Data protection & privacy

Privacy Policy

Transparent disclosures detailing our B2B data processing standards, GDPR Article 6 lawful basis, CCPA/CPRA rights, and automated opt-out suppression mechanisms.

Effective · Last updated

This Privacy Policy explains how VentexR processes business-to-business contact data: Legitimate Interests as the GDPR lawful basis, categories of professional data, sub-processors, retention, your rights to object, access, erase and rectify, and a one-click opt-out via privacy@ventexr.com.

1. B2B Scope & Enterprise Commitment

VentexR provides sales pipeline intelligence and outbound development services strictly in a business-to-business (B2B) context. We assist enterprise technology organizations in identifying and engaging prospective commercial buyers who have an objective professional interest in their software and services.

Explicit Exclusion: VentexR does not target individual consumers, sell to children, or collect consumer credit, biometric, or health data.

2. Categories of Professional Information We Process

In the course of delivering sales development intelligence, we process limited professional and corporate contact information:

  • Professional Identity: Full name, business title, corporate department, and seniority level.
  • Corporate Contact Details: Corporate email address, corporate telephone number, direct business mobile (where publicly or commercially available), and company headquarters address.
  • Employer Organization Data: Company name, website URL, industry sector, estimated employee headcount, revenue tier, and reported technology stack.
  • Public Professional Profiles: Public LinkedIn profile URLs and corporate biographies.

3. Lawful Basis for Processing (GDPR & UK GDPR)

Under European Regulation (EU) 2016/679 (GDPR) and the UK Data Protection Act 2018, VentexR processes business contact data relying on the legal basis of Legitimate Interests (Article 6(1)(f)):

  • Purpose Test: The processing is conducted to facilitate legitimate commercial introductions between technology vendors and enterprise organizations that benefit from their solutions.
  • Necessity Test: Processing is strictly limited to verified professional contact data necessary to initiate personalized peer-to-peer business conversations.
  • Balancing Test: Outreach is strictly confined to individuals in their business capacities regarding problems relevant to their professional mandates. The processing does not prejudice the fundamental rights and freedoms of the data subject.

4. How We Use Professional Data

We process professional information exclusively to:

  • Evaluate alignment between prospect organizations and our clients' ICP criteria.
  • Transmit relevant, personalized commercial inquiries via secondary domain email inboxes, direct phone outreach, and professional social networks.
  • Maintain permanent suppression lists to ensure individuals who opt out are never contacted again.
  • Measure campaign deliverability, open rates, and aggregate statistical trends.

5. Sub-processors & Third-Party Service Providers

VentexR uses third-party infrastructure and software providers to run outreach, under data processing terms where they apply. Depending on the engagement, these can include:

  • Email & Infrastructure Providers: Google Workspace, Microsoft 365, Amazon Web Services (AWS).
  • CRM & Pipeline Platforms: HubSpot, Salesforce.
  • Data Verification & Enrichment APIs: ZoomInfo, Apollo, Hunter, NeverBounce.

We never sell, rent, or trade personal data to third parties for independent marketing purposes.

6. Data Retention & Automated Suppression Lists

We retain active prospect data only as long as necessary to execute the approved client campaign, and no longer.

When an individual requests to opt out, their email address and domain are immediately hashed and stored in our permanent Global Suppression Registry. This suppression record is maintained indefinitely for the sole purpose of ensuring that no future communication is ever transmitted to that individual.

7. Your Privacy Rights (GDPR, CCPA/CPRA & Global Regulations)

Regardless of your geographic location, VentexR respects your privacy rights:

  • Right to Object: You have an absolute right to object to direct marketing at any time.
  • Right of Access: You may request a copy of the specific pieces of professional data we hold regarding you.
  • Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data from all active databases.
  • Right to Rectification: You may request correction of inaccurate or outdated contact information.
  • Non-Discrimination: Exercising your privacy rights will never result in discriminatory treatment.

8. International Data Transfers & Technical Security

Where data is transferred outside the European Economic Area (EEA) or the United Kingdom, transfers are protected by European Commission Standard Contractual Clauses (SCCs).

All records in transit are encrypted via TLS 1.3, and data at rest is secured via AES-256 encryption in restricted-access database clusters.

9. Data Protection Officer & Privacy Inquiries

If you have questions regarding this Privacy Policy, wish to submit a Data Subject Access Request (DSAR), or want to be added to our global suppression registry, please contact our Data Protection Officer:

  • Email: privacy@ventexr.com
  • General Inquiries: hello@ventexr.com
  • Response SLA: We acknowledge privacy requests promptly and respond within the timeframe the law requires (under GDPR, generally within one month).
FAQ

Quick answers

Click the one-click opt-out link in any message footer or email privacy@ventexr.com with the subject "Opt-Out". We add your address and domain to our do-not-contact list promptly and apply it across all active client campaigns.

Legitimate Interests (Article 6(1)(f)). Processing is limited to verified professional contact data, and outreach is confined to individuals in their business capacities on problems relevant to their professional role.

Limited professional and corporate information: name, business title, corporate email and phone, employer details such as company name, size and technology stack, and public professional profile URLs.

No. We never sell, rent, or trade personal data to third parties for independent marketing purposes.

Active prospect data is kept only as long as needed to run the approved client campaign. Opt-out records are hashed and kept indefinitely in a suppression registry solely so that no future message is sent to that person.

Need to exercise a privacy right?

Email privacy@ventexr.com. We acknowledge requests promptly and respond within the time the law requires.

Book a 20 minute call →
Privacy Policy | VentexR