Privacy policy

Last updated: 4 November 2026.

Who we are

The data controller is Enriching Media Ltd trading as Enriching Leads, registered in England and Wales, company number 08240047, registered office 5 Elstree Gate, Elstree Way, Borehamwood, Hertfordshire WD6 1JD. We follow the UK GDPR, the Data Protection Act 2018 and PECR.

To ask anything about your data, use our contact form.

Part A. Website visitors and people who use our contact form

What we collect

When you send the contact form we collect your name, company, email address, website, what you tell us about your business, and the page you sent it from.

Why, and on what basis

We use it to reply to you and discuss whether we can work together. Our lawful basis is legitimate interests, and steps taken at your request before entering into a contract.

How long we keep it

If we do not go on to work together, we delete enquiries after 24 months. If you become a client, we keep records for as long as the law requires for business and tax purposes.

Website analytics

We use the visitor analytics built into our website hosting platform (Lovable) to see aggregated figures such as page views, visitor numbers, referring sites, device type and country, so we can understand which pages are useful. It is privacy-friendly and aggregated. It is not used for advertising or to track people across other websites, and we do not use it to identify individual visitors. Our lawful basis is legitimate interests.

Cookies

We do not use advertising or marketing cookies, and we do not set any tracking cookies of our own.

Part B. Business contacts we research for clients

Our service involves researching companies and the people who work at them, so that our clients can contact relevant businesses. If you are a business contact, this section is for you.

What we hold

Work details only: your name, job title, employer, business email address, business phone number where published, and publicly available facts about your company. We do not collect personal, home or sensitive details.

Where it comes from

Public business sources such as company websites, Companies House, press releases, job adverts and professional profiles, and reputable commercial data providers. We record the source of each detail.

Why, and on what basis

Our lawful basis is legitimate interests: ours in providing a research service, and our clients' in finding relevant business customers. We keep the data limited to your professional role and we respect do-not-contact lists.

Who we share it with

The client who commissioned the research, through a private dashboard. Clients are responsible for how they then contact you, and must comply with UK GDPR and PECR.

Your rights

• Right to object. You can object at any time. We will stop using your details and add you to a suppression list so you are not researched again.
• Right to be removed. You can ask us to delete your details.
• You can also ask for a copy of what we hold, or for it to be corrected.

Use our contact form and tell us what you would like. We reply within one month.

How long we keep it

Research records are kept for up to 24 months, then deleted unless still in active use by a client. Suppression records are kept so we can keep honouring your objection.

Security and processors

Data is stored with reputable hosting providers under appropriate safeguards. Where data is processed outside the UK, we rely on approved transfer mechanisms.

Complaints

If you are unhappy, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.