Privacy Policy

Last updated: October 2026. Effective date: October 2026.

This Privacy Policy explains how No Loss Leads collects, uses, stores, and protects your personal data. It applies to all visitors and contacts of nolossleads.agency. We comply with the EU General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

The data controller responsible for your personal data is:

• Business name: No Loss Leads
• Website: nolossleads.agency
• Country of establishment: Spain
• Contact email: privacy@nolossleads.agency

As data controller, No Loss Leads decides why and how your personal data is processed and is responsible for making sure that processing is lawful.

2. Data we collect

Depending on how you use our website, we may collect the following kinds of personal data.

Contact and identity data

• First name and last name
• Work email address
• Phone number
• Company name and job title, where you provide them

Enquiry data

• The date and time of any strategy call you book
• Notes from strategy calls and later conversations

Technical and usage data

• IP address
• Browser type and version
• Device type and operating system
• Pages visited, time on page, and referring URL
• Cookie identifiers and pixel event data
• Where available, the company associated with your IP address or browser (see Section 6)

3. How we collect data

Strategy call form. When you submit the form on our website, we collect your first name, work email, and phone number. This data is sent to and stored in HubSpot CRM.

Booking a call. When you choose a time through our HubSpot Meetings embed, HubSpot collects your name, email address, and the date and time of your booking directly on its platform.

Tracking technologies. We use tracking pixels, visitor identification scripts, and cookies on our website to understand visitor behaviour, measure our marketing, and serve relevant advertising. See Section 6 for full details.

Direct communications. If you contact us by email, phone, or LinkedIn, we keep records of that correspondence.

4. Purpose and legal basis for processing

We process your personal data only where we have a lawful basis under Article 6 of the GDPR.

• To respond to your strategy call request. Legal basis: steps taken at your request before entering a contract (Article 6(1)(b) GDPR). We use your contact details to prepare for and hold the call and to follow up afterwards.
• To send you marketing communications by email, phone, or SMS. Legal basis: your consent (Article 6(1)(a) GDPR), given when you submit the form. You may withdraw consent at any time. See Section 7.
• To measure and improve our marketing. Legal basis: our legitimate interests (Article 6(1)(f) GDPR) in understanding how visitors use our website and which marketing activities generate qualified enquiries. This includes tracking pixels, visitor identification, and analytics tools.
• To comply with legal obligations. Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR), such as keeping records for tax or regulatory purposes.

5. HubSpot CRM

We use HubSpot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA) as our customer relationship management platform. When you submit the strategy call form or book a call, your personal data is transferred to and stored in HubSpot on servers in the European Union.

HubSpot processes data on our behalf as a data processor under a Data Processing Agreement consistent with GDPR requirements. HubSpot is certified under the EU-U.S. Data Privacy Framework and relies on Standard Contractual Clauses for any transfers outside the European Economic Area.

Data stored in HubSpot may include your name, email address, phone number, company, lead status, source attribution, and notes from our communications. We use HubSpot to manage contact records, track enquiry status, and run follow-up workflows.

We also use HubSpot's website tracking code, which places cookies to link your website activity to your contact record once you have submitted a form. For more information, see HubSpot's Privacy Policy.

6. Tracking technologies and pixels

Our website uses cookies and third-party scripts to measure visitor behaviour and advertising performance.

Meta Pixel

We use the Meta Pixel, provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). The pixel records events such as page views, form submissions, and call bookings and sends this data to Meta to help us measure our advertising and build audiences for our campaigns. The data sent may include your IP address, browser information, and page interaction data. Meta may use this data in line with its own data policy. See Meta's Privacy Policy.

Visitor identification (Leadsy)

We use a visitor identification script provided by Leadsy. It uses cookies and your IP address to try to identify the company, and in some cases the individual, visiting our website, so that we can understand which businesses are interested in our services and follow up where appropriate. This may involve matching your browser data against third-party databases. The legal basis is our legitimate interest in understanding and following up on business interest in our services (Article 6(1)(f) GDPR). You can object to this processing at any time by emailing privacy@nolossleads.agency, and you can limit it by blocking third-party cookies in your browser.

