Privacy record

Data inventory

This inventory explains the information LeadNumbers holds, how long each category is kept, and who may access it.

Access is limited to the people and service categories needed for a stated purpose. This page intentionally does not publish confidential sourcing, infrastructure or security architecture details.

Make a privacy request View trust center

What we hold and why

Category	What it includes	How long we keep it	Who can access it
Account and identity	Name, work email, company, website and account status.	For the life of the account, then only as needed for legal, accounting or dispute obligations.	Authorized client users and the LeadNumbers owner when needed for support or administration.
Search profile and instructions	Ideal customer profile, targeting choices, exclusions and other instructions provided by the client.	For the life of the account. Removed when the account closes or on an applicable deletion request.	Authorized users in that client workspace and the LeadNumbers owner when needed to provide the service.
Delivery settings	Recipient addresses, delivery schedule, time zone and connected delivery destination settings.	For the life of the account, or until the client changes or removes them.	Authorized users in that client workspace and necessary service-provider categories used for delivery.
Subscription and billing records	Plan, volume, billing term, payment status and transaction references. We do not store card details.	Billing records may be kept for up to seven years where required for accounting and legal obligations.	Authorized LeadNumbers administration and the payment service used to process subscriptions.
Delivered business contacts	Business name, role, employer, work email, business phone, location and professional profile link.	Visible in the client workspace for the life of the account, unless removed through a valid privacy request.	Only authorized users in the receiving client workspace, plus restricted administration when required.
Delivery files	Contact files prepared for a client delivery.	Deleted automatically 90 days after delivery.	Only the receiving client workspace, restricted administration and necessary delivery services.
Client-uploaded documents	ICP briefs and other files a client uploads to describe its requested audience.	For the life of the account, until the client deletes them, or until account closure.	Authorized users in that client workspace and restricted administration when needed to provide support.
Inquiries and service requests	Free-sample requests, quote requests, callback requests and support correspondence.	Until the request is fulfilled, then only as needed for account, legal, fraud-prevention or dispute purposes.	Restricted LeadNumbers administration and necessary communication services.
Usage and consent	Anonymous site activity, consent choices and account activity needed to operate and improve the service.	Consent records are kept for up to two years. Anonymous usage is kept only as long as needed for reporting.	Restricted LeadNumbers administration and necessary measurement services when the visitor has consented.
Abuse-prevention records	Limited signals used to prevent automated, duplicate or fraudulent requests.	Kept on a rolling basis for up to 90 days.	Restricted LeadNumbers administration and necessary security services.
Privacy requests	The request, identity-matching details, due date, status and outcome.	Kept for up to three years as evidence that the request was handled.	The requester where shown in their Privacy desk, and restricted LeadNumbers administration.
Suppression records	The minimum information needed to ensure an opted-out person is not supplied again.	Kept indefinitely so the opt-out remains permanent.	Restricted LeadNumbers administration and automated suppression checks.
Security and activity records	Records of sensitive account, administrative and privacy-related actions.	Kept for up to two years for investigation, accountability and security review.	Restricted LeadNumbers administration and authorized reviewers where legally or contractually required.

A legal hold, active dispute or statutory obligation may require a record to be kept longer. When a person asks to be removed, their contact record is deleted where applicable, while the minimum suppression record remains so the opt-out cannot be reversed by a later refresh.