Information you share
The contribution form asks for your name, email, contribution type, business or story title, optional website and borough, and your message. We store these privately in WordPress for editorial review and to respond to your submission. Submitting a form does not automatically publish your message or subscribe you to a mailing list.
Site operation
Our hosting, WordPress installation and Cloudflare process technical request information needed to deliver and protect the site. The contribution endpoint uses a temporary hashed network identifier to limit repeated submissions. Administrative login cookies are used for account access.
Directory information
Public business profiles are based on identified public sources. Please do not submit private home addresses, confidential commercial information or another person’s private contact details.
Corrections and requests
To request a correction or removal, or to ask about information you submitted, contact [email protected]. We review requests individually and keep contribution records while they remain useful for editorial review and follow-up.
Other websites
External websites linked from the index have their own privacy practices. ecom.nyc does not control those sites.
Map services
Our interactive map loads map tiles directly from OpenStreetMap. Your browser sends network information, including your IP address and the site origin, to that service when the map loads. See the OpenStreetMap Foundation privacy policy. We do not request your device location. Business address coordinates are looked up during editorial review, not during visitor searches.
Member accounts and profile claims
When you register, we store your name, email address, a securely hashed password, verification status and consent timestamp. Essential authentication cookies keep you signed in. Verification and password reset messages are sent through Resend; it processes recipient and message information to deliver these emails.
Ownership evidence, role information, proposed profile changes and administrative decisions are stored privately for review and accountability. Authorized site administrators can access them. Temporary logo uploads are private before approval; approved logos and profile fields are published. Rejected temporary logos are deleted. Editing history may remain after changes are restored.
Temporary hashed network identifiers help limit repeated account requests. We do not publish account emails or claim evidence automatically; a contact email submitted as an approved public profile field will be public. Do not provide identity documents, passwords, customer records or other sensitive information. Contact [email protected] to request access, correction or deletion of account information. We review retention needs and ownership disputes before removing audit records. See the account and profile management terms.