This notice describes the implemented workflow. Launch review required: the operator’s legal identity, contact details, applicable legal bases, rights process, processor arrangements, international transfers, and retention policy must be completed and approved before production collection is enabled. This text is not a comprehensive compliance assessment.
Readiness assessment
The assessment runs in your browser. It does not require an email, upload a dataset, or send its answers to our lead database. System choices passed from the homepage appear in the page URL; avoid entering confidential information into URLs or free-text fields.
Information submitted through an inquiry
The form collects company and contact names, business email, website, country, industry, company size, data categories, approximate volume, and a brief description. We store the submission time, source and campaign attribution, authorization confirmation, privacy-notice version, and optional referral choice. Do not provide sensitive personal information, employee conversations, customer records, or confidential archives.
Purpose and sharing
Information is used to respond to the inquiry and assess whether an introduction may be appropriate. An optional checkbox records willingness to discuss referral sharing. There is no automatic buyer distribution. Before an introduction, the operator should confirm the proposed recipient, purpose, and information to be shared with you.
Infrastructure and abuse prevention
The production design uses Cloudflare hosting, D1 storage, and Turnstile bot protection. Rate limiting stores a keyed hash of network address and a short-lived request count, rather than a raw IP in the lead record. Infrastructure providers may process connection information under their own terms. Optional administrator notifications contain an inquiry identifier, not the submitted dataset description.
Analytics
Analytics is disabled by default. If the operator enables Cloudflare Web Analytics, deployment documentation requires updating this notice and reviewing applicable disclosure or consent obligations. The assessment does not depend on analytics.
Retention and access
The implemented daily maintenance task deletes lead records after 180 days and expired rate-limit records after their expiry. This default must be reviewed against the operator’s actual obligations before launch. Operators must restrict database and administrator access, define backup retention, and handle access, correction, deletion, and objection requests as applicable.
Contact and legal basis
Use the contact page for the configured operator contact. Production launch is blocked until an operator and contact email are supplied and legal review is acknowledged. Applicable lawful bases, cross-border safeguards, complaint channels, and statutory rights require jurisdiction-specific completion.