Data sourcing and compliance

1. Where the data comes from

Shops are discovered from publicly available domain registration data and public web crawls. Each storefront is then visited directly and we read what it publishes: platform, catalogue size, languages, currency, shipping terms, detectable technology and published contact routes.

Performance measurements come from Google PageSpeed Insights and the Chrome UX Report, both public Google services.

We do not purchase data from list brokers, and we do not obtain data from breaches, leaks or scraped social profiles.

2. How collection works

Our crawler requests pages the same way a browser does and reads only what the server returns publicly. We do not attempt to bypass authentication, paywalls or access controls, and we do not log in to any shop.

We respect robots directives and rate-limit requests so that crawling does not degrade a store's performance for its own customers.

A shop that blocks automated access is simply not indexed. We do not work around blocks.

3. Business contact data and lawful basis

The contact details in the service are business contact routes published by businesses for the purpose of being contacted: a support address on a contact page, for example.

Where such data constitutes personal data under GDPR, we process it on the basis of legitimate interest: connecting businesses with relevant suppliers. We have assessed that interest against the rights of the individuals concerned, and the balance is supported by the data being business-context, already published for contact purposes, and limited to what the business chose to publish.

We do not collect special category data, and we do not build profiles of individuals.

4. Your responsibilities as a user

When you export or enrich a contact, you become a data controller for your own processing of it. That means you are responsible for having a lawful basis for your outreach, for identifying yourself honestly, for including a working opt-out in every message, and for honouring opt-outs immediately.

Marketing law varies by country and some jurisdictions require prior consent even for business-to-business contact. Check the rules where your recipients are, not where you are.

Using this data for spam, harassment or unlawful communications breaches our terms and will end your account.

5. Removal requests

If you are a business owner and want your store's record removed, email hi@myleadfox.com from an address at that domain, or provide another reasonable proof of association. We will suppress the record and it will not be re-added by future crawls.

We aim to action removal requests within 14 days.

We cannot recall data already exported by a customer before your request. Where we hold the details of who exported a record, we will notify them of the removal request.

6. Accuracy and the limits of a crawl

Data reflects what a shop published when it was last checked, and every record carries that timestamp so you can judge freshness rather than trust a blanket claim.

Fields we have not measured are stored as undefined and are never presented as zero. This distinction is preserved throughout the product because collapsing it produces silently wrong analysis.

If you find an inaccurate record, tell us and we will re-check it.

7. Questions

Data protection questions can be sent to hi@myleadfox.com. This page is a plain-language explanation, not legal advice; if compliance is critical to your use, take your own advice.