B2B Privacy Notice & Data Processing Policy

1. Data Controller

This Privacy Notice is issued by Lead Generation Pipeline (“we”, “us”, or “our”), who acts as the Data Controller responsible for the processing of your personal data described herein.

2. Categories of Personal Data We Process

We process limited, strictly professional business contact data necessary for relevant B2B introductions:

• Professional Identity: Full name, professional job title, seniority, and department.
• Business Contact Information: Corporate email address, company business address, and telephone number.
• Company Data: Employer name, public corporate website URL, domain, industry sector, and estimated employee headcount.
• Communication Records: Outreach drafts, delivery status, timestamps, and opt-out preferences.

We do not collect or process any Special Categories of Personal Data (such as race, ethnic origin, political opinions, religious beliefs, genetic or health data) or financial account details.

3. How We Collect Personal Data

We collect business contact information through lawful and publicly accessible professional sources, including:

• Publicly available company websites, press releases, and corporate directories.
• Public professional networks and business social profiles (e.g. LinkedIn, GitHub public profiles).
• Commercial B2B data providers that warrant compliance with global data protection laws.

4. Lawful Basis for Processing (GDPR Article 6(1)(f))

Under the General Data Protection Regulation (GDPR) and UK GDPR, our lawful basis for initiating professional B2B communications is Legitimate Interests (Article 6(1)(f)):

• Our Purpose: Promoting legitimate B2B services, partnerships, and software solutions to organizations that would reasonably benefit from them.
• Necessity: Targeted professional email is a proportionate means of establishing commercial relationships.
• Balancing Test: We only contact corporate individuals in their professional capacity regarding topics directly pertinent to their role. We minimize data collection, respect opt-outs immediately, and retain data only as long as necessary.

5. Use of Artificial Intelligence (AI)

We utilize AI tools to assist in analyzing publicly published company signals and drafting introductory email copy. All outgoing communications are subject to review by human team members. We do not engage in automated decision-making or profiling that produces legal or similarly significant effects concerning data subjects.

6. Data Retention & Pruning Policy

We adhere to a strict data minimization and retention policy:

• Active Deals: Retained for the duration of the commercial relationship plus applicable statutory accounting periods.
• Unengaged Prospects: Any prospect record with no engagement or active opportunity after 180 days is flagged and permanently anonymized by our automated retention pruning engine.
• Opted-Out Contacts: When you unsubscribe or request erasure, your personal identifiers are wiped immediately, and an irreversible SHA-256 hash is placed on our suppression list to prevent future contact.

7. Your Legal Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the following enforceable rights:

• Right to Object (Opt-Out): You may object to direct marketing at any time. Every email contains an instant unsubscribe link.
• Right of Access (Article 15): You have the right to request a complete portable copy (JSON) of all personal data held concerning you.
• Right to Erasure (“Right to be Forgotten”, Article 17): You may request the permanent deletion and anonymization of your records.
• Right to Rectification: You may request corrections to inaccurate personal details.

8. Exercising Your Rights

To exercise your Right of Access, Rectification, or Erasure, please reply directly to any email received or contact our compliance officer at: