Privacy Policy

This Privacy Policy explains how Naitiv Technologies Limited (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you use LeadScout, visit our website, or otherwise interact with us.

1. Who we are

Controller

Naitiv Technologies Limited

Registered address

Unit 5, The Piano Works, 117 Farringdon Rd, London EC1R 3BX

Company number

16207355 (England & Wales)

Contact

contact@wearenaitiv.com

Privacy contact

Andrew Black (via contact@wearenaitiv.com)

2. Who LeadScout is for

LeadScout is a UK-based B2B product intended for business users. It is not designed for, or intentionally targeted at, children.

3. Personal data we collect

A. Account and profile data (provided by you)

When you create an account or request access, we may collect:

• Name
• Company name
• Work email address
• Trade / service category
• Postcode area / service area
• Password (stored securely using appropriate hashing)

B. Usage and analytics data (collected automatically)

When you use LeadScout, we may collect:

• Log and device data (e.g., IP address, browser type, device identifiers, timestamps)
• Product usage events and interactions (e.g., pages visited, clicks, feature usage)
• Approximate location derived from IP (for security and service operation)

We use product analytics to improve performance, usability, and reliability.

C. Communications data

If you contact us, we may collect:

• Your contact details
• The content of your message and any attachments
• Support history and related technical information

D. Service emails

We may send service-related emails such as account verification, security notices, and a weekly digest of LeadScout results.

E. Business contact data within planning applications

LeadScout processes information from UK planning applications and related materials. Where personal data appears, we take steps to:

• exclude residential/personal contact details where feasible, and
• focus on business-to-business contact details relevant to the commercial context.

We may also add business context (for example, a company website or professional profile link) to help identify the most relevant business contact.

Contact information is provided view-only within LeadScout. Users are not provided with bulk export/download functionality for contact datasets.

4. How we use personal data

We use personal data to:

• Provide and operate LeadScout (authentication, account management, delivering your feed/digest)
• Personalise and improve relevance of results (based on your trade, region, and preferences)
• Send service communications (including the weekly digest)
• Monitor performance, fix bugs, and improve user experience (analytics and diagnostics)
• Secure our systems, prevent abuse, and investigate suspicious activity
• Comply with legal obligations and enforce our terms

5. Legal bases (UK GDPR)

We rely on the following legal bases depending on the context:

• Contract: processing necessary to provide the service (e.g., account creation, authentication, delivering your feed).
• Legitimate interests: operating, securing, and improving LeadScout; and presenting B2B-relevant information in a commercial context, where our interests are not overridden by your rights.
• Consent: where required for non-essential cookies/analytics (see Cookies section).
• Legal obligation: where we must comply with applicable laws and regulatory requirements.

6. How we use AI and automated processing

LeadScout uses automated processing, including third-party AI services, to:

• Extract and structure relevant information from planning application documents
• Generate and prioritise matched opportunities for your feed
• Draft outreach suggestions based on information held within your account

We share only the minimum data necessary with AI service providers to deliver these features. We do not use your data to train third-party AI models.

Some parts of LeadScout involve automated prioritisation (for example, ranking opportunities in your feed). These features are designed to assist your decision-making and do not produce decisions with legal or similarly significant effects.

7. Sharing and disclosure of personal data

We may share personal data with:

• Service providers (“processors”) who help us run LeadScout
• Professional advisers (legal, accounting) where necessary
• Authorities where required by law or to protect rights, safety, and security
• Parties involved in a corporate transaction (e.g., merger/acquisition), with appropriate safeguards

Key categories of service providers

• Cloud hosting and application infrastructure
• Database services
• Email delivery
• Product analytics
• AI and machine learning services

A detailed list of sub-processors is maintained internally and is available on request. We do not sell personal data.

8. International transfers

We aim to keep personal data stored and processed within the UK/EEA where available. If personal data is transferred outside the UK (for example, due to a service provider's operations), we will use appropriate safeguards such as the UK IDTA and/or the UK Addendum to EU SCCs, and additional measures where appropriate.

9. Cookies and similar technologies

We use:

• Essential cookies necessary for the Service to work (e.g., authentication/session cookies)
• Analytics cookies to understand usage and improve LeadScout

We do not currently use advertising or marketing cookies.

Where required by law, we will obtain consent for non-essential cookies and provide cookie controls.

10. Data retention

We keep personal data only as long as necessary for the purposes described in this policy, including while your account is active, and as needed for security, dispute resolution, and compliance obligations.

You can delete your account using the in-app deletion option or by contacting contact@wearenaitiv.com. We will delete or anonymise personal data, except where we must retain it for legal, security, or legitimate operational reasons.

11. Security

We use appropriate technical and organisational measures designed to protect personal data (such as access controls and encryption in transit where appropriate). No system is completely secure, but we work to protect your information and respond to incidents appropriately.

12. Your rights (UK GDPR)

You may have rights to:

• Access, correct, delete, or restrict processing of your personal data
• Object to processing (including processing based on legitimate interests)
• Data portability (where applicable)
• Withdraw consent (where processing is based on consent)

To exercise your rights, contact contact@wearenaitiv.com.

Complaints

You can complain to the UK supervisory authority: the Information Commissioner's Office (ICO).

13. Issues with data shown in LeadScout

If you believe LeadScout displays personal data incorrectly or inappropriately, contact us at contact@wearenaitiv.com and we will investigate and take appropriate action.

14. Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will post the updated policy and update the effective date, and may notify you through the Service or by email.

15. Contact