UK GDPR Compliant

Privacy Policy

Effective: 1 January 2026

Updated: 4 January 2026

1. Introduction

This Privacy Policy explains how Norden Leads Ltd. ("we", "us", or "our") collects, uses, stores, and protects your personal data when you:

  • Visit our website at nordenleads.com
  • Download resources or contact us through our website
  • Receive our B2B marketing communications
  • Are included in our lead generation services as a business contact

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This policy sets out your rights and how we comply with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

Who We Are

Company Name:

Norden Leads Ltd.

Company Number:

16890573

Registered Address:

Clovelly House, 7 Eversley Park, Chester, CH2 2AJ, United Kingdom

Data Controller:

Norden Leads Ltd.

Responsible Person:

Managing Director

We are a UK-registered company specializing in AI-powered outbound lead generation services exclusively for the logistics sector (including freight forwarding, third-party logistics providers, warehousing, parcel and courier services, and cold chain logistics) in the UK and Ireland.

2. What Personal Data We Collect

We collect and process different types of personal data depending on how you interact with us:

A. Website Visitors and Lead Magnet Users

When you visit our website or download resources (such as our logistics marketing handbook), we may collect:

  • Name
  • Email address
  • Company name (if provided)
  • Usage data (IP address, browser type, pages visited, time spent on site) via analytics tools

B. Strategy Call Bookings

When you book a strategy call through our Calendly integration, we collect:

  • Name
  • Email address
  • Phone number
  • Company name and details
  • Preferred meeting times

C. Business Contact Data (Lead Generation Services)

For our lead generation services, we collect and process business contact information including:

  • Full name
  • Job title and role
  • Business email address
  • Business phone number
  • Company name and details
  • LinkedIn profile information
  • Industry and sector information
  • Intent signals

This data is collected from publicly available sources such as LinkedIn, company websites, business directories, and job postings. We do not collect sensitive personal data (e.g., health information, racial or ethnic origin, political opinions).

3. How We Use Your Personal Data

We use your personal data for the following purposes, under the lawful bases set out below:

A. Website Enquiries and Downloads – Consent

When you download resources or submit an enquiry form, we process your data based on your consent. We use this data to:

  • Provide you with the requested resource or information
  • Send you relevant marketing communications about our services (you can unsubscribe at any time)
  • Improve our website and user experience

B. Strategy Call Management – Contractual Necessity

When you book a strategy call, we process your data to:

  • Schedule and conduct the meeting
  • Follow up on discussions and provide proposals
  • Maintain records of our communications

This processing is necessary for us to provide the services you've requested.

C. B2B Lead Generation and Outreach – Legitimate Interests

We process business contact data based on our legitimate interests (and those of our clients) to conduct B2B marketing activities. This includes:

  • Building targeted contact lists for our clients in the logistics sector
  • Conducting personalized cold email outreach campaigns on behalf of clients
  • Qualifying leads as Marketing Qualified Leads (MQLs) or Sales Qualified Leads (SQLs)
  • Handing over qualified leads to our clients

We have carefully balanced our legitimate interests against your rights and freedoms. We only target senior business professionals in relevant roles, and we always provide a clear and easy way to opt out of communications in every email we send.

D. Service Improvement and Analytics – Legitimate Interests

We use website analytics (such as Google Analytics) to understand how visitors use our site, which helps us improve our services. This processing is based on our legitimate interests in operating an effective business.

4. Sources of Personal Data

We collect personal data from the following sources:

Directly From You

  • When you fill in forms on our website (e.g., handbook downloads, contact forms)
  • When you book a call through Calendly
  • When you email or contact us directly
  • When you interact with our marketing emails

From Public Sources

For our lead generation services, we collect business contact data from publicly available sources, including:

  • LinkedIn (public profiles only)
  • Company websites (contact pages, team pages, press releases)
  • Business directories (Companies House, industry directories)
  • Job postings (for identifying decision-makers)
  • Public databases and professional networking platforms

Important Note:

We do not purchase contact lists from third-party data brokers. All data is sourced from legitimate, publicly accessible sources.

5. Who We Share Your Data With

We do not sell your personal data. However, we may share it with the following parties for legitimate business purposes:

1. Sub-Processors and Service Providers

We work with trusted third-party service providers to support our operations:

  • Email Service Providers: To send marketing emails and communications (e.g., Instantly, Smartlead)
  • CRM & Sales Tools: To manage leads and customer relationships
  • Booking Systems: Calendly for scheduling calls
  • Analytics Providers: Google Analytics for website performance
  • Hosting & Infrastructure: Cloud hosting providers

2. Our Clients (Controllers)

When we generate leads on behalf of our clients, we share qualified contact information with them. In these cases:

  • Our client becomes the data controller for their own marketing and sales follow-up
  • We only share data of qualified leads (MQLs/SQLs) who have shown interest
  • Our clients are responsible for their own GDPR compliance when processing this data

3. Legal Requirements

We may disclose your data if required by law, regulation, or legal process (e.g., court orders, regulatory requests).

