Leads Inbox
Privacy policy
Last updated: 1 October 2026
Who we are
This policy explains how Leads Inbox collects and uses personal data. Leads Inbox is operated by John Besco, and is the controller of the personal data described here, except where we say otherwise below.
Leads Inbox is operated by John Besco, based in the United Kingdom. You can reach us at hello@leadsinbox.io.
You can contact us about anything in this policy at hello@leadsinbox.io.
Who this policy covers
- People who visit leadsinbox.io.
- People who book a call with us through the calendar on this site.
- People at businesses we contact by cold email to offer our own services.
- People who email us or speak to us on a call.
When we run cold email for a client, we send it on that client's behalf and follow their instructions. For that data the client is usually the controller, and their privacy notice applies. If you were contacted in one of those campaigns and want to opt out or have your details removed, you can still write to us and we will act on it or pass it to the client straight away.
What we collect
When you book a call
Your name, email address, the time you choose, your time zone, and any answers or notes you give in the booking form (for example your company, your website or your current revenue). Our scheduling provider also processes technical data it needs to show the calendar and send the invitation.
When you visit the site
Our hosting provider keeps basic server logs: your IP address, browser and device type, the pages requested and the date and time. We use them only to keep the site running and secure. We do not use advertising or analytics cookies on this site. The embedded calendar may use cookies or similar storage that it needs to work; these are set by our scheduling provider.
When we contact your business by cold email
Business contact details: your name, job title, company, work email address and company website, along with information about the company that is publicly available, such as what it does and where it operates. We get these from public sources, such as company websites and professional profiles, and from business data providers. We also keep a record of the emails we send you and any reply.
When you email us or take a call
Your messages to us, and any notes we make about the call so we can follow up properly.
Why we use it, and our lawful basis
- To arrange and hold the call you booked, and to follow up afterwards. Lawful basis: taking steps at your request before a possible contract, and our legitimate interest in running our business.
- To answer your emails and questions. Lawful basis: legitimate interests.
- To keep the site working and secure. Lawful basis: legitimate interests.
- To offer our services to businesses by cold email. Lawful basis: legitimate interests. Our interest is finding agencies and other businesses that may want our service. We only contact people in a business role, we keep each email relevant to that business, and every email tells you how to opt out. You have an absolute right to object to this, explained below.
- To meet legal obligations, such as keeping business records. Lawful basis: legal obligation.
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for a copy of that assessment.
Opting out of our emails
If you no longer want to hear from us, reply to any of our emails with “stop” or “unsubscribe”, or email hello@leadsinbox.io. We will stop straight away. We keep your email address on a short suppression list so that we never contact you again; that is the only thing we keep for this purpose.
Who we share it with
We never sell personal data. We share it only with service providers who handle it for us, under contract:
- our scheduling provider, which runs the booking calendar;
- our hosting provider, which serves this website;
- our email sending provider, which sends and receives our emails;
- the business data providers we use to find and verify business contact details.
We may also share data with professional advisers, such as an accountant or lawyer, or with authorities when the law requires it.
International transfers
Some of our providers may process data outside the UK. When they do, we make sure the transfer is protected, for example by UK adequacy regulations or the UK's approved data transfer agreement or addendum.
How long we keep it
- Booking details and call notes: up to 24 months after our last contact, unless you become a client.
- Cold email records: up to 12 months after our last email to you.
- Suppression list: for as long as we send cold email, so that we never contact you again.
- Server logs: for the short period set by our hosting provider.
- Client records: as long as the law requires us to keep business records.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong or incomplete;
- delete your data (the right to erasure);
- restrict how we use it, or object to how we use it;
- stop using it for direct marketing, which we will always do;
- send it to you or another organisation in a portable format, where that applies.
To use any of these rights, including asking us to delete your data, email hello@leadsinbox.io. It is free, and we will reply within one month. We may ask you to confirm who you are first.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Keeping it safe
We limit access to the people who need it and choose providers with strong security. No system is perfectly secure, but we take reasonable steps to protect your data.
Children
This site and our service are for businesses. They are not meant for anyone under 18.
Changes to this policy
If we change this policy, we will update it here and change the date at the top. If a change matters, we will tell people we are in touch with.