Bexford privacy notice Version: 2026-11-12-named-people-v1 This notice covers Bexford’s free and Starter services, website visitors, customer accounts, B2B prospect research, named decision-makers found during lead research and optional Gmail features. Who is responsible Daniel Mclearnon, a sole trader trading as bexford intelligence, is responsible for personal information handled by Bexford. Business correspondence address: Shean, Seaforth Road, Muir of Ord, IV6 7TA, United Kingdom. Privacy enquiries: hello@bexfordintelligence.co.uk Customer accounts and business briefs Bexford collects the account and business information needed to create and secure a workspace, understand what a customer sells, research suitable businesses, manage free and paid allowances, maintain CRM records and provide support. Customer briefs, private notes, pipeline activity and follow-ups are kept separate from other customers’ private workspaces. Customers sign in using Google or a one-time email code. Google sign-in does not itself give Bexford permission to read Gmail. Optional Gmail features use separate permissions. B2B company research Bexford researches potential business customers using permitted public business sources and approved official business websites. It records source provenance and separates factual evidence from Bexford assessments. A prospect is not represented as having buying intent, and published business information is not evidence of consent to marketing. Named decision-makers found during lead research When Bexford researches a business as a possible customer for one of our users, it may record the name and job title of one person who appears to make or influence buying decisions there, such as an owner, director or manager. We take this only from published sources: the business’s own website, its Companies House record, or another published page that names the person in that role. We keep a link to that page and the date we saw it. We do not collect personal email addresses, personal phone numbers, home addresses or personal social media profiles. We do not infer private characteristics, and a job title is not treated as proof of buying authority or as permission to market to someone. The name and job title are shown to the Bexford customer the lead was researched for, so they can ask for the right person. Bexford does not contact you and never sends anything on a customer’s behalf. A customer who contacts you acts as an independent controller and is responsible for their own use of your details, including whether and how any contact is lawful. Purpose and lawful basis We rely on legitimate interests for this: helping small UK businesses find the right person to speak to, using information already published in a business context. Public availability is not consent, so we keep the information to a name, a job title and its source, limit how long we keep it and make removal easy. How we tell you Because we hold no contact details for you, we do not write to each person individually. This notice and the removal form are how we tell you. To be removed Use the form at https://app.bexfordintelligence.co.uk/join/privacy/professional-contact/object or email hello@bexfordintelligence.co.uk. We stop using your details, remove them from leads and keep only a protected code so they are not collected again. You can also ask what we hold and where it came from, or ask for a correction. Payments and Stripe Starter subscriptions are paid through Stripe’s hosted services. Bexford stores the account-linked Stripe identifiers, subscription/payment state, billing period, invoice/event references and the legal-document versions accepted by the account owner. Bexford does not receive full card numbers or card security codes. Google and Gmail data Google account data and optional Gmail data are handled separately from shared company research. Gmail-derived private information is not copied into the shared prospect directory. Bexford does not use Google user data for advertising or to train general-purpose AI models. Storage, service providers and international processing Bexford uses service providers including Cloudflare for hosting/security, Stripe for payments and, for permitted company research, OpenAI where enabled. Providers may process information outside the United Kingdom under their applicable contractual and transfer arrangements. Bexford restricts access to authorised users and service administration and uses technical and organisational safeguards appropriate to the service. Retention A named decision-maker is removed from a lead 12 months after the lead was researched, unless later research confirms them again. A removal request takes effect at once. Other account, billing, CRM, support and security records are retained according to their purpose, applicable legal obligations, disputes, account operation and verified deletion requests. Provider recovery copies may remain until their recovery period expires. Your rights Depending on the processing and applicable conditions, UK data-protection law may give you rights including access, correction, erasure, restriction, portability and objection. You may complain to the Information Commissioner’s Office at ico.org.uk. Contact: hello@bexfordintelligence.co.uk Last updated: 12 November 2026