GDPR Compliance

Lead Extract is fully GDPR compliant. We identify both companies and individual visitors, depending on the region. In GDPR regions, we identify company-level data based on IP addresses. In the US and many other countries, we can also identify exact visitors through our opt-in partnership network, which is lawful under GDPR for legitimate business interests.

What We Identify

• Company-level data - Business name, industry, size, location

• Publicly available contact info - Business contact details from public sources

• Behavioral data - Pages visited, time on site (anonymized at individual level)

We Do NOT Identify

• Individual names in GDPR regions (but we can in US and other countries through our opt-in network)

• Personal data without proper consent (we only provide personal contact info where legally permitted)

• Any data that violates applicable privacy laws in the visitor's region

Cookie Consent

Since we use cookies for tracking, you should include Lead Extract in your cookie policy. However, we only use first-party cookies for session tracking and company identification, which generally falls under legitimate business interest.

Data Retention

We retain visitor data for as long as your account is active. If you delete a visitor or your account, the data is permanently removed from our systems within 30 days.

Data Processing Agreement

Enterprise customers can request a Data Processing Agreement (DPA) by contacting our support team.

privacygdprcompliancedata protection