GDPR compliance

Last Updated: January 27, 2026

1. Who We Are (Data Controller Information)

This website (techmarketingbuzz.com) is owned and operated by The LeadCrafters. We are the data controller responsible for your personal data collected through this website.

Data Controller Details:

Organization: The LeadCrafters
Website: https://theleadcrafters.com
Primary Contact: privacy@techmarketingbuzz.com
Data Protection Officer: dpo@theleadcrafters.com

This privacy policy explains how we collect, use, store, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR), UK GDPR, and other applicable data protection laws. We are committed to transparency and protecting your privacy rights.

2. What Personal Data We Collect

We collect specific types of personal data when you visit or interact with our website. Below is a detailed breakdown of what we collect, why we collect it, and the legal basis for processing.

2.1 Automatically Collected Data (Technical Information)

When you visit our website, we automatically collect the following technical data:

IP Address: Your Internet Protocol address (used to derive approximate geographic location at country/city level)
Device Information: Device type (desktop, mobile, tablet), operating system, screen resolution
Browser Information: Browser type and version, language preference, time zone
Website Usage Data: Pages viewed, time spent on pages, links clicked, scroll depth, navigation paths
Referral Source: The website or search term that brought you to our site
Date and Time: Timestamp of each page visit and interaction

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) – for website security, fraud prevention, technical troubleshooting, and service improvement

Retention Period: 12 months in server logs, after which data is automatically deleted

2.2 Data You Provide (Contact Forms & Newsletters)

When you voluntarily submit information through our forms, we collect:

Name: First name and last name (as provided by you)
Email Address: Your email for communication purposes
Phone Number: Optional, if you choose to provide it for direct contact
Company Name: Optional, for business inquiries
Message Content: Any information you include in the message field
Marketing Preferences: Your explicit consent to receive marketing communications (via unchecked opt-in checkbox)

Legal Basis: Consent (Article 6(1)(a) GDPR) – obtained through explicit, unambiguous action (submitting form with unchecked opt-in box). For business inquiries: legitimate interests or contract performance (Article 6(1)(b) GDPR)

Retention Period: 3 years from last contact or until you withdraw consent, whichever comes first

2.3 Cookie Data (Analytics & Performance)

If you consent to analytics cookies, we collect:

Session Data: Unique session identifiers to track your browsing session
User Behavior: Click patterns, scroll behavior, form interactions (without capturing entered data)
Performance Metrics: Page load times, error messages, browser compatibility issues
Campaign Attribution: Source of traffic (organic search, paid ads, social media, referrals)

Legal Basis: Consent (Article 6(1)(a) GDPR) – obtained through cookie consent banner with granular category selection

Retention Period: Cookies expire after 13 months, or when you clear browser data or withdraw consent

3. How and Why We Use Your Personal Data

We process your personal data only for specific, explicit, and legitimate purposes. We do not use your data for any purpose incompatible with the original purpose for which it was collected.

3.1 Website Security and Functionality

Purpose: To ensure the security, stability, and proper functioning of our website

Data Used: IP address, device information, browser data, access timestamps

Processing Activities:

Detecting and preventing fraud, hacking attempts, and DDoS attacks
Identifying and blocking malicious bots and scrapers
Investigating security incidents and potential data breaches
Troubleshooting technical errors and compatibility issues
Load balancing and performance optimization

3.2 Analytics and Service Improvement

Purpose: To understand how visitors use our website and improve user experience

Data Used: Website usage data, cookie data (with your consent), anonymous aggregate statistics

Processing Activities:

Analyzing which pages are most/least popular
Understanding user navigation paths and drop-off points
Testing and optimizing website layout, content, and features
Measuring marketing campaign effectiveness
Creating aggregated, anonymized reports (no individual identification)

3.3 Responding to Inquiries and Communications

Purpose: To respond to your questions, requests, and business inquiries

Data Used: Name, email address, phone number (if provided), message content

Processing Activities:

Answering your questions via email or phone
Providing information about our services
Following up on business opportunities
Maintaining records of our correspondence for quality assurance

3.4 Marketing Communications (With Your Consent)

Purpose: To send you marketing emails about our services, industry insights, and promotional offers

Data Used: Name, email address, marketing preferences

Processing Activities:

Sending newsletters and product updates
Sharing educational content and blog posts
Notifying you about webinars and events
Tracking email open rates and click-through rates (with your consent)

Important: We only send marketing emails to individuals who have explicitly consented by checking an unchecked opt-in box. You can withdraw consent at any time by clicking the unsubscribe link in any email or contacting privacy@techmarketingbuzz.com

4. Legal Bases for Processing Your Data

Under GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:

Processing Activity	Legal Basis (GDPR Article)	Your Rights
Website security & technical logs	Legitimate interests (Art. 6(1)(f))	Object to processing
Contact form inquiries	Consent (Art. 6(1)(a)) or Contract (Art. 6(1)(b))	Withdraw consent anytime
Marketing emails	Consent (Art. 6(1)(a))	Unsubscribe anytime
Analytics cookies	Consent (Art. 6(1)(a) + ePrivacy)	Withdraw via Cookie Settings
Legal compliance	Legal obligation (Art. 6(1)(c))	Limited – required by law

5. Cookie Policy and Consent Management

This website uses cookies and similar tracking technologies. Under GDPR and ePrivacy Directive requirements, we obtain your explicit consent before placing non-essential cookies on your device.

