Skip to content
Find fractional CFOsListed Fractional

Privacy · updated

What we store, what we publish, and how to say no.

Two kinds of people meet this page: visitors, and the 397 operators whose names appear here. This notice covers both in plain words. Where a law gives you a right, the route to use it is on this page. The publisher is a US business based in Florida; the rules below apply to every visitor wherever you are.

Visitors

Nothing measures your visit, and no ad pixel loads, until you say yes. There is no account, no login, and no form that sends anything to us. Fonts are served from this site, not from a third party. Analytics and Marketing are separate. Both stay off until you accept them in the banner or in Privacy choices.

What "Analytics" means here, if you accept it. Google Analytics 4 records page views and clicks to practice sites, with IP addresses truncated by Google, Google Signals off, and no advertising features. A shortlist_add or shortlist_remove event records only the seat and the kind of page when a Shortlist button is pressed, never who or what was shortlisted. Microsoft Clarity records anonymised session replays and heatmaps with typed text masked; there are no forms here, so nothing you type is captured. Both run under their own privacy terms (Google) (Microsoft). Withdraw at any time from Privacy choices; the scripts stop loading on the next page.

What "Marketing" means here, if you accept it. Marketing pixels run on every page, and only after you accept. Until then they stay off.

Meta receives the page type, the seat, and the event. A listing view uses a content id such as listing/cfo. Meta sets its own cookie. The purpose is to show you SuperHired ads on Meta later.

Google Ads receives the page type, the seat, and the event. Google sets its own cookie. The purpose is to show you SuperHired ads on Google later.

LinkedIn receives the page type, the seat, and the event. LinkedIn sets its own cookie. The purpose is to show you SuperHired ads on LinkedIn later.

Microsoft (Bing Ads) receives the page type, the seat, and the event. Microsoft sets its own cookie. The purpose is to show you SuperHired ads on Microsoft later.

The SuperHired beacon receives the page type, the seat, and the event. It does not receive the page address. The purpose is to count that visit once and to measure those ads.

We do not send operator names. We do not send the listing path.

This counts as sharing under the CCPA and CPRA. We do not sell personal information for money. Analytics stays separate and does not turn these pixels on.

How to opt out of Marketing. Use cookie settings. That is Privacy choices in the footer, or Choose on the banner. Leave Marketing off. You can also use the Do Not Sell or Share link, or turn on Global Privacy Control. The steps are below.

What is stored in your browser, and only there. When you press Shortlist, add a note, or set a filter, the browser saves that in its own storage on your machine. We never receive it. It exists because you asked for it, which is why no consent is required for it. A shared shortlist link carries only listing ids, never notes. Your privacy choices themselves are stored the same way, so we can remember them.

Privacy choices. The "Privacy choices" link in the footer opens a dialog on every page. There you can turn site storage off (which clears your shortlist and notes), clear everything this site stored, and set Analytics and Marketing. Both are off until you accept them. A banner asks first, and "Reject all" is as easy to reach as "Accept all". Accept all turns both on. Reject all turns both off. You can change your answer at any time from the same link.

Global Privacy Control. If your browser sends Global Privacy Control, we treat it as a request not to sell or share, and we do not load marketing pixels. Analytics is still your choice. We apply this to every visitor, not only Californians.

Do Not Sell or Share My Personal Information

If you accept Marketing, Meta, Google Ads, LinkedIn, Microsoft (Bing Ads), and the SuperHired beacon receive the page type, the seat, and the event. They do not receive operator names. They do not receive the listing path. The beacon does not receive the page address. That is sharing under the CCPA and CPRA. We do not sell personal information for money.

How to opt out. Use cookie settings. Select Reject all on the privacy banner, or open Choose and leave Marketing off. The button on this page does the same thing and stores the opt-out in this browser. You can also use the Do Not Sell or Share link in the footer, or turn on your browser's Global Privacy Control signal. While that signal is on, marketing pixels do not load.

Without JavaScript. The pixels are inert text until a script runs after you accept Marketing. That script does not run when JavaScript is off, so nothing is shared and you are already opted out. The privacy banner is how you choose when JavaScript is on. Privacy choices in the footer opens it again.

Hosting logs. The site is served by Vercel, which handles requests the way any web host does: your IP address and request details may appear in its transient server logs under Vercel's own privacy policy. We do not access or analyse them.

Links out. Links to an operator's own site carry a tag (utm_source=listedfractional.com) so the operator's analytics can see where a visit came from. That tag identifies this site, not you. LinkedIn links, where present, carry no tag.

Operators listed here

If you are listed, we publish five facts about you: your name, the seat you hold, your practice (firm name and URL), the geography you publish, and one line about who you serve, quoted from your own site. We publish no photo, email address, phone number, or biography. We collected these facts from your public practice website; we did not obtain them from you directly.

Why we may do this. Under the GDPR and UK GDPR, our legal basis is legitimate interest (Article 6(1)(f)): publishing an accurate, non-ranked directory of professional services that people already advertise publicly, limited to facts you chose to publish about your own practice. This notice is our information to you under Article 14. Under US state privacy laws, the five facts are publicly available information about a business role. We do not sell those facts for money. We do not send operator names to Meta, Google Ads, LinkedIn, Microsoft (Bing Ads), or the SuperHired beacon.

Your rights. You can object, correct, or be removed, free, with no reason required. The takedown page describes the route and its current status. You can also claim your listing to control what it says. No decision about you is made by this site.

Retention. A listing stays until you ask for it to go or we can no longer verify it on your site. Removed listings are deleted from the source file, so they leave every page and every data download at the next build.

Your rights under US state privacy laws

California (CCPA/CPRA), Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other state laws give residents rights to know what personal information a business collects, to delete it, to correct it, and to opt out of its sale, sharing, or use for targeted advertising. Here is how those apply to this site, plainly:

Florida's Digital Bill of Rights applies to businesses far larger than this one, but we follow the same standard. Nevada residents: we do not sell covered information.

Your rights under the GDPR and UK GDPR

Visitors who leave Analytics and Marketing off: we process no personal data about you beyond the host's transient logs, so there is nothing further to access, port, or erase. If you accept either category, the companies named above process technical data such as a cookie id and the page you viewed, under their own terms. Listed operators: you have the rights of access, rectification, erasure, restriction, and objection (Articles 15 to 21). We act on them free of charge and without asking why. You may also complain to the supervisory authority where you live. We publish the five facts on this site. Our host serves those pages. Marketing does not send operator names or listing addresses. We do not send an email, a phone number, or a photo. We do not hold them.

Who is responsible

Listed Fractional is published by Supertrained (Tom Meredith), a US business based in Florida and the same family as SuperHired, which is the site's only advertiser. SuperHired does not receive your shortlist or notes. The house ad on this site is a labeled link. If you accept Marketing, Meta, Google Ads, LinkedIn, Microsoft (Bing Ads), and SuperHired receive the page type, the seat, and the event. They do not receive an operator name. Privacy requests, corrections, and takedowns go to claims@mail.listedfractional.com; the takedown and claim pages say how we verify that a request comes from the practice named. We answer requests within 45 days, as US state law requires, and within one month under the GDPR.

Changes

When this notice changes, the date at the top changes with it. Nothing here is written to hide anything, and nothing here grants us more than the paragraphs above say.

Nothing here is on by default except the storage you create yourself by pressing Shortlist or typing a note. Marketing is off until you turn it on. Categories that no page uses stay off.