Privacy Policy
Last updated: February 13, 2026
How we collect, use, and protect your data.
1. Who we are
GlobalLeadSuite is operated by Nocturna Network Ltd, a company registered in the United Kingdom (Company Number 16846806, VAT 506869363). Our registered office is in the UK. You can contact us at cs@globalleadsuite.io or +44 02045424535.
For the purposes of GDPR, Nocturna Network Ltd is the data controller for personal data processed through the GlobalLeadSuite platform.
2. What data we collect
- Account data — email, name, password hash, and Google OAuth profile (if used)
- Usage data — logins, feature usage, credit consumption, campaign activity
- Lead data you provide — contacts you import or discover through our pipeline
- Payment data — processed exclusively by Stripe; we do not store full card numbers
- Technical data — IP address, browser type, device info, cookies
- Communications — emails and support tickets you send us
3. How we use your data
- Provide and improve the platform
- Authenticate you and secure your account
- Process payments and credit transactions
- Send transactional emails (receipts, alerts, password reset)
- Send marketing emails only with your consent (you can unsubscribe anytime)
- Analytics to improve the product
- Comply with legal obligations
4. Legal basis (GDPR Art. 6)
| Purpose | Legal basis | |------------------------|------------------------------------| | Account creation | Contract | | Payment processing | Contract + legal obligation | | Platform usage | Contract | | Marketing emails | Consent (opt-in) | | Analytics | Legitimate interest | | Security logs | Legitimate interest | | Legal compliance | Legal obligation |
5. Who we share data with
- Payment — Stripe (payment processor)
- Email — Resend (transactional email)
- Hosting — cloud provider (AWS / GCP, EU and US regions)
- Third-party enrichment APIs (only data you choose to enrich) — PDL, Clearbit, Proxycurl, NeverBounce, ZeroBounce
- Outreach platforms — Instantly (only when you connect)
- Analytics — internal only, no third-party trackers on user data
- Advertising pixels — Facebook, TikTok, LinkedIn only if you enable retargeting on your campaigns
We never sell your data.
6. Data retention
- Account data — until you delete your account, then 30 days for legal reasons
- Lead data — deleted immediately when you delete the lead or close your account
- Payment logs — 7 years (UK tax law)
- Access logs — 90 days
- Email logs — 2 years
7. Your rights (GDPR)
You have the right to:
- Access your data
- Correct inaccurate data
- Delete your data (right to be forgotten)
- Export your data (portability)
- Restrict processing
- Object to processing
- Withdraw consent
To exercise any right, email cs@globalleadsuite.io with the subject line "GDPR request". We respond within 30 days.
8. International transfers
Data may be processed in the EU, UK, or US. We use Standard Contractual Clauses (SCCs) approved by the European Commission for US transfers.
9. Cookies
See our Cookie Policy for details.
10. Security
We use industry-standard security measures: encryption at rest and in transit, regular backups, access controls, and continuous security monitoring. See /compliance for details.
11. Children
Our service is not intended for users under 16. We do not knowingly collect data from children under 16.
12. Changes to this policy
We notify you of material changes via email and update the "Last updated" date at the top of this page.
13. Contact
- Privacy questions: cs@globalleadsuite.io
- Postal: Nocturna Network Ltd — Registered in the United Kingdom. Full address available via cs@globalleadsuite.io
- Phone: +44 02045424535
- UK Supervisory authority: Information Commissioner's Office (ICO)