Privacy Policy

Effective date: September 9, 2025

This Privacy Policy explains how Ecommerce Leads ("we," "our," "us") collects, uses, and shares information in connection with our B2B lead generation and sales intelligence services.

1. Information We Collect

Company-level data: domain names, store platform, traffic estimates, advertising spend, SEO signals, product categories, and other business intelligence metrics.

Contact-level data: names, business email addresses, job titles, LinkedIn URLs of decision makers (sourced from third-party providers and publicly available web records).

Subscriber data: your name, email address, company information, and payment details when you subscribe to our services.

Usage data: log files, cookies, website analytics, and interaction data with our platform.

We may also obtain professional contact details (e.g., name, role, business email, LinkedIn profile URL) from publicly available sources or licensed data providers.

2. Sources of Data

We obtain contact and business data from:

• Third-party email finder and data enrichment services

• Publicly available web pages, including LinkedIn profiles and company websites

• Direct submissions by our subscribers

• Web scraping of publicly accessible business information

• Business directories and professional networking platforms

3. Purpose of Processing

We process this data to:

• Provide agency clients and subscribers with sales intelligence and potential leads

• Operate, maintain, and improve our lead generation services

• Fulfill legal and contractual obligations, including billing and tax compliance

• Conduct business analytics and service optimization

4. Lawful Basis for Processing (EU/UK GDPR)

For contact data: legitimate interests in enabling B2B outreach and sales intelligence (Article 6(1)(f) GDPR). Our legitimate interest is providing valuable business intelligence services to help agencies and businesses identify potential clients.

For subscriber data: contractual necessity for service delivery and legal obligations for billing and tax compliance (Article 6(1)(b) and 6(1)(c) GDPR).

5. Data Sharing and Disclosure

We share contact and business intelligence data with our paying subscribers as part of our lead generation service. This is the core function of our business model.

We do not sell personal data to consumers or non-business entities.

We may disclose data if required by law, legal process, or to protect our rights, property, or safety.

We may share data with service providers who assist in our operations, under strict data processing agreements.

We do not knowingly collect or sell/share data of residents of California, Vermont, Oregon, or Texas. If you are a resident of those states and believe we hold your data, contact us for removal.

6. Individual Rights

If we hold your personal data, you may have the right to:

Access: Request a copy of your personal data

Correction: Request correction of inaccurate data

Deletion: Request deletion of your data (subject to legitimate business interests)

Objection: Object to processing, especially for direct marketing purposes

Restriction: Request restriction of processing

Portability: Request transfer of your data in machine-readable format

To exercise these rights, email: privacy@getecommerceleads.com. We will verify your identity before processing requests.

7. U.S. State Residents - Important Notice

California, Texas, Oregon, and Vermont Residents: We do not knowingly collect, process, or sell personal data of residents from California, Texas, Oregon, or Vermont in compliance with state data broker regulations. If you believe your data was included in error, please contact us immediately at privacy@getecommerceleads.com for removal.

Colorado, Connecticut, Virginia, and Utah Residents: If you are a resident of Colorado, Connecticut, Virginia, or Utah, you have rights to know about, delete, correct, or opt out of the sale/sharing of your personal information under your state's privacy laws. Contact us at privacy@getecommerceleads.com to exercise these rights.

Other U.S. States: If you are a resident of any other U.S. state with applicable privacy laws, you may have similar rights. Contact us at privacy@getecommerceleads.com for assistance.

Response Times: We respond to opt-out and rights requests within 30 days, extendable once by law as permitted under applicable state privacy regulations.

8. Data Security

We implement appropriate technical and organizational security measures to protect personal data, including:

• Encryption of data in transit and at rest

• Restricted access controls and authentication

• Regular security monitoring and logging

• Secure hosting infrastructure

9. Data Retention

We retain personal data only as long as necessary for our legitimate business purposes. The following table outlines our retention periods:

Data Retention Schedule:

Contact and business data → Lead generation services → 2-3 years or until opt-out/deletion request

Subscriber account data → Billing and tax compliance → 7 years after subscription ends

Usage and analytics data → Service improvement and analytics → 1-2 years

Email communications → Customer support and compliance → 3 years or until opt-out

Legal requests/complaints → Compliance and legal defense → 7 years or as required by law

We delete or anonymize data when it is no longer needed for legitimate business purposes or upon valid deletion requests, subject to legal retention requirements.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Website analytics and performance monitoring

• User experience optimization

• Security and fraud prevention

You can disable cookies in your browser settings, though this may affect website functionality.

11. International Data Transfers

Data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses for EU data transfers

• Adequacy decisions where applicable

• Other legally recognized transfer mechanisms

12. Children's Privacy

Our services are directed to businesses and professionals. We do not knowingly collect personal data from individuals under 16 years of age (or 13 in the United States).

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Effective date." Material changes may be communicated via email to subscribers.

14. Contact Information

For privacy-related questions, requests, or concerns, contact us at:

Email: privacy@getecommerceleads.com

We will respond to your inquiry within 30 days (or as required by applicable law).

15. Data Broker Registration

We exclude residents of California, Vermont, Oregon, and Texas from our services and therefore are not required to register as a data broker in those states.