5.1 What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit websites. They help websites remember your actions and preferences over time, so you don’t have to re-enter information when you return or navigate between pages.

5.2 Types of Cookies We Use

Essential Cookies (No Consent Required)

These cookies are strictly necessary for the website to function and cannot be disabled:

Session Management: Maintain your browsing session as you navigate between pages
Security: Prevent cross-site request forgery (CSRF) attacks
Load Balancing: Distribute server load for optimal performance
Cookie Consent: Remember your cookie preferences (ironically, a cookie!)

Analytics Cookies (Consent Required)

These cookies help us understand how visitors interact with our website:

Google Analytics (_ga, _gid): Track page views, session duration, bounce rate, traffic sources
Anonymized IP: We enable IP anonymization to protect your privacy
Expiry: 13 months from last activity

Marketing Cookies (Consent Required)

These cookies track your activity across websites to show relevant ads:

Status: We do not currently use marketing/advertising cookies. If we do in the future, we will obtain your explicit consent first.

5.3 How We Obtain Your Consent

Our cookie consent banner:

Appears before any non-essential cookies are placed
Allows you to accept individual cookie categories (granular consent)
Allows you to reject all non-essential cookies
Lets you continue using the site even if you decline
Provides a link to this full Privacy Policy
Does NOT rely on implied consent (“by continuing to browse…”)

5.4 Managing Your Cookie Preferences

You can change your cookie preferences at any time:

Cookie Settings Link: Available in the footer of every page on our website
Browser Controls: Most browsers allow you to refuse or delete cookies through settings
Google Analytics Opt-Out: Install the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout

Note: If you disable essential cookies, some parts of the website may not function properly.

6. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under GDPR. We are committed to facilitating the exercise of these rights and will respond to requests within one month (extendable by two additional months for complex requests).

6.1 Right of Access (Article 15)

You have the right to obtain:

Confirmation of whether we process your personal data
A copy of your personal data in a commonly used electronic format
Information about how and why we process your data
Details of recipients with whom we share your data
Information about retention periods

How to Exercise: Submit a Data Subject Access Request (DSAR) via email privacy@techmarketingbuzz.com

6.2 Right to Rectification (Article 16)

You have the right to:

Correct inaccurate personal data we hold about you
Complete incomplete personal data

How to Exercise: Email privacy@techmarketingbuzz.com with details of the correction needed. We will verify your identity and make the correction within one month.

6.3 Right to Erasure / “Right to Be Forgotten” (Article 17)

You have the right to request deletion of your personal data when:

The data is no longer necessary for the purpose it was collected
You withdraw consent and there is no other legal basis for processing
You object to processing based on legitimate interests and there are no overriding legitimate grounds
The data was unlawfully processed

How to Exercise: Email privacy@techmarketingbuzz.com with “Deletion Request” in the subject line. We may need to verify your identity before processing deletion.

Exceptions: We may retain certain data if required by law or for establishing, exercising, or defending legal claims.

6.4 Right to Restriction of Processing (Article 18)

You have the right to request that we limit processing of your personal data when:

You contest the accuracy of the data (during verification)
Processing is unlawful but you prefer restriction over deletion
You need the data for legal claims even though we no longer need it

How to Exercise: Email privacy@techmarketingbuzz.com explaining why you are requesting restriction. Restricted data will be stored but not actively processed.

6.5 Right to Data Portability (Article 20)

You have the right to:

Receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON)
Transmit your data to another controller (where technically feasible)

How to Exercise: Submit a portability request via privacy@techmarketingbuzz.com. We will provide your data in CSV format within one month.

6.6 Right to Object (Article 21)

You have the right to object to:

Processing based on legitimate interests: We will stop processing unless we demonstrate compelling legitimate grounds
Direct marketing: We will stop all marketing immediately (no questions asked)

How to Exercise: Email privacy@techmarketingbuzz.com or click “Unsubscribe” in any marketing email. For legitimate interest objections, provide reasons for your objection.

6.7 Right to Withdraw Consent (Article 7)

Where processing is based on your consent, you have the right to withdraw consent at any time. This will not affect the lawfulness of processing before withdrawal.

How to Exercise:

Marketing Emails: Click “Unsubscribe” in any email or email privacy@techmarketingbuzz.com
Cookies: Use the “Cookie Settings” link in the footer to withdraw consent for analytics/marketing cookies

6.8 Right to Lodge a Complaint (Article 77)

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, workplace, or where an alleged infringement occurred.

Supervisory Authorities:

EU/EEA: Find your local data protection authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en
UK: Information Commissioner’s Office (ICO) – www.ico.org.uk
Germany: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) – www.bfdi.bund.de

We encourage you to contact us first at privacy@techmarketingbuzz.com so we can attempt to resolve your concerns directly.

