Privacy

This page explains what personal information we hold, why we hold it, and how to make us stop. It is written plainly, because you should not need a lawyer to find out what happens to your details.

Last updated 22 August 2026

Two groups of people are covered. Part A is for customers and anyone who fills in a form on this site. Part B is for the business contacts who receive the campaigns we send. If one of our emails reached you and you want it to stop, the unsubscribe link in that email works straight away, and Part B explains the rest.

This notice covers our email campaign service. If you are one of our daily prospect report customers, the notice for that service is at business-leads.co.uk/privacy and it is the one that applies to you.

Who we are

Business Leads is a trading name of Email First Ltd, which operates from Eastham Hall, Eastham, Cheshire, CH62 0AF. For the purposes of UK data protection law, Email First Ltd, trading as Business Leads, is the controller of the personal data described on this page.

Everything on this page is handled by one address, hello@business-leads.co.uk. You can also write to us at Business Leads, Eastham Hall, Eastham, Cheshire, CH62 0AF.

Part A, customers and enquiries

This part applies if you are a customer, or if you have filled in either form on this site.

What we ask you for

The sign up form asks for your name, your email address, your company, your website, which plan you want, what you sell and who you want to hear about it. The contact form asks for your name, your email address and your message. Both land in the same inbox.

If you go on to become a customer, we also hold the campaign we write for you, the landing page we build for you, the results we report back, and ordinary account and billing records.

Why we hold it, and the lawful basis

We use your details to answer you and to run the service you asked for. Where you are a customer, the lawful basis is contract. Where you have asked a question and are not a customer yet, the lawful basis is legitimate interests, ours in answering a business enquiry and yours in getting a reply.

We do not sell your details, we do not pass them to advertisers, and we do not add you to anybody else’s campaign.

We never ask for payment details on this website

There is no payment form here. Nothing on this site asks for a card number or bank details. If you ever receive something that looks like it came from us and asks for either, do not fill it in, and please tell us so we can look into it.

How long we keep it

• Enquiries that go no further are kept for 12 months, so we can pick the thread back up if you come back to us, and then deleted.
• Customer records are kept while your account is open. After it closes we keep what accounting law requires us to keep, for six years, and then delete them.
• An encrypted backup of our database is taken every night and kept for 30 days. If we ever restore from one, we re-apply every deletion made since it was taken, so anything you asked us to remove stays removed.

Who else sees it

Only the people who need to. Your details stay on our own systems and with the suppliers who host them for us, under written terms that stop them using your information for anything of their own.

Part B, the people our campaigns reach

If an email sent by Business Leads arrived in your work inbox, this part is about you.

Why you received it

One of our customers asked us to tell UK businesses about what they sell. We sent that email from our own systems, to a business contact record we hold on our own list. You did not fill in a form, and nobody bought your details from us.

Where your details came from

Our list of UK business contacts is built from licensed business data providers and from public Companies House records. Every record is checked and deduplicated before it is used. Records that go stale or cannot be verified are removed rather than kept.

What we hold about you

Business contact details only. Your name, your work email address, your job title, the company you work for, its town and its industry. We work with business details, not private ones.

Our lawful basis, and where PECR sits

Our lawful basis for holding and using your details is legitimate interests. That means our customers’ interest in reaching businesses that may genuinely want what they sell, weighed against your rights. We have completed that assessment and written it down, and you can have a copy by asking.

PECR, the UK rule that governs marketing email, allows unsolicited marketing email to corporate subscribers, meaning people contacted in their working role at a company. We take that boundary seriously. Contacts are matched against Companies House records, and sole traders, who count as individual subscribers under PECR, are excluded by default.

Who the email is from

Every campaign email says who sent it and who it is on behalf of. It goes from our own sending addresses and never from a customer’s mailbox, and it carries our trading name, our registered company name and our postal address. If you cannot tell who an email came from, it did not come from us.

What we measure

Links in a campaign email pass through our own domain before they reach where they are going, and each email carries a small image hosted on our domain that records when it is opened. If you visit a landing page we built for a customer, we record the visit.

We log the time, the browser type and the IP address, and we filter out opens caused by security scanners rather than by people. All of this stays on our own systems. No third party tracking company is involved at any point.

Who sees your details

If you show interest, by opening an email, clicking a link in it or visiting the landing page, we pass your business contact details to that one customer so they can follow up. Our terms require them to use those details lawfully, to honour your objections and never to resell them. We do not sell your details to anybody.

How to stop the emails

Every campaign email carries an unsubscribe link. It works immediately. There is no account to sign into, no password, and no reason to give. You can also email hello@business-leads.co.uk and we will do it for you.

One opt-out covers everything. We keep a single suppression list that applies across every customer we work for. Unsubscribe once, from any email, and no campaign we run for anybody will email you again. That list is permanent and it is never cleared, so even if the same address turns up in a later import it cannot be added back.

How long we keep a prospect record

We keep a business contact record while it is accurate and in use, and remove it when it is not. If you opt out, we keep a hashed fingerprint of your email address on the suppression list. It cannot be turned back into your address, and it is the only way to be certain you are never emailed again.

Your rights

You do not need a form, a lawyer or a reason. One email to hello@business-leads.co.uk does all of this. We act promptly, and always within one calendar month.

• Object. For direct marketing this right is absolute. Tell us to stop and we stop, with no questions and no balancing test.
• Erasure. We delete your record, and keep only the hashed fingerprint described above so that the address can never be emailed again.
• Access. Ask, and we will send you a copy of everything we hold about you.
• Correction. Tell us what is wrong and we will put it right.
• Restriction and portability. These are yours as well, and the same address covers them.

Booking a call with us

If you book a call, the diary you use is run for us by Calendly, a scheduling company. It opens over this page rather than sending you somewhere else, but it is still their service, and the name, email address and any answers you give while booking go to them as well as to us.

Nothing loads from Calendly until you press the button. If you never book a call, nothing about your visit reaches them at all. Once you do, they set cookies of their own so the booking works and so you are not asked the same thing twice. Their notice is at calendly.com/privacy.

We use what you tell us in the booking to hold the appointment and to prepare for it. If you do not go on to become a customer, we keep the record of the call for two years, then delete it.

Cookies and this website

We count visits to this site with Cloudflare Web Analytics. It works without cookies, it does not follow you to other sites, and it does not build a profile of you. It tells us how many people looked at a page, and that is all.

We set no advertising cookies and no tracking cookies, and we run no advertising pixels. The only cookies that can be set here belong to Calendly, and only if you choose to open the booking diary. Nothing is dropped on you for simply reading the page.

Complaints

If you think we have got something wrong, please email hello@business-leads.co.uk first. Problems get looked at quickly. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk.

Changes to this notice

When this notice changes, we update this page and the date near the top. If a change genuinely matters, customers hear about it by email as well.

The GDPR and data page answers the same questions in fewer words. If yours is not answered on either page, email us and we will reply the same working day.