GDPR Compliance

1. Our Stance on B2B Data

VeloxLeads operates strictly in the Business-to-Business (B2B) domain. We process data based on "Legitimate Interest" (GDPR Recital 47), which recognizes direct marketing as a valid legitimate interest, provided that the fundamental rights of the data subject do not override this interest.

To ensure this balance, we actively filter out personal email addresses (such as @gmail.com, @hotmail.com) and only retain professional contact details that are publicly accessible.

2. Data We Process

• Company Data: Domain name, technology stack, social media links.
• Professional Contact Data: Generic business emails (info@, sales@) and publicly listed professional email addresses found on company websites.

3. Your Rights (Data Subjects)

If your professional data is in our database, you have the following rights:

• Right to Object (Opt-out): You can remove your data from our system immediately.
• Right of Access: You can ask what data we hold about your business.
• Right to Erasure: "Right to be forgotten".

4. Data Minimization & Storage

We only collect data that is necessary for the purpose of B2B lead generation. We do not collect sensitive personal data (health, religion, political views, etc.). Data is stored securely on servers within the EU/US with strict access controls.

5. Third-Party Processors

We use trusted sub-processors to run our platform:

• Supabase: Database & Authentication.
• Stripe: Payment Processing.
• Clerk: User Management.

6. Contact DPO

For specific privacy inquiries, please contact our Data Protection Officer at privacy@veloxleads.com.