7. Data Sharing and Third-Party Service Providers

We do not sell your personal data to third parties. We only share data with trusted service providers who help us operate our website and deliver our services. All third parties are bound by Data Processing Agreements (DPAs) that require GDPR compliance.

7.1 Categories of Third-Party Recipients

Service Provider	Purpose	Data Location	Safeguards
Cloud Hosting Provider	Website hosting and data storage	USA/EU	DPA + Standard Contractual Clauses
Google Analytics	Website analytics (with consent)	USA/Global	DPA + IP Anonymization + EU-US Data Privacy Framework
Email Service Provider	Marketing email delivery	USA/EU	DPA + Standard Contractual Clauses
CDN Provider	Content delivery and DDoS protection	Global	DPA + Standard Contractual Clauses
Security Monitoring	Cybersecurity and threat detection	EU/USA	DPA + Standard Contractual Clauses

7.2 International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer personal data internationally, we ensure appropriate safeguards are in place:

EU Commission Adequacy Decisions: For countries deemed to have adequate data protection (e.g., UK, Switzerland, Canada)
Standard Contractual Clauses (SCCs): EU Commission-approved contracts that require processors to protect your data according to GDPR standards
EU-US Data Privacy Framework: For US companies certified under the DPF framework (including Google)

8. Data Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage.

8.1 Technical Security Measures

HTTPS Encryption: All data transmitted between your browser and our server is encrypted using TLS 1.3 (Transport Layer Security) with a valid SSL certificate
Firewall Protection: Enterprise-grade firewalls block unauthorized access attempts
Data Encryption at Rest: Personal data stored in databases is encrypted using AES-256 encryption
Access Controls: Role-based access control (RBAC) ensures only authorized personnel can access personal data
Security Monitoring: 24/7 intrusion detection and automated threat response systems
Regular Updates: Website platform, plugins, and server software are kept up-to-date with the latest security patches

8.2 Organizational Security Measures

Staff Training: All team members receive GDPR and data protection training
Confidentiality Agreements: All employees and contractors sign confidentiality agreements
Incident Response Plan: Documented procedures for detecting, reporting, and responding to data breaches
Data Minimization: We collect only the minimum data necessary for each specific purpose
Regular Audits: Periodic security audits and penetration testing

8.3 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (as required by GDPR Article 33). If the breach poses a high risk to you, we will also notify you directly without undue delay, providing information about the nature of the breach, likely consequences, and measures taken to address it.

9. Children’s Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16 years old. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@techmarketingbuzz.com.

If we discover that we have inadvertently collected personal data from a child under 16, we will delete such information from our systems as quickly as possible.

10. Consent Management and Documentation

To comply with GDPR accountability requirements (Article 7(1)), we maintain detailed records of all consents you provide. This helps us demonstrate compliance if audited by a supervisory authority.

10.1 What We Log

For each consent you provide, we record:

Timestamp: Exact date and time (in UTC) when consent was given
Consent Type: What you consented to (e.g., marketing emails, analytics cookies)
Consent Method: How consent was obtained (e.g., newsletter checkbox, cookie banner)
IP Address: Your IP address at the time of consent (for verification purposes)
Privacy Policy Version: Which version of this policy was in effect when you consented
Withdrawal Record: If and when you withdrew consent

10.2 Accessing Your Consent Records

You can request a copy of your consent records at any time by submitting a Data Subject Access Request (DSAR) to privacy@techmarketingbuzz.com. We will provide this information within one month as part of your right of access under GDPR Article 15.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will:

Update the “Last Updated” date at the top of this policy
Increment the version number for tracking purposes
For material changes that significantly affect your rights, we will provide prominent notice on our website or send you an email notification (if we have your email address)

We encourage you to review this Privacy Policy periodically. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.

12. Contact Information and Exercising Your Rights

We are committed to helping you exercise your GDPR rights and answering any questions about this Privacy Policy or our data practices.

12.1 Privacy Contact Details

Data Controller: The LeadCrafters

Website: https://theleadcrafters.com

Primary Email: privacy@techmarketingbuzz.com

Data Protection Officer: dpo@theleadcrafters.com

12.2 How to Submit a Data Subject Access Request (DSAR)

To exercise any of your GDPR rights (access, rectification, erasure, restriction, portability, objection), please:

Email Us: Send an email to privacy@techmarketingbuzz.com with “DSAR” or your specific request type in the subject line (e.g., “Data Access Request” or “Deletion Request”)

12.3 Identity Verification

To protect your privacy and security, we may need to verify your identity before processing requests. We will ask for information that helps us confirm you are the person about whom we hold data. This is a security measure required by GDPR Article 12(6).

12.4 Response Timeframe

We will respond to all requests within one month of receiving your request, as required by GDPR Article 12(3). For complex requests or a high volume of requests, we may extend this period by two additional months. If we need to extend the timeframe, we will inform you within the first month and explain the reason for the extension.