Privacy notice

This website uses strictly necessary storage (e.g. your language preference in localStorage) and — only after explicit consent via our cookie banner — the statistics services Google Analytics 4 and PostHog (EU). Before consent, all Google Consent Mode v2 signals stay set to “denied”; PostHog is loaded only after consent and enforces input masking. See our full storage inventory in the Cookie Policy.

Hosting

The site is hosted in ISO 27001-certified EU data centres. Server logs (IP, timestamp, requested URL) are retained short-term to defend against abuse and deleted within 30 days. Legal basis: Art. 6(1)(f) GDPR (operational security).

Contact form

When you write to us, we process your details solely to respond to you (Art. 6(1)(b) / (f) GDPR) and delete them once the matter is closed and no statutory retention rule applies.

The core of the lead.box product is company-level identification of website visitors on our customers' sites. We process:

• IP address (only to resolve the associated organisation; not stored long-term in plain text)
• User-agent, requested URLs, referrer, technical session metadata
• Result of the company resolution (name, industry, size, country)

Legal basis is our customers' legitimate interest in B2B pipeline analysis (Art. 6(1)(f) GDPR). We do not identify natural persons, we do not set advertising cookies, and we do not build cross-site user profiles.

Retention

Visit and tracking data is retained for up to 12 months as an as-is statement and then automatically deleted or anonymised. IPs are not stored in plain text after resolution.

Opt-out

Individuals can object to the processing at any time via the opt-out page or by email to info@lead.box.

We rely on processors located in the EU for hosting, database, email delivery and company resolution. The complete list is part of the Data Processing Addendum (DPA). Each processor is bound by a GDPR-compliant agreement.

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

Please direct requests to info@lead.box.

You have the right to lodge a complaint with a data-protection supervisory authority in your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).