How we handle your data.
Plain words. What we hold, why, and how to change it.
Last updated 24 September 2026.
1. Who this is from
theoutreach, an outbound agency based in India. Contact us through the Email link in the footer. This notice explains what personal data we hold, why, and your rights. Using this site or receiving an email sent through us means this notice applies.
2. Site visitors
The site sets no cookies. It uses Umami, a cookieless analytics service hosted in the EU, which counts page views without personal identifiers. If you use the form, we collect the work email and website you enter, to research your first ten firms and reply to you. The basis is the steps you asked us to take before a contract. We keep it for as long as we are in contact and twelve months after, unless we need it longer to establish, exercise or defend a legal claim.
3. People we write to for a client
Our clients use us to send business emails. For each person written to, the data is: name, role, firm, work email address, and the public record the firm was found in. It comes from public sources such as company registers, filings, permits, tenders, court records, company websites, LinkedIn, job boards, association lists, credit ratings, regulator lists, trade press and announcements. It is not collected from you.
The client is the sender of the email and the controller of this data. We act as the client's processor, on the client's instructions, and the client is responsible for the lawful basis, which is normally its legitimate interest in business-to-business marketing to a person in their professional role. Each sequence is short and stops when you reply. You may object at any time by replying to the email or writing to us; we then add you to a suppression list and do not write to you again for any client.
4. Who receives data
Our hosting and database providers, the client concerned, and the client's email provider. We do not sell personal data. We may disclose data where the law requires it.
5. Where it is held and for how long
On providers' servers in the European Union and the United States, under their standard contractual terms. Campaign data is held for the client's engagement and twelve months after, or until you object, whichever comes first, except suppression-list entries, which are kept so that we honour the objection, and data we need to keep for a legal claim.
6. Your rights
Subject to the law that applies to you, you may ask for a copy of your data, ask for it to be corrected or deleted, restrict or object to its use, and, where it came from you, receive it in a portable form. Write to us; we may ask you to confirm your identity and we answer within thirty days. Requests about a client's campaign may be passed to that client as controller. You may complain to the data protection authority where you live, including the Data Protection Board of India. We make no automated decisions about you.
7. Accuracy and third parties
Public records can be wrong or out of date. We take reasonable care but do not warrant their accuracy. This site links to other sites, whose privacy practices are their own.
8. Changes
We may change this notice by posting a new version here, with the date at the top updated. The version posted at the time applies.