For everyone
Privacy Policy
What LeadsByCity records about the people who use it, what the lists themselves contain, and how a business can ask for its details to be removed.
Working draft. This is not final legal text.
This page describes, in plain language, how LeadsByCity works today. It has not been reviewed by a lawyer and needs legal review before launch. Parts marked “Not written yet” are still to be supplied.
1Two kinds of data
This policy covers two different things, and it helps to keep them apart:
- Account data: what LeadsByCity records about the people who buy and sell here.
- List data: the business details inside the lists that are sold here.
Not written yet
The name and address of the person or company responsible for this data, and how to contact them about privacy, go here.
2What is recorded about people who use LeadsByCity
The product records the following, because it cannot work without it:
- Everyone with an account
- Email address, display name, a password, and whether the email address has been confirmed.
- Buyers
- Orders, the currency chosen at checkout, the refund wallet address, and payment and refund records with their transaction hashes. Instant Lists can be bought without an account, with only an email address for the receipt and the download link.
- Sellers
- A seller handle, display name, bio and country, the result of the ID check, company details for business sellers, the payout wallet address, listings and uploaded files, and payout records with their transaction hashes.
- The protected viewer
- Every page a buyer opens is logged. Each page is watermarked with the buyer's email address, the order number and the time.
- Chat
- Messages between buyers and sellers are stored. Contact details are hidden automatically before an order exists, and messages that try to pass them can be flagged for the team to review.
- Control records
- Email received by the control addresses placed in a buyer's copy of a file is recorded and linked to that order.
- Takedown requests
- The name, email address, organisation and description given on the form.
3Who else handles this data
- Seller ID checks are carried out by a specialist identity verification provider.
- Payments, payouts and refunds go through a crypto payment gateway and are recorded on public blockchains, where wallet addresses and amounts are visible to anyone.
Not written yet
The named providers, the countries they operate in, and the hosting provider go here once they are confirmed.
4What the lists contain
- Lists are business-level data: business name, address, business phone number, website and business email addresses.
- Instant Lists are built from public business information, including the email addresses each business publishes on its own website.
- Files on the Lead Market are collected by independent sellers, who confirm for each file that it came from public or permitted sources and contains no consumer, breached or sensitive data.
Data about private individuals is not allowed. See the Prohibited Data Policy.
5Asking for your details to be removed
If a list contains your business’s details, or you find personal data in a listing, use the takedown form. You do not need an account, and the team answers every request within 7 days.
6Parts still to be written
Not written yet
- The legal basis for each use of account data.
- How long each kind of record is kept.
- Cookies and analytics, if any are used.
- Transfers of data between countries.
- The rights people have over their data and how to use them, for each region served.
- How changes to this policy are announced.