Legal

Privacy Policy

This Privacy Policy explains how Leads.Garden processes personal data. It applies to buyers who create an account on our marketplace and to individuals whose business contact information appears in our bundles. It does not create legal obligations beyond the ones stated in our Terms of Service.

Last updated June 1, 2026

Data we collect from buyers

Account email, hashed password (or Google identifier), purchase and download history, IP address and browser metadata, and payment metadata handled by our payment processor. We do not store card numbers.

Data we process about individuals in bundles

Business contact information — name, professional email, employer, role, seniority, LinkedIn URL and public firmographic data. We do not process special-category personal data as defined by GDPR.

Legal basis (EU/UK)

For buyers: contract performance and legitimate interest. For business contacts in bundles: legitimate interest for B2B outreach, subject to the rights described below.

Your rights

Access, correction, deletion, restriction of processing and objection are available on request. Email privacy@leads.garden and we will respond within 30 days.

Data sharing

We share data with sub-processors (managed database and auth, object storage, payment processing, analytics). We do not sell personal data.

Retention

Buyer account data is retained for the life of the account plus 12 months. Business contact data in bundles is retained until removed on request or superseded by a fresh verification pass.