Cookies

We use both first-party and third-party cookies. Essential cookies are needed for the website to work and are placed without consent. Analytics and advertising cookies are placed only with your consent where applicable law requires it. You can manage your cookie preferences at any time through your browser settings.

The legal basis for placing non-essential tracking technologies is your consent (Article 6(1)(a) GDPR), or our legitimate interests in measuring and improving our marketing where consent is not required.

7. Email, phone, and SMS communications

By submitting the strategy call form, you agree that No Loss Leads may contact you by email, phone, and SMS about your enquiry and with follow-up marketing about our services.

What we may send

• A response to your enquiry and anything needed to arrange your call
• Information about our services, methods, and client results
• Invitations to book or rebook a call
• Relevant content about lead generation and pipeline performance

Frequency. We do not send unsolicited bulk messages. Follow-up is purposeful and relevant to your enquiry.

Withdrawing consent. You can opt out of email at any time by clicking the unsubscribe link in any email we send, or by emailing privacy@nolossleads.agency. To opt out of SMS, reply STOP to any message we send. To opt out of phone calls, tell us on the call or by email. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

We do not sell or share your phone number with third parties for their own marketing.

8. Data retention

We keep personal data only for as long as needed for the purposes it was collected for, or as required by law.

• Strategy call enquiries: up to 3 years from the date of last contact, or until you ask us to delete it.
• Active client records: the length of the engagement plus 5 years, to meet commercial and tax record-keeping obligations under Spanish law.
• Marketing consent records: for as long as you remain an active contact, or until you withdraw consent.
• Website analytics and pixel data: in line with the retention periods set by the relevant third-party platform.

When data is no longer needed, it is securely deleted or anonymised.

9. Data sharing and third parties

We do not sell your personal data. We share it only in these cases:

• Service providers acting as data processors, including HubSpot (CRM and meeting scheduling), Meta (advertising pixel), Leadsy (visitor identification), and the hosting and infrastructure providers used to run the website. These parties process data only on our instructions and under appropriate data processing agreements.
• Legal obligations, where we must disclose data to comply with a legal obligation, court order, or lawful request from a public authority.
• Business transfers. If No Loss Leads is merged, acquired, or sells its assets, personal data may pass to the new entity, subject to the same protections set out in this policy.

10. International data transfers

Some of our service providers are based outside the European Economic Area, including HubSpot, Meta, and Leadsy, which have operations in the United States. Where data is transferred outside the EEA, we make sure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• The EU-U.S. Data Privacy Framework, where the provider is certified

You may request a copy of the relevant safeguards by emailing privacy@nolossleads.agency.

11. Your rights

Under the GDPR and LOPDGDD, you have these rights over your personal data:

• Access: get a copy of the personal data we hold about you.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: ask us to delete your data, subject to any legal duty to keep it.
• Restriction: ask us to limit how we use your data in certain cases.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests, including direct marketing and visitor identification.
• Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email privacy@nolossleads.agency. We will respond within 30 days. You also have the right to complain to Spain's data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

12. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encrypted transmission (HTTPS), access controls, and reputable third-party providers with their own security certifications.

No method of transmission over the internet is 100% secure. If a data breach is likely to put your rights and freedoms at risk, we will notify the AEPD within 72 hours as required by Article 33 GDPR, and you directly where Article 34 GDPR requires it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or the services we use. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of our website after changes are posted means you accept the updated policy.

14. Contact us

For any questions, requests, or complaints about this Privacy Policy or how we process your personal data:

• Email: privacy@nolossleads.agency
• Website: nolossleads.agency

We aim to respond to all legitimate requests within 30 calendar days. In complex cases this may be extended by up to two further months, in which case we will tell you.