Effective Date: 29 Aug 2025
Last Updated: 29 Aug 2025
This Privacy Policy (“Policy”) explains how Gallivant Ventures LLP, operating under the brand name Qualified Deals – B2B Lead Generation Kochi (“Company,” “we,” “our,” or “us”), collects, uses, discloses, and protects personal data in connection with our lead generation, marketing campaigns, and market research services across industries and geographies.
By engaging with our Services, you acknowledge and consent to the practices outlined in this Policy.
1. Scope
This Policy applies to all personal data processed by Gallivant Ventures LLP, including but not limited to:
- Leads generated for clients
- Marketing campaign data
- Contact databases, B2B communications, and sales prospecting data
- Information collected via our website, digital platforms, and third-party integrations
This Policy complies with Indian IT Act, 2000, IT Rules, 2011, and aligns with GDPR (EU/UK), CCPA (California, USA), and UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).
2. Information We Collect
We may collect the following categories of data:
- Personal Data: Name, job title, company, email address, phone number, postal address.
- Business Data: Industry, company size, campaign preferences, purchase intent.
- Financial Data: Billing details, payment transaction data (via secure third-party processors).
- Technical Data: IP address, browser type, device identifiers, cookies, analytics data.
- Lead Data for Clients: Verified business contacts, demographic information, consent-based marketing lists.
- Sensitive Data: We do not intentionally collect sensitive personal data (racial/ethnic origin, religion, health, etc.) unless legally required.
3. Lawful Basis for Processing
We process data under the following lawful grounds:
- Consent: Where users or leads explicitly consent to share information.
- Contractual Necessity: To fulfill obligations in lead generation and marketing agreements with clients.
- Legitimate Interests: For B2B sales prospecting, research, analytics, and improving services.
- Legal Obligations: To comply with Indian, EU, US, UAE, and other applicable laws.
4. Purpose of Processing
We use personal and business data for the following purposes:
- Delivering Sales-Qualified Leads and campaign outcomes to clients.
- Conducting marketing and research activities across industries.
- Managing business relationships, invoicing, and reporting.
- Improving campaign efficiency through analytics and AI-driven insights.
- Preventing fraud, misuse, or unauthorized access to our platforms.
- Ensuring compliance with national and international data protection laws.
5. Sharing and Transfers
We may disclose personal data only under lawful conditions:
- Service Providers & Vendors: CRM platforms, marketing automation tools, data verification partners.
- Clients: Verified leads shared with clients as per contractual agreements.
- Legal Authorities: When required to comply with law, court orders, or regulatory enforcement.
- Cross-Border Transfers: Data may be transferred outside India (including EU, US, and UAE) in compliance with GDPR Chapter V and other applicable transfer mechanisms (e.g., Standard Contractual Clauses, UAE PDPL requirements).
6. Data Retention
We retain data only as long as necessary:
- Client lead data: 12–24 months (or as agreed by contract).
- Marketing records: 3 years unless withdrawn or objected.
- Financial records: 7 years for accounting/legal compliance.
7. Data Subject Rights
Depending on jurisdiction, you may exercise the following rights:
- India: Right to access, correction, and grievance redressal.
- EU/UK GDPR: Right to access, rectification, erasure (“Right to be Forgotten”), restriction, portability, and objection.
- CCPA (California, USA): Right to know, right to delete, right to opt out of sale/sharing, non-discrimination.
- UAE PDPL: Right to access, rectification, erasure, restriction, and portability.
To exercise rights, contact [email protected].
8. Data Security
We adopt ISO 27001-aligned security measures, including:
- Encryption (AES-256) of stored data.
- TLS/SSL protocols for transmission security.
- Access controls and employee confidentiality agreements.
- Regular audits and vulnerability assessments.
9. Cookies & Tracking
Our website and campaigns may use cookies, pixels, and tracking technologies for:
- Campaign attribution and analytics
- User experience optimization
- Targeted advertising (only with consent where legally required)
Users can manage preferences via cookie banners or browser settings.
10. Children’s Data
We do not knowingly collect data from children under 18 years of age. If such data is inadvertently collected, it will be erased promptly.
11. International Compliance
This Policy is designed to comply with:
- India: IT Act, 2000 & SPDI Rules, 2011
- EU/UK: General Data Protection Regulation (GDPR)
- USA: California Consumer Privacy Act (CCPA) and applicable state laws
- UAE: Federal Decree-Law No. 45 of 2021 (PDPL)
- Other Regions: Local privacy laws where our clients operate
12. Updates to Policy
We may update this Policy periodically. Material changes will be communicated via email or website notices. Continued use of Services after updates constitutes acceptance.