Privacy notice

This website uses strictly necessary storage (e.g. your language preference in localStorage) and — only after explicit consent via our cookie banner — the statistics services Google Analytics 4 and PostHog (EU). Before consent, all Google Consent Mode v2 signals stay set to “denied”; PostHog is loaded only after consent and enforces input masking. See our full storage inventory in the Cookie Policy.

Hosting

The site is hosted in ISO 27001-certified EU data centres. Server logs (IP, timestamp, requested URL) are retained short-term to defend against abuse and deleted within 30 days. Legal basis: Art. 6(1)(f) GDPR (operational security).

Contact form

When you write to us, we process your details solely to respond to you (Art. 6(1)(b) / (f) GDPR) and delete them once the matter is closed and no statutory retention rule applies.

The core of the lead.box product is company-level identification of website visitors on our customers' sites. We process:

• IP address (only to resolve the associated organisation; not stored long-term in plain text)
• User-agent, requested URLs, referrer, technical session metadata
• Result of the company resolution (name, industry, size, country)

Legal basis is our customers' legitimate interest in B2B pipeline analysis (Art. 6(1)(f) GDPR). We do not identify natural persons; the lead.box tracker on our customers' websites does not set advertising cookies and does not build cross-site user profiles.

Retention

Visit and tracking data is retained for up to 12 months as an as-is statement and then automatically deleted or anonymised. IPs are not stored in plain text after resolution.

Opt-out

Individuals can object to the processing at any time via the opt-out page or by email to info@lead.box.

On our own website lead.box, we use the following tools exclusively if you consent to the “Analytics” or “Marketing” category in the cookie notice:

• Google Tag Manager and Google Analytics 4 (Google Ireland Limited) – audience measurement with IP anonymisation.
• Google Ads Conversion Tracking (Google Ireland Limited) – measures whether visits from our advertisements lead to registrations.
• LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) – conversion measurement, audience statistics and retargeting of visitors to our website on LinkedIn.
• Meta Pixel (Meta Platforms Ireland Limited) – conversion measurement and retargeting on Facebook and Instagram.

These tools may set cookies and transmit pseudonymous usage data (e.g. truncated IP address, device and browser data, pages visited, click identifiers from advertisements) to the providers; transfers to the United States are possible (safeguards: EU-U.S. Data Privacy Framework or Standard Contractual Clauses). The legal basis is your consent (GDPR Art. 6(1)(a), Section 25(1) TDDDG). These tools are not loaded without consent. You can withdraw your consent at any time with future effect via Cookie Settings (link in the footer). Details of cookie names and retention periods are available in our Cookie Policy.

We rely on processors located in the EU for hosting, database, email delivery and company resolution. The complete list is part of the Data Processing Addendum (DPA). Each processor is bound by a GDPR-compliant agreement.

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

Please direct requests to info@lead.box.

You have the right to lodge a complaint with a data-protection supervisory authority in your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).