Last updated: August 23, 2026
We collect business contact information from sources the business itself has made public. In practice that means two things:
robots.txt when we do this.The categories of personal data involved are: a name where the business publishes one, a business email address, a business website and domain, and the advertising activity above. We do not collect or want personal addresses, phone numbers of individuals, financial details, or anything in a special category under Art. 9.
We do not buy contact lists, and we do not sell, rent or pool the data we hold.
We hold it so that our customers — usually small marketing agencies and service businesses — can identify businesses that are actively advertising and might want to hear from them, and can contact them about their services.
Our lawful basis is legitimate interests under Art. 6(1)(f) — specifically the interest in direct B2B marketing recognised in Recital 47. We have assessed that interest against your rights and freedoms, taking into account that the data is business-context rather than private, that it was published by the business itself, that we collect the minimum needed to make contact, and that we never sell it. You have an unconditional right to object to this, described below.
Our customers see the leads in their own account. Beyond that, the data is handled by the service providers we use to run the product — our database and hosting providers, an email verification service, and the email provider used to send messages. Each acts on our instructions or on our customer's, under contract.
Some of these providers are located outside the UK and EEA. Where that is the case, transfers are made under the safeguards permitted by Chapter V of the GDPR.
If we discover an email address and nobody ever contacts you using it, we delete that address after 12 months. Where a customer has actually sent you a message, the record of that contact is kept while their account remains open, and is deleted when they close it.
We keep business contact records only for as long as they are useful for the purpose above, and remove records that have gone stale. If you ask us to remove your details, we do so immediately and additionally record enough information — an irreversible fingerprint of your email address, not the address itself — to make sure the same details are not collected again the next time someone researches your company. Without that step, deletion would only last until the next search.You have the right to:
You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office; in the EU, the authority in your member state.
This is the fastest route and needs no account. Enter the email address you want removed. We will delete every copy we hold and make sure it is not collected again.