Book a Strategy Call

Privacy Policy

Introduction

Upshift Outreach ("we", "us") provides B2B outbound sales and lead generation services. This policy explains how we handle personal information in two distinct roles: as the operator of this website, and as the party running outbound campaigns on behalf of clients. It's written to reflect how Upshift Outreach actually operates day to day; if your own legal advisor wants to review or adapt any section for a specific jurisdiction, that's normal practice and this document is built to make that straightforward.

Who This Policy Covers

This policy applies to two different groups, and we try to be clear about which section applies to which:

  • Visitors to this website, including anyone who submits our contact or strategy-call forms.
  • Business contacts reached through outreach campaigns we run on behalf of clients. If you've received an email, LinkedIn message or call from us on a client's behalf, this policy explains what data we hold about you and how to be removed from it.

Information We Collect

From website visitors: your name, company, email address, website and the details you share through our contact and strategy-call forms, plus basic technical information such as browser type and pages visited.

On behalf of clients, for outreach campaigns: business contact information such as name, job title, company, work email, phone number and professional profile (for example, a LinkedIn URL). This is sourced from publicly available company websites and directories, professional networking platforms, commercially available business databases, or provided directly by the client from their own records. We direct outreach at people in their professional capacity and do not knowingly collect sensitive personal data.

How We Use Information

  • To respond to enquiries and schedule strategy calls
  • To plan, run and report on outbound campaigns for clients
  • To maintain suppression lists and honour opt-out requests
  • To maintain the security and performance of this website

Data Roles: Controller vs. Processor

Upshift Outreach acts as a Data Controller for information collected directly via upshiftoutreach.com, for example when you book a strategy call. When executing outreach campaigns on behalf of our clients, Upshift acts as a Data Processor, using data according to the client's instructions and target parameters rather than our own.

Legal Basis for Outreach

The lawful basis we rely on for B2B outreach depends on where the recipient is. We target corporate email addresses and professional profiles only, and only where the outreach is relevant to that person's professional role.

In the UK and parts of the EU, we rely on Legitimate Interest under GDPR Article 6(1)(f) for corporate contacts, together with the applicable national electronic-marketing rules. Some EU member states, and Canada under CASL, apply stricter conditions to unsolicited commercial email, and in those markets we rely on consent or an applicable exemption rather than legitimate interest. Where the position is unclear, we apply the stricter standard. In every case you can object at any time and we will stop.

How to Opt Out or Be Removed

Every outreach email includes a way to unsubscribe, and we honour it immediately. If you'd rather reach us directly, email supp@upshiftoutreach.com with "Remove me" and the company you were contacted about; we'll suppress your details from future outreach across every campaign and channel we run.

Data Sharing & Service Providers

We do not sell personal information. We share it only with the service providers that help us operate, such as email sending platforms, CRM tools and workflow automation software (including n8n), under confidentiality obligations that limit their use of it to delivering our services.

International Data Protection & Outreach Compliance

Because Upshift Outreach runs outbound campaigns across multiple countries, we design our outreach practices around the data protection and marketing laws of the places we're contacting people in, rather than applying a single standard everywhere. In practice, that means:

  • For contacts in the UK and EU, we apply GDPR and UK GDPR principles, including a lawful basis for processing, the right to object, and honouring opt-out and erasure requests promptly.
  • For contacts in the United States, outreach follows CAN-SPAM Act requirements, including accurate sender information and a working unsubscribe method.
  • For contacts in Canada, we treat CASL's consent and identification requirements as the standard, which means relying on express or applicable implied consent rather than legitimate interest.
  • For contacts in India, we align with the Digital Personal Data Protection Act, 2023 (DPDP Act) for the personal data we process.
  • In markets not listed here, we apply the strictest reasonably applicable standard among GDPR, local law and this policy.

Suppression lists and opt-out requests are honoured across every campaign and channel, regardless of which specific regulation technically applies.

Data Retention

Business contact data used for a client campaign is kept only as long as needed to run that campaign and for a reasonable period afterward for reporting, then deleted or anonymised, unless a longer period is required by law or agreed with the client. Website visitor data is retained for as long as reasonably necessary for the purposes described in this policy.

Cookies & Analytics

This website may use basic analytics tools to understand aggregate traffic patterns. Where required by your region, we present a cookie or consent notice and honour the choices you make.

Your Rights

Depending on where you're based, you may have rights to access the information we hold about you, correct it, request its deletion, restrict or object to its use, or ask for a copy in a portable format. You may also have the right to complain to your local data protection authority. To make a request, contact us using the details below.

Children's Privacy

Our services are directed at business contacts in a professional capacity and are not directed at children. We do not knowingly collect personal information from individuals under 16.

Changes to This Policy

We may update this policy as our services or applicable law change. The date of the most recent version will always be reflected in how we present it to you on request.

Contact

For any privacy questions, or to make a request about your data, contact Upshift Outreach: supp@upshiftoutreach.com.