Important:

We do not sell your data to third-party data brokers or marketers. We only share qualified leads with our clients as part of our contracted lead generation services.

6. International Data Transfers

We primarily operate within the UK and Ireland. However, some of our service providers may process data outside the UK. When this happens, we ensure appropriate safeguards are in place.

Standard Contractual Clauses (SCCs)

We use UK-approved Standard Contractual Clauses with third-party processors to ensure adequate protection.

Adequacy Decisions

Where possible, we use providers in countries recognized by the UK as having adequate data protection laws.

Additional Safeguards

We implement technical and organizational measures such as encryption, access controls, and regular audits.

If you have questions about international transfers, please contact us at [email protected]

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes.

Data Type Retention Period
Website downloads & enquiries
Up to 3 years, or until you unsubscribe
Strategy call bookings
Up to 6 years (for contractual and legal purposes)
B2B contact data (leads)
Up to 3 years from last contact, or until opt-out
Website analytics (cookies)
Up to 26 months (Google Analytics default)
Financial/accounting records
6 years (UK legal requirement)

Secure Deletion

When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policy and UK GDPR requirements.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can ask us to correct any inaccurate or incomplete data.

Right to Erasure

You can request that we delete your data in certain circumstances.

Right to Restrict Processing

You can ask us to temporarily limit how we use your data.

Right to Object

You can object to processing based on legitimate interests, including for direct marketing.

Right to Data Portability

You can request your data in a structured format to transfer to another provider.

Right to Withdraw Consent

Where we process data based on consent, you can withdraw it at any time.

Right to Complain

You can lodge a complaint with the ICO if you believe we've mishandled your data.

How to Exercise Your Rights

Email us at [email protected] with your request.

We will respond within one month (or explain if we need more time). We may need to verify your identity before processing your request.

9. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it from unauthorized access, loss, misuse, or disclosure.

Encryption

Data is encrypted in transit (TLS/SSL) and at rest where appropriate.

Access Controls

Only authorized personnel have access to personal data on a need-to-know basis.

Secure Hosting

We use reputable cloud providers with industry-standard security certifications.

Regular Backups

Data is backed up regularly to prevent loss in the event of a system failure.

Vendor Agreements

All third-party processors are bound by strict data processing agreements.

Breach Notification

We have procedures to detect, report, and investigate data breaches promptly.

Important Notice

While we implement robust security measures, no method of transmission over the internet is 100% secure. If you have concerns about the security of your data, please contact us at [email protected]

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience and analyze site performance.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website.

What Cookies We Use:

Essential Cookies

Required for the website to function (e.g., security, session management)

Analytics Cookies

Help us understand how visitors use our site (e.g., Google Analytics)

Functional Cookies

Remember your preferences (e.g., Calendly integration for bookings)

Your Cookie Choices:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

11. B2B Marketing and Your Right to Opt Out

Legitimate Interests for B2B Cold Outreach

We conduct B2B email marketing in compliance with PECR and UK GDPR. We may contact business professionals at their corporate email addresses based on legitimate interests. We only contact individuals in relevant roles within the logistics sector where we believe our services may be of professional interest.

Easy Opt-Out in Every Email

Every marketing email we send includes:

  • A clear unsubscribe link
  • Our contact details
  • Information about why you're receiving the email

If you click unsubscribe or ask us to stop contacting you, we will do so immediately (within 48 hours) and maintain a suppression list to prevent future contact.

We Do Not Sell Data

We do not sell standalone contact lists. Our service is lead generation and outreach on behalf of clients—we provide qualified leads, not raw databases.

12. Children's Privacy

Our services are exclusively B2B and aimed at business professionals. We do not knowingly collect personal data from anyone under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending an email notification if you're on our mailing list (for material changes)

We encourage you to review this policy periodically to stay informed about how we protect your data.

14. Contact Us and Complaints

Questions or Requests

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Postal Address:

Norden Leads Ltd.
Clovelly House
7 Eversley Park
Chester, CH2 2AJ
United Kingdom

We aim to respond to all requests within one month.

Complaints

If you are not satisfied with how we have handled your personal data, you have the right to complain to the UK data protection supervisory authority:

Information Commissioner's Office (ICO)

Website: www.ico.org.uk
Telephone: 0303 123 1113
Address:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF

Summary: Your Privacy at a Glance

We respect your privacy and only collect data necessary for our services

We're transparent about what we do with your data and why

You have control: opt out anytime, and we'll stop contacting you immediately

We don't sell data—we provide qualified leads to clients, not raw databases

We use legitimate interests for B2B marketing, with easy opt-out in every email

We keep your data secure with appropriate technical and organizational measures

Your rights matter—access, correct, or delete your data anytime

Thank you for trusting Norden Leads Ltd. with your information.

This Privacy Policy is governed by UK GDPR and UK data protection law.