Privacy policy

Business outreach

I am Calum O'Gorman, a sole trader based in London (107 Perseus Court, 8 Arniston Way, London E14 0RF). I contact leaders of small business-to-business services firms by email to introduce my services: outbound email systems and company knowledgebases.

What I hold about you: your name, job title, work email address, the public page that named you, and public facts about your firm (website, location, size, what it does). I do not hold personal contact details, and I do not buy lists.

Where it comes from: your firm's website, your public professional profile, and public company registers (Companies House in the UK). Email addresses are checked with a verification service before use.

Why I am allowed to: in the UK, legitimate interests under UK GDPR, and PECR's rules for corporate subscribers; in the US, the CAN-SPAM Act; in Australia, inferred consent under the Spam Act 2003. My legitimate-interests assessment is available on request.

How long: 12 months after the last email I send you, unless you become a client. If you ask me to stop, your address stays on a do-not-contact list so I never email you again.

Your rights: to object, to see what I hold, to have it corrected or deleted. Reply to any email or write to the address above. I act on opt-outs within one working day and other requests within a month. You can also complain to the ICO (ico.org.uk).

Who I am

This site is run by Calum O'Gorman, a sole trader based in the United Kingdom, trading as Calum O'Gorman ("I", "me", "my"). I am the data controller for the personal data described here. The best way to reach me about privacy, or to exercise any of your rights, is by email at [email protected]. A postal address is available on request.

The information I collect

• When you ask for a call or fill in the enquiry form: your name, email address, website, the workflows you select, your rough timeline and budget, and anything you choose to write in the free-text fields about your process and context.
• When you email me directly: your email address and whatever you include in your message.
• If I contacted you first (business outreach): business contact details such as your name, role, company, work email, and public professional profile, gathered from publicly available sources.
• Automatically when you visit: standard technical information such as your IP address, browser type, and the time of your request, recorded in routine server and security logs by my hosting provider.

How I use it, and my lawful basis

• To respond to your enquiry and arrange and run our call. Lawful basis: taking steps at your request before entering a contract, and my legitimate interest in responding to people who contact me.
• To draft a tailored reply. The details you submit in the form may be processed by an AI service to help me write a personalised response to you. The reply is sent from my own systems. Lawful basis: my legitimate interest in answering enquiries efficiently.
• To reach out to potential clients about my services. Lawful basis: my legitimate interest in business-to-business marketing. You can object at any time and I will stop, see Your rights below.
• To run, secure, and improve the website. Lawful basis: my legitimate interest in operating a safe, working site.

I do not sell your personal data, and I do not use it for automated decisions that produce legal or similarly significant effects about you.

Who I share it with

I use a small set of trusted service providers who process personal data on my behalf, under contract and only on my instructions:

• Cloudflare, for website hosting, content delivery, and processing form submissions.
• Resend, to deliver enquiry and follow-up emails.
• Google, for the AI service that drafts tailored replies (Gemini), call booking (Google Calendar Appointment Schedules), and video calls (Google Meet).
• Microsoft, for email (Microsoft 365), used mainly for outreach.
• Lemlist (Lempire), for email deliverability and outreach tooling.
• Zoom, for phone and video calls (Zoom Phone).

This list reflects the tools I use today and may change as I update my stack. I will keep it accurate. I may also disclose information where the law requires it.

International transfers

Some of these providers are based in the United States or process data outside the UK. Where personal data is transferred outside the UK, it is protected by appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement (or Standard Contractual Clauses with the UK Addendum).

How long I keep it

I keep enquiry and client information for as long as I need it for our relationship and for a reasonable period afterwards to meet legal, accounting, and record-keeping needs. Outreach contact details are removed when you ask, or when they are no longer relevant. If nothing comes of an enquiry, I delete the related data once it is clear there is no ongoing reason to keep it.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data I hold about you;
• ask me to correct data that is wrong or incomplete;
• ask me to delete your data;
• ask me to restrict or stop processing your data;
• object to processing based on my legitimate interests, including outreach marketing;
• ask for your data in a portable format; and
• withdraw consent where I rely on it.

To exercise any of these, email me at [email protected]. If you are not happy with how I handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though I would appreciate the chance to put things right first.

Cookies

This site does not use advertising, tracking, or analytics cookies. My hosting provider may set strictly necessary cookies that keep the site secure and working. These are not used to profile or track you across other sites.

Changes to this policy

I may update this policy from time to time. When I do, I will change the "last updated" date at the top. Significant changes will be made clear on this page.