Complying with GDPR

Last updated: 8 November 2026

Business Leads sends business-to-business email campaigns to UK organisations. This page sets out how we do that in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Who we email

We send campaigns to people in their professional capacity at limited companies, LLPs, public bodies and other corporate subscribers. PECR allows unsolicited marketing emails to corporate subscribers, provided the sender is identified and every message offers a simple way to opt out. We do not send campaigns to sole traders or partnerships at personal addresses without consent.

Lawful basis

We rely on legitimate interests. We have assessed that sending relevant business offers to people at organisations likely to benefit from them is a reasonable expectation in a business context, and that the impact on recipients is low because they can opt out at any time and no sensitive data is used.

Where the data comes from

Business contact data is compiled from public sources such as Companies House and company websites, and from reputable data providers who confirm the data is collected lawfully.

Relevance and accuracy

Each campaign is targeted by industry, role and location so that messages are relevant to the people who receive them. Bounced and invalid addresses are removed promptly.

Opting out

Every email includes an unsubscribe link. Anyone who opts out is added to a permanent suppression list and will not receive further campaigns from us or on behalf of any of our clients.

Security

Data is held on secure systems with access limited to staff who need it. Our sending and hosting providers are bound by data processing agreements.

Your rights

If you have received an email from us and want to know what data we hold about you, or want it removed, contact us on 03333 604 102 or write to Business Leads, Eastham Hall, Eastham CH62 0AF. Our Privacy Policy has more detail.