GDPR Compliance
How Leadistry meets UK GDPR and Data Protection Act 2018 obligations, and how to exercise your rights as a data subject. We process opt-out requests within 24 hours.
Our GDPR commitment
Leadistry processes UK B2B data in accordance with the UK GDPR and the Data Protection Act 2018. We act as data controller for the database we maintain and as data processor for any data our customers upload to the platform.
Our legal basis for processing director and business-contact data is UK GDPR Article 6(1)(f), legitimate interests. Direct marketing to corporate subscribers (limited companies) is permitted under the Privacy and Electronic Communications Regulations (PECR) without prior consent, provided opt-out is honoured.
Data controller details
The data controller for personal data processed in the Leadistry database is:
Mr Cameron Clark (trading as Leadistry)
52 Corning Road, Sunderland, Tyne and Wear, SR4 6EE
Email: [email protected]
ICO registration reference: ZC149040 (Tier 1)
Registered 15 May 2026 with the UK Information Commissioner's Office. Renews annually.
Your rights as a data subject
If you are a director, employee, or contact whose details appear in our database, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (right to be forgotten)
- Object to processing for direct marketing, this is an absolute right
- Restrict processing while we investigate a request
- Portability, receive a machine-readable copy
How to exercise your rights
The fastest routes are our two public self-service forms. Whole-company removal at leadistry.co.uk/remove-company (no account required, instant). Director-level removal via our self-service opt-out form. We process suppression requests within 24 hours, usually within seconds, and apply suppression at the SQL level so the record cannot be reintroduced through future re-imports.
For other subject-rights requests (access, rectification, restriction, objection, portability), email [email protected]. We respond within 30 days as required by UK GDPR Article 12.
Retention
Cached company and contact data is retained for a maximum of 24 months from last verification. Records older than 24 months are re-verified from source or removed. Suppression requests are honoured permanently, once you've opted out, you stay opted out, even if the record is later re-imported from Companies House.
Complaints
You have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by phone on 0303 123 1113. We'd appreciate the chance to address concerns directly first via our contact page, but the ICO route is always available regardless.
Last reviewed: April 2026
Need to remove your data?
24-hour processing, permanent suppression, no questions asked.
Opt out of our database →