Privacy Policy

Last updated: Saturday, July 25, 2026

This Privacy Policy explains how Coldlytics Ltd ("Coldlytics", "we", "us", or "our") collects, uses, shares, and protects personal data. It also explains your rights under UK data protection law.

1. Who we are

Coldlytics Ltd is a company registered in England and Wales. We provide a B2B lead generation and contact data platform that helps businesses find and reach prospective customers.

For the purposes of UK data protection law, Coldlytics Ltd is the data controller of the personal data described in this policy.

• Company: Coldlytics Ltd (registered in England and Wales, company number 13518350)
• Registered address: Albert House, 256-260 Old St, London, EC1V 9DD, United Kingdom
• Contact for privacy matters: privacy@coldlytics.com

2. The personal data we collect

We collect personal data in three broad ways.

a. Information you give us. When you create an account, subscribe to a plan, or contact us, we collect data such as your name, business email address, company name, job role, account credentials, billing and payment details, and the content of your communications with us.

b. Information we collect automatically. When you use our website and platform, we collect technical and usage data such as your IP address, device and browser type, pages viewed, features used, and similar information, including through cookies and similar technologies (see our Cookie Notice).

c. Business contact information in our database. Coldlytics maintains a database of business (B2B) contact information that we make available to our customers. This may include a person's name, job title, business email address, business phone number, and the company they work for. We collect this information from publicly available sources, our own research, and third-party data providers. See section 10 for information specifically for people whose details appear in this database.

3. How and why we use personal data

We use personal data for the following purposes, relying on the lawful bases shown.

• To provide and manage the service (creating your account, delivering data and features you request). Lawful basis: performance of a contract.
• To take payment and manage billing. Lawful basis: performance of a contract and compliance with a legal obligation.
• To provide customer support and respond to enquiries. Lawful basis: performance of a contract and our legitimate interests.
• To operate, secure, analyse, and improve our platform. Lawful basis: our legitimate interests in running and improving a reliable service, and where required, your consent.
• To send service and, where permitted, marketing communications. Lawful basis: your consent, or our legitimate interests, and in line with applicable marketing laws. You can opt out of marketing at any time.
• To build and maintain our B2B contact database and provide it to customers. Lawful basis: our legitimate interests, and the legitimate interests of our business customers, in connecting businesses with relevant prospects, balanced against the rights of the individuals concerned.
• To prevent fraud and abuse and to keep our service secure. Lawful basis: our legitimate interests and compliance with a legal obligation.
• To comply with our legal obligations. Lawful basis: compliance with a legal obligation.

4. Cookies and similar technologies

We use cookies and similar technologies to operate our website, remember your preferences, keep you signed in, and understand how the service is used. Non-essential cookies (such as analytics) are used only where you have given consent. For full details, please see our Cookie Notice.

5. How we share personal data

We do not sell your account information. We share personal data in the following circumstances.

• Service providers (processors) who help us run our business, under contracts that require them to protect your data. These include providers of cloud hosting and infrastructure, payment processing, email delivery, customer support and messaging, product analytics, identity and authentication, email verification, and referral tracking. Our key providers include Amazon Web Services, Heroku, Stripe, SendGrid, Intercom, Mixpanel, ZeroBounce, FirstPromoter (referral tracking), Airtable (research workflow), Google (sign-in, reCAPTCHA, and spreadsheet delivery), and OpenAI (AI-assisted features).
• CRM and tool integrations you choose to connect. When you connect a third-party tool such as HubSpot and push data to it, we transfer that data to that service on your instruction. Your use of that third party is governed by their own privacy policy.
• Professional advisers, and in connection with a business sale, merger, or reorganisation.
• Legal and regulatory disclosures where required by law, court order, or to protect our rights, users, or the public.

6. International data transfers

We are based in the United Kingdom, and many of our customers and service providers are located in the United States and elsewhere. Where we transfer personal data outside the UK, we put appropriate safeguards in place, such as transfers to countries the UK has deemed adequate, the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms, together with additional protections where appropriate.

7. How long we keep personal data

We keep personal data only for as long as necessary for the purposes set out in this policy, including to provide the service, meet our legal, accounting, and reporting obligations, and resolve disputes. Account data is generally kept for the life of your account and for a reasonable period afterwards. Business contact data is retained while it remains accurate and useful for our service, and is updated or removed as appropriate.

8. How we keep personal data secure

We use appropriate technical and organisational measures to protect personal data, including encryption of sensitive data, access controls, and secure infrastructure. No method of transmission or storage is completely secure, but we work to protect your information and to address any incidents promptly.

9. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• object to, or ask us to restrict, our processing;
• request portability of certain data;
• withdraw consent where we rely on it; and
• complain to a supervisory authority.

To exercise any of these rights, contact us at privacy@coldlytics.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Individuals in our business contact database

If you are a business professional and your contact details appear in our database, this section is for you.

We collect business contact information from publicly available sources, our own research, and third-party providers, and we make it available to our business customers for B2B outreach. We rely on legitimate interests as our lawful basis for this processing. We process business contact details, not special category data.

You have the right to object to this processing and to ask us to correct or delete your information. The fastest way is our self-serve removal page at app.coldlytics.com/privacy/remove, or you can contact us at privacy@coldlytics.com and we will action your request. We will also tell you, on request, the source of your data where we are able to.

11. The Coldlytics browser extension

We offer a Chrome browser extension that lets you look up the company whose website you are viewing and access that company's business contact details from our platform. This section explains how the extension handles data. The rest of this policy also applies.

• We receive the web address of the company site you are viewing. To identify the company, the extension reads the address (hostname) of the tab you are actively viewing and sends it to Coldlytics so we can match it to a company in our database. This means we receive the addresses of the company websites you look up while the extension's side panel is open. We use this only to provide the lookup, and, where a company is not yet in our database, to record that a customer was interested in it so we can prioritise adding it.
• We do not read the content of the pages you visit. The extension only reads the address of the active tab. It does not read, collect, or transmit the text, images, or other content of any web page, and it does not run on or modify the pages themselves.
• You use your existing Coldlytics account. The extension works through your existing Coldlytics login, using the same secure session as our website. It does not collect your password or other login credentials.
• We record how the extension is used. As with the rest of our platform, we collect usage data such as the companies you look up, the contacts you reveal, and the actions you take, through our product analytics provider, to operate, secure, and improve the extension.

We do not sell this data, we do not use or transfer it for any purpose unrelated to providing the extension, and we do not use it to assess creditworthiness or for lending. The business contact details shown in the extension are drawn from our database and are covered by the rest of this policy, including section 10 for the individuals concerned.

12. Children's privacy

Our service is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16.

13. Third-party websites

Our website and platform may link to third-party sites we do not control. This policy does not apply to those sites, and we encourage you to read their privacy policies.

14. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date above. Where changes are significant, we will take reasonable steps to notify you.

15. How to contact us

If you have any questions about this policy or how we handle your personal data, contact us at:

Coldlytics Ltd
‍Albert House, 256-260 Old St, London, EC1V 9DD, United Kingdom
‍privacy@coldlytics.com