LEGAL
Privacy Policy
Last updated: September 7, 2026
This policy explains how IntentReach processes personal data when you visit our website, contact us, request an assessment or proposal, communicate with us in a business context, or receive our services.
1. Data we may process
Depending on your interaction with us, this may include your name, role and company, email, phone number, correspondence, information about the business/product/service for which you request advertising services, contractual/invoicing data, information necessary to work with advertising accounts, and technical information needed for site security and operation.
We do not request advertising-account passwords. Access should be granted through the official roles and invitation mechanisms of the relevant platform.
2. Purposes and legal bases
| Purpose | Typical data | Legal basis |
|---|---|---|
| Responding to enquiries and preparing an assessment/proposal | Contact and enquiry data | Pre-contract steps requested by you; for B2B communication, legitimate interests may also apply |
| Entering into and performing a contract | Contact, company, contractual and operational data | Contract and pre-contract steps |
| Billing, accounting and legal obligations | Company, payment and documentary data | Legal obligation |
| Security and protection of legal interests | Technical records, correspondence, contract history | Legitimate interests |
| Optional analytics/marketing technologies | Only if introduced | Consent where required |
3. Business prospecting
IntentReach may conduct limited B2B research using publicly available business information and professional contact details to identify organisations for which our services may be relevant. We use such data only for a specific business purpose, keep the scope proportionate, and honour requests not to receive further contact.
4. Recipients and providers
Data may be accessed by providers that need it to support our operations, such as hosting/infrastructure, email, accounting, legal and technical providers. When managing an advertising campaign, relevant data may also be processed within the relevant advertising platform under its own terms and privacy policy. We do not sell personal data.
5. International transfers
Some technology providers may process data outside the EEA. Where applicable, we rely on a GDPR-permitted transfer mechanism such as an adequacy decision or appropriate contractual safeguards, depending on the provider and service.
6. Retention
We keep personal data only as long as necessary. Enquiries and business correspondence are generally retained for up to 3 years after the last substantive interaction, unless a contract, legal obligation or legal-claims need requires longer retention. Contract, accounting and tax records are retained for statutory periods. Requests not to receive B2B/marketing contact are honoured without undue delay; a minimal suppression record may be retained to prevent re-contact.
7. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction, object to processing, and exercise data portability where applicable. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. Contact us at contact@intentreach.ai. We may request reasonable information to verify your identity.
8. Cookies/local storage
The site uses Google Analytics 4 and browser local storage to remember your consent choice. Google Analytics only activates once consent is given (Google Consent Mode v2). See our Cookie Policy.
9. External sites
Our site links to third-party services, including social networks. Once you open an external service, its own privacy policy governs its processing. We recommend reviewing the privacy policies of the relevant platforms (e.g. Instagram, Facebook), since IntentReach is not responsible for the practices of third parties beyond its own site.
10. Security
We use reasonable organisational and technical measures to protect information from unauthorised access, loss, alteration or disclosure. No internet system can guarantee absolute security. Access to systems containing personal data is limited to those who need it to perform a specific task. If an incident affecting personal data occurs, we act in accordance with our GDPR notification obligations where applicable.
11. Controller
The controller is INFINITY D95 EOOD (Bulgarian company name: ИНФИНИТИ Д95 ЕООД), UIC 206255636, registered office and address: Osina 2953, Bulgaria, operating under the brand IntentReach. Privacy contact: contact@intentreach.ai.
12. Complaints
You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or another competent EU/EEA supervisory authority where applicable.
13. Changes
We may update this policy when our services, providers or legal requirements change. The latest version and update date will be published here.
14. Automated decision-making
This website does not make decisions that produce legal or similarly significant effects for visitors solely through automated processing. Analytics data is used for aggregate measurement and website improvement.
15. Children's data
The website and services are intended for a business audience and are not directed at children. If you believe a child has provided data to us, contact contact@intentreach.ai.
16. How we handle requests
We respond to valid requests without undue delay and within the applicable statutory period. Exercising rights is generally free unless the law permits a reasonable fee for manifestly unfounded or excessive requests.
Important: this version reflects the current IntentReach operating model and website configuration. It must be updated if new marketing pixels, a CRM, or other systems are introduced.