GDPR Compliance — LeadHub.sbs

Overview

LeadHub.sbs ("we", "us", "our") is committed to protecting the personal data of our users and data subjects. This page describes how we comply with the General Data Protection Regulation (GDPR — EU 2016/679), the UK GDPR, and applicable global data protection laws.

As a B2B platform, LeadHub.sbs processes two types of data: (1) data about our own users (account holders), and (2) business lead data scraped from publicly available sources. This page covers both.

Important: Leads scraped through LeadHub.sbs are from publicly available business directories. You are responsible for your own GDPR compliance when contacting those leads.

Lawful Basis for Processing

Contract Performance

Processing your account data to deliver our services under the subscription agreement.

Legitimate Interest

Processing transactional logs, security events, and analytics to maintain, improve, and protect the platform.

Legal Obligation

Retaining billing and payment records as required by financial regulations.

Consent

Marketing communications (newsletter, product updates). You can withdraw consent at any time.

Your Rights Under GDPR

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate personal data.

Right to Erasure

Request deletion of your account and all associated data ("right to be forgotten").

Right to Portability

Receive your data in a machine-readable format (JSON or CSV).

Right to Object

Object to processing based on legitimate interests, including profiling.

Right to Restrict

Ask us to pause processing while a dispute is resolved.

Right to Withdraw Consent

Unsubscribe from marketing communications at any time.

To exercise any of these rights, contact us at: privacy@leadhub.sbs. We will respond within 30 days.

Data Storage & Retention

Data Category	Retention Period	Location
Account data (name, email, password hash)	Duration of account + 30 days after deletion	Our servers (EU/US)
Billing records	7 years (financial regulation)	Stripe + our servers
Search & lead data	Duration of account	Our servers
Activity logs	90 days rolling	Our servers
Email logs	30 days	SMTP provider
Support tickets	3 years	Our servers

Third-Party Sub-Processors

We share data with the following sub-processors to deliver our service:

Stripe

Payment processing

United States

Apify

Web scraping infrastructure

Czech Republic

Hunter.io

Email verification

France

SendGrid

Transactional email

United States

Google

OAuth login / Maps API

United States

Data Processing Agreement (DPA)

If you use LeadHub.sbs to process personal data on behalf of your clients (e.g., as a lead generation agency), you may need a Data Processing Agreement. Contact us to request a signed DPA.

Request a DPA

Right to Complain

You have the right to lodge a complaint with your local supervisory authority. For EU residents, this is your national Data Protection Authority. For UK residents, this is the ICO (ico.org.uk).

Questions about this policy? Contact our Data Protection team at privacy@leadhub.sbs