What is Leadistry's lawful basis for holding my details?

Our lawful basis is legitimate interests, under UK GDPR Article 6(1)(f). The interest is letting UK businesses identify and contact other UK businesses for business-to-business marketing. We have a written Legitimate Interests Assessment that records the purpose, necessity and balancing tests.

We did not ask for your consent, and our customers must not tell anyone they contact that they did.

Safeguards on top of that basis

• Named personal email addresses are only delivered for incorporated companies (such as private and public limited companies and LLPs), never for sole traders or general partnerships.
• A named person's address on a personal webmail domain (such as Gmail or Outlook) is never delivered.
• Email addresses are checked for a working mail server before delivery.
• A removal request at /remove-company applies to every customer's searches from then on.

Why we did not write to you first

We rely on the exemption in UK GDPR Article 14(5)(b): telling each person directly would involve disproportionate effort. That reliance is supported by our public privacy notice and the removal routes anyone can use. Every email sent through Leadistry also says where the reader's details came from and how to have them removed.