Legal

Privacy Policy

Last updated: 24 October 2026

This policy explains how CryptoLeads (“we”, “us”) uses personal data when you visit cryptoleads.io or send us a request. We operate from the United Kingdom and act as the data controller under the UK GDPR and the Data Protection Act 2018.

1. Contact

Email [email protected] for any privacy question or request.

2. What we collect

• Request form: your email address, country or region, quantity, the product or campaign you are promoting, preferred email domains, any audience details you write, and your confirmation of lawful use. Please do not include sensitive personal data in free-text fields.
• Technical data: your IP address and basic request details, used for security, rate limiting and abuse prevention.
• Cookies: we do not set our own cookies and do not use advertising or analytics trackers. Cloudflare may use strictly necessary technical identifiers to protect the site and the form from bots.

3. Why we use it and our legal basis

• To reply to your request and take steps before entering a contract (Article 6(1)(b)).
• To run the site securely, prevent spam and abuse, and keep records of requests and compliance reviews, which are our legitimate interests (Article 6(1)(f)).
• To meet legal obligations when required (Article 6(1)(c)).

We do not sell or rent the details you submit through the request form.

4. Who we share it with

• Cloudflare: DNS, content delivery, security filtering and the Turnstile bot check.
• Resend: delivers your form submission to our inbox as an email.
• FlokiNET: our web hosting provider, using European data centres.
• Our email provider: hosts the mailbox that receives your request.
• Google Fonts: our pages load a typeface from Google, which means your IP address is sent to Google when a page loads.

We may also disclose data where the law requires it, for example to a regulator or court.

5. International transfers

Some providers, such as Resend and Cloudflare, may process data outside the UK, including in the United States. Where this happens we rely on UK-approved safeguards, such as adequacy regulations (including the UK–US data bridge for certified providers) or the ICO’s International Data Transfer Agreement or Addendum.

6. How long we keep it

We keep request emails for up to 24 months after our last contact with you, unless a continuing business relationship or a legal requirement means we need them longer. Security logs are kept by Cloudflare and our host for their own standard periods.

7. Your rights

You can ask us for access to your data, correction, deletion, restriction, a portable copy, or object to our use of it. Email us and we will respond within one month. You can also complain to the UK Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

8. If your details appear in data we supply

This policy mainly covers visitors and people who contact us. If you believe your email address is included in data we have supplied and you want it removed, or you object to its use, email [email protected] from that address and we will act on it promptly.

9. Children

This site is for businesses and adults. It is not intended for anyone under 18.

10. Changes

We will update this page when our practices change and revise the date at the top.