Last updated: [DATE — TO BE SET BY COUNSEL]
[Legal entity name, address, privacy contact, EU/UK representative if applicable.]
[Categories: name, job title, employer, business email, business phone, work location, professional profile URL. Sources: licensed data providers, public company websites, user contributions. Each record stores its source.]
[Account email, hashed password, billing data processed by Stripe, usage logs.]
[B2B prospecting; legitimate interests assessment; contract performance for customers.]
[We validate records using DNS (MX) lookups, company website checks, phone formatting and automated (AI) title normalisation. We do not send probe emails (no SMTP verification) and do not scrape sites that prohibit it. Every change is logged.]
[CCPA/CPRA “sale/share” disclosures; categories of recipients.] Opt out at /opt-out.
[Access, deletion, correction, objection, do-not-sell, non-discrimination; how to exercise; verification; authorised agents; appeals.]
[Retention periods; suppression list retained as SHA-256 hashes to honour opt-outs.]
[SCCs / UK IDTA; data stored in Cloudflare D1 regions in North America, Western Europe and Asia-Pacific.]
[PBKDF2 password hashing, HTTPS only, access controls.]
privacy@deepleads.org [to be confirmed]