Legal

Privacy & Cookie Policy

Last updated: 17 August 2026

This policy explains what personal data iLeads Ltd (trading as Business Prospector, “we”, “us”) collects, why we collect it, and the rights you have over it. It covers visitors to businessprospector.com, our clients, and the business contacts who appear in our prospecting data. We’ve tried to write it in plain English - if anything is unclear, email us and we’ll explain.

1. Who we are

iLeads Ltd is the data controller for the personal data described in this policy. We are registered with the Information Commissioner’s Office (ICO). For anything relating to your data, contact hello@businessprospector.com.

2. The data we collect

Website visitors. When you browse this site we collect standard technical data: IP address, browser type, pages visited, and how you arrived here. If you fill in a form or book a call, we collect the details you give us - name, company, work email, and your message.

Business prospects. Our service identifies UK fleet operators showing buying signals. This data is compiled from publicly available sources and from third-party business data providers. Public sources include the DVSA operator licence register, FORS accreditation records, Companies House and other public registers, company websites, professional and trade directories, publicly accessible business profiles, job advertisements, tender and contract notices, news and press releases, and general web searches. We also use third-party providers to verify and enrich business contact details; those providers warrant to us that they obtained the data lawfully and that it may be shared for B2B marketing. What we hold depends on how the business is set up:

• Limited companies. Company information plus the business contact details of directors and decision-makers - typically name, role, work contact details and a LinkedIn profile URL.
• Sole traders and partnerships. Business information and generic business contact details only - a main business telephone number, or a generic address such as info@ or contact@. We do not hold the name or the personal contact details of the individual behind the business.

Clients. If you’re a client, we hold your account and billing details, and records of the leads we’ve delivered to you.

3. Why we’re allowed to use it

We process business contact data under the lawful basis of legitimate interests (Article 6(1)(f) UK GDPR): connecting fleet suppliers with businesses that are actively signalling a need for their products. We have carried out and documented a Legitimate Interests Assessment. Whenever a first email reaches you - whether it comes from us, from a client, or from us on a client’s behalf - it links to this notice, names the categories of source the data came from, and offers a one-click way to opt out, as Article 14 requires.

4. Who we share it with

Prospect data is shared with our clients - fleet-sector suppliers - strictly for their own direct marketing to businesses. Each lead goes to at most one client per competitor group, and every client signs terms requiring them to honour opt-outs and maintain their own privacy notices. We never sell data to list brokers, and we never share it for any purpose other than B2B direct marketing. We use a small number of service providers - hosting, email delivery, payment processing, and data verification and enrichment - who process data on our instructions under written terms. Where a client asks us to deliver their prospect data into their own systems - for example a Slack channel, a Google Sheet or their CRM - we send it to the platform they nominate, and it is handled under that client’s own privacy notice from that point.

Where we send the outreach ourselves. On some engagements we run the email outreach rather than the client. The email may come from a domain in the client’s name that we operate for them, or from one of our own neutral domains - which one is agreed with the client at the outset. Where we send from our own domains, we are the sender, and your details are not passed to the client at all unless you reply and your enquiry qualifies as a lead. If it does, we pass your details and the message thread to that client so they can respond, and from that point they hold your data as a controller in their own right, under their own privacy notice. If you never reply, or you opt out, nothing about you reaches the client.

5. Your rights

You can ask us at any time to:

• Stop contacting you - the right to object to direct marketing is absolute. One opt-out is honoured across every client we work with, permanently. We keep the minimum record needed to make sure you’re never contacted again.
• See what we hold - request a copy of your personal data.
• Correct or delete it - fix inaccurate data or ask for erasure.
• Complain - to us first, ideally, but you can go straight to the ICO at ico.org.uk.

Our Your Data Rights page explains how to exercise each of these.

6. How long we keep it

Enriched contact details that haven’t been allocated to a client are purged after 12 months. Opt-out records are kept permanently - that’s what makes them work. Client account data is kept for the life of the contract plus the period required for tax and legal records.

7. Where it lives

All personal data is hosted on servers in the UK and EU. We don’t transfer it outside those regions.

8. Cookies

Cookies are small text files stored on your device. We keep our use minimal:

• Essential cookies - needed for the site to work (e.g. remembering a form you’ve started). These don’t need consent and can’t be switched off.
• Analytics cookies - help us understand which pages are useful. These are only set if you accept them, and the data is aggregated - we don’t use it to identify you.

You can delete or block cookies in your browser settings at any time; the site will still work, though a few conveniences won’t. We don’t use advertising or cross-site tracking cookies.

9. Changes to this policy

If we change how we handle personal data, we’ll update this page and the date at the top. Significant changes will be flagged on the site.