApp consent, our partner agency and matched providers may contact you about services that fit your needs. You can withdraw that consent at any time.
• The public. Reviews you write are published with your first name, last initial and company. Provider listings, including the business contact details providers choose to show, are visible to signed-in members.
• Our service providers, who process data for us under contract: Cloudflare (hosting, database, email delivery and bot checks), and Google, Microsoft or LinkedIn if you choose to sign in with them.
• Authorities and advisers, when the law requires it, to protect people's safety or our rights, or to our professional advisers.
• A buyer of our business, if OutsourceMoose is sold or merged. This policy would continue to apply to your data.

We don't sell your personal data, and we don't share it for cross-context behavioral advertising. Our staff can see account data only as far as their role needs, and every staff action is logged.

We use only cookies that the site needs to work: a session cookie that keeps you signed in, and the cookies or browser storage the Turnstile bot check needs on the sign-up page. We don't use advertising or analytics cookies, so there is no cookie banner. If we add any in the future, we'll ask first where the law requires it.

• Account, listing, request and review data: while your account is open. When you close it, we delete or anonymize it within 30 days, except as below.
• Consent records: for as long as we rely on the consent, and for up to 3 years after, so we can prove what you agreed to.
• Security records such as verification-code sends and staff audit logs: as long as needed to prevent abuse and investigate incidents.
• Requests already sent to providers: the copies providers hold are theirs to manage. Ask them directly to delete them.
• Anything we must keep longer by law, for example billing records for providers.

Depending on where you live, you can ask us to:

• Give you a copy of your personal data, including in a portable format.
• Correct data that is wrong or incomplete.
• Delete your data or close your account.
• Stop or limit certain uses, or object to uses based on our legitimate interests.
• Withdraw a consent at any time. This doesn't affect what we did before you withdrew it. Every marketing email has an unsubscribe link, and you can tell a caller to stop.

Email moose@outsourcemoose.com from the address on your account. We reply within 30 days and may need to confirm your identity first. We won't treat you differently for using your rights. You can also complain to your data protection authority, for example the National Privacy Commission in the Philippines, your EU or UK supervisory authority, or your state attorney general in the United States.

Our service providers run on global networks, and the providers you contact may be in other countries, often in the Philippines, India, Latin America, the United States or Europe. Where the law requires it, we use safeguards such as Standard Contractual Clauses with our service providers. Sending a request to a provider abroad is a transfer you ask us to make.

We use encrypted connections (HTTPS), hashed passwords, email verification, bot checks, rate limits and role-based staff access with an audit log. No system is perfectly secure. If a breach affects your data, we'll tell you and the authorities as the law requires.

OutsourceMoose is for businesses and is not meant for anyone under 18. We don't knowingly collect data from children. If you think a child has given us data, contact us and we'll delete it.

We'll update the date above when this policy changes. If a change matters, we'll tell account holders by email or on the site before it takes effect, and ask for consent again where the law requires.

Outsource Moose, 7511 Greenwood Ave N #515, Seattle, WA 98103, United States. For privacy questions and requests, or anything else, email moose@outsourcemoose.com.