Skip to main content

Privacy Policy

Last updated: 25 May 2026

Who We Are

LimeProspect is an AI-powered B2B prospecting and lead intelligence platform operated by Limelai Limited, a company registered in England and Wales.

  • Company Name: Limelai Limited
  • Company Number: 16486216
  • Registered Address: 86-90 Paul Street, London, EC2A 4NE
  • Data Protection Contact: privacy@limeprospect.com

For the purposes of UK data protection law, Limelai Limited is the data controller responsible for your personal data.

What Data We Collect

We collect and process the following categories of personal data:

Account Data

When you register for an account, we collect your name, email address, company name, job title, and password credentials (managed via our authentication provider, Clerk).

Usage Data

We automatically collect information about how you use our platform, including pages visited, features used, search queries, IP address, browser type, device information, and timestamps.

Prospect Data

Our platform processes business contact information sourced from publicly available records, including Companies House filings, Contracts Finder, and other public registers. This data includes company names, registered addresses, officer names, SIC codes, and filing histories.

Integration Data

If you connect third-party services (such as Gmail, Microsoft Outlook, Salesforce, or HubSpot), we process authentication tokens and data necessary to provide integration features.

Payment Data

Payment information is processed by our payment provider, Stripe. We do not store full card details on our servers. We retain transaction IDs and subscription status for billing purposes.

How We Use Your Data

We use your personal data to:

  • Provide, maintain, and improve the LimeProspect platform and its features
  • Authenticate your identity and manage your account
  • Process your subscription payments and manage billing
  • Deliver prospect intelligence, signal alerts, and AI-generated insights
  • Enable email sequences, outreach campaigns, and CRM integrations
  • Send service-related communications, including security alerts and product updates
  • Analyse platform usage to improve functionality and user experience
  • Comply with legal obligations and respond to lawful requests
  • Detect, prevent, and address fraud, abuse, or security issues

Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

  • Performance of a contract: Processing necessary to provide you with the LimeProspect service under our Terms of Service.
  • Legitimate interests: Processing necessary for our legitimate business interests, such as improving our platform, preventing fraud, and marketing our services, where those interests are not overridden by your data protection rights.
  • Consent: Where you have given us specific consent to process your data for a particular purpose, such as receiving marketing communications.
  • Legal obligation: Processing necessary to comply with applicable laws and regulations.

For business contact data sourced from public registers (Companies House, Contracts Finder), we rely on legitimate interests as our legal basis. This data is already in the public domain and is processed for the purpose of B2B commercial prospecting.

Legitimate Interest Assessment

Before relying on legitimate interests, we carry out a three-part assessment covering purpose, necessity and a balancing test. A summary of our current assessment is set out below.

  • Purpose: to enable B2B sales prospecting using public business data, helping our customers reach relevant organisations efficiently and lawfully.
  • Necessity: alternative methods, such as relying solely on consent or untargeted advertising, are materially less effective for legitimate B2B outreach and would not deliver the same value to customers or the recipient organisations.
  • Balancing test: we only process public business contact data, we do not profile individuals, an opt-out mechanism is always available, all suppression requests are honoured immediately and recipients retain the right to object at any time. On balance, our interests are not overridden by the rights and freedoms of affected individuals.

You can object to processing based on legitimate interests at any time by emailing privacy@limeprospect.com. We will action valid objections without undue delay.

Data Sharing

We do not sell your personal data to third parties. We may share your data with the following categories of recipients:

  • Service providers: Third-party companies that help us operate our platform, including cloud hosting (Vercel, Supabase), authentication (Clerk), payment processing (Stripe), email delivery (Resend), and analytics services.
  • AI processing (OpenAI): OpenAI processes prompts and responses for AI-generated summaries, outreach drafts and lead insights. OpenAI does not use customer data to train models per their enterprise terms. Data is processed in the US under Standard Contractual Clauses.
  • Buyer signal enrichment (PredictLeads): PredictLeads enriches company domains with hiring, funding and expansion signals. Only company domain names are sent; no personal data is shared.
  • Integration partners: When you connect third-party services (Google, Microsoft, Salesforce, HubSpot), data is shared as necessary to provide those integrations.
  • Legal requirements: We may disclose data where required by law, regulation, legal process, or governmental request.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

All service providers are bound by data processing agreements and are required to process your data only in accordance with our instructions and applicable data protection law. For the complete list of sub-processors we use, see our Sub-Processor List.

Children's Data

LimeProspect is a B2B platform intended for business use only. We do not knowingly collect personal data from anyone under 18 years old. If you believe we have inadvertently collected data about a child, contact privacy@limeprospect.com and we will delete it within 30 days.

International Transfers

Some of our service providers are based outside the United Kingdom. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:

  • Transfers to countries deemed adequate by the UK Secretary of State
  • Standard contractual clauses approved by the Information Commissioner's Office (ICO)
  • Other legally recognised transfer mechanisms under UK GDPR

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Account data: Retained for the duration of your account and for up to 12 months after account closure for legitimate business purposes.
  • Usage data: Retained for up to 24 months from the date of collection.
  • Prospect data: Public register data is refreshed periodically and retained as long as it remains relevant and accurate.
  • Payment records: Retained for 7 years in accordance with HMRC requirements.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
  • Right to erasure: You have the right to request deletion of your personal data in certain circumstances.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Rights related to automated decision-making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise any of these rights, please contact us at privacy@limeprospect.com. We will respond to your request within one month of receipt.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Cookies

We use cookies and similar technologies to operate our platform, remember your preferences, and analyse usage patterns. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. Where required by law, we will seek your consent to any material changes.

We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Accessibility Options