Legal

Privacy Policy

How we collect, use, share and protect personal data across our website and our B2B demand generation services.

Last updated · 1 September 2026Lidespy · Pune, India
01

Who we are and what this covers

Lidespy is a B2B demand generation company headquartered in Pune, India, serving clients globally. This policy explains how we handle personal data when you visit lidespy.com, contact us, download a resource, or when we process business contact data as part of a client campaign.

We act as a data controller for our own website visitors, prospects and clients. When we run campaigns on behalf of a client, we generally act as a processor under that client's instructions, and their privacy notice applies alongside this one.

02

The data we collect

Data you give us

  • Contact details — name, business email, phone number, job title, company and country, submitted through our contact form, calculator or resource downloads.
  • Campaign and enquiry details — budget ranges, target markets, objectives and anything else you choose to include in a message.
  • Correspondence — emails, call notes and meeting records relating to a current or prospective engagement.

Data we collect automatically

  • Device and usage data — IP address, browser type, operating system, referring page, pages viewed and time on page.
  • Cookie and similar identifiers, as described in our Cookie Policy.

Data from other sources

  • Verified business contact data from licensed data providers, public professional profiles and company websites.
  • Intent and firmographic signals from third-party intelligence providers, used to identify in-market accounts.
  • Enrichment data used to keep business records accurate and de-duplicated.

We do not seek to collect special category data, and we do not knowingly collect data from anyone under 18.

03

How we use personal data

  • To respond to enquiries, provide quotes and deliver the services you or your organisation have requested.
  • To plan, execute and report on demand generation, content syndication, ABM, email and appointment generation campaigns.
  • To verify and qualify leads before delivery to a client, including confirming consent and interest.
  • To send relevant B2B marketing communications, which you can stop at any time.
  • To operate, secure and improve our website and services, and to produce aggregate analytics and benchmarks.
  • To comply with legal, tax and contractual obligations, and to establish or defend legal claims.
05

When we share data

We do not sell personal data in the sense of trading it for money. We share it only as follows:

  • Clients — qualified leads generated under a campaign are delivered to the sponsoring client, who then contacts you directly as a controller in their own right.
  • Service providers — hosting, email delivery, CRM, analytics, telephony and data verification vendors, bound by contract to process data only on our instructions.
  • Professional advisers — lawyers, auditors and insurers where necessary.
  • Authorities — where disclosure is required by law or to protect our rights or the safety of others.
  • Corporate transactions — a buyer or successor in the event of a merger, acquisition or reorganisation.
06

International transfers

We operate from India and work with clients and vendors across North America, Europe, Asia Pacific, and the Middle East and Africa. Where personal data moves out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses together with the UK Addendum, plus supplementary technical and organisational measures where needed.

07

How long we keep data

We retain personal data only as long as it serves the purpose it was collected for:

  • Enquiries that do not become engagements — up to 24 months from last contact.
  • Client and campaign records — for the term of the engagement and up to 7 years afterwards, to meet contractual, tax and audit obligations.
  • Marketing contact records — until you opt out, or after a period of sustained non-engagement.
  • Suppression lists — retained indefinitely, because we must remember not to contact you again.
  • Website and analytics logs — typically up to 26 months.
08

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to receive a portable copy, to withdraw consent, and to opt out of marketing. Residents of California and other US states with comprehensive privacy laws may also have rights to know, delete, correct, and to opt out of targeted advertising or the sharing of personal information.

To exercise any right, email info@lidespy.com. We respond within 30 days, or sooner where the law requires it, and we will not treat you differently for exercising a right. If you are unhappy with our response you may complain to your local data protection authority.

09

Security

We use encryption in transit, access controls on a least-privilege basis, vendor due diligence, staff confidentiality obligations and regular reviews of our systems. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we notify affected people and regulators where a breach requires it.

10

Marketing compliance

Our outreach is designed to align with GDPR and UK GDPR, CAN-SPAM, CASL, and applicable telemarketing and do-not-call rules. Every marketing email identifies us, states why you are receiving it and carries a working unsubscribe link. Opt-out requests are honoured promptly and applied across our campaigns and to the client sponsoring them.

11

Changes to this policy

We may update this policy as our services, vendors or legal obligations change. The date at the top of this page shows when it was last revised, and material changes will be highlighted on this page before they take effect.

Questions about this policy?

Write to us and a member of the team will respond. For data requests, please include the email address the request relates to.