How do I exercise my GDPR rights?

The rights you can exercise

• Access a copy of your personal data
• Correct data that is inaccurate
• Request deletion, the "right to be forgotten"
• Restrict or object to processing, including anything processed on the basis of legitimate interests
• Data portability
• Lodge a complaint with your local supervisory authority

How to make a request

1. Email help@legiit.com. Say which right you are using and which account it concerns, using the email address you sign in with.
2. If you prefer a form, use Contact Support instead. The same team reads both.
3. Answer the verification step if we ask for one. We may ask you to verify account ownership first.
4. We respond within 30 days.

A deletion request is handled the same way. See how to delete your account and what happens to your data for the order to do things in.

Who controls what

There are two separate sets of data, and the roles are different for each.

• Your account and billing data. Legiit Online Marketplace Inc. is the data controller. Requests about this data come to us.
• The business contact data in your workspace. You are the controller of your own outreach and Legiit Leads acts as your processor. For data sourced from public repositories, we are a controller of that sourcing. Messages you send through connected mailboxes, replies captured into your workspace, and any calls you record through call tracking are all processed on your instructions, with you as controller.

That means a business owner who objects to appearing in results can write to help@legiit.com, and we remove their details from future results and instruct users' workspaces accordingly. See what to do if a business asks you to stop contacting them.

Consent, and the emails you can switch off

Most processing runs on contract (providing the service you signed up for, including billing) or on legitimate interests (service security, abuse prevention, product improvement, and processing publicly available business contact information for business-to-business purposes). Consent covers the optional emails, such as the morning digest, and you can withdraw it yourself at any time.

1. Click Settings in the sidebar.
2. Find the Your Agency card and untick Send me the morning pipeline digest (follow-ups due, prospects reading, market alerts).
3. Scroll to the bottom of the page and click Save Settings.

Good to know

• Our infrastructure runs primarily in the United States. Where personal data of EEA or UK residents is transferred internationally, we and our processors rely on appropriate safeguards such as Standard Contractual Clauses.
• The current list of sub-processors is in section 3 of the Privacy Policy. See which third-party services process my data.
• If you contact leads in the EEA or UK, you are the controller of that outreach. Make sure you have a lawful basis (typically legitimate interest for relevant business-to-business outreach), identify yourself honestly, and honor opt-outs promptly. The evidence behind every lead helps make your outreach relevant; it does not replace your own compliance obligations.