Privacy policy

This policy explains how ProspectBase UK Ltd ("we", "us") collects and uses personal information on CXO Insights, who we share it with, and the choices and rights you have.

Who we are

CXO Insights is run by ProspectBase UK Ltd, a company registered in England and Wales (company number 15492457), whose registered office is at Wessex House, Teign Road, Newton Abbot, Devon, TQ12 4AA. We are the controller of the personal information described in this policy.

If you have any questions, email privacy@prospectbase.com.

What we collect

When you fill in a form to get a piece of content or contact a brand, we collect what the form asks for. That's usually your name, work email, phone number, company, job title, country and company size, plus your answers to any questions and the choices you make on the form.

When you use the AI assistant on a page, we keep the questions you ask and the answers given, and your email address if you choose to share it.

When you visit the site, we record technical details with any form you send: your IP address, the country and city it suggests, and your browser type. We use these to stop spam and fraud and to show the brand roughly where a request came from.

Cookies and similar technologies. See our cookie policy.

If you ask us not to sell or share your information, we keep the details you give on that form so we can act on your request.

How we use it, and our lawful basis

We rely on legitimate interests as our primary lawful basis. Those interests are ours and our brands’ interests in promoting professionally relevant content to business audiences. Before relying on this basis we consider your interests and rights, and we ensure there is always a clear and easy way to opt out or to contact us to exercise your rights at privacy@prospectbase.com.

• To give you the content you requested, including emailing you a link to it. Our lawful basis is our legitimate interests in operating the library. When you confirm your request to access the content, we also process your details to fulfil that request.
• To pass your business contact details and engagement data to the brand named on the form, so they can contact you about the content and their products and services. Our lawful basis is our legitimate interests and those of the brand in reaching relevant business professionals with their content. Where you have accepted the brand’s privacy policy on the form, you are agreeing directly with that brand about its own use of your data, including for direct marketing — but our basis for sharing it remains our legitimate interests.
• To operate and improve the AI assistant, including keeping the questions you ask, the answers given, and your email address if you share it. Our lawful basis is legitimate interests.
• To check that requests are genuine, prevent spam and fraud, and keep the site secure. Our lawful basis is legitimate interests.
• To improve the site and report to brands on how their content performs, using aggregated totals rather than information about you individually. Our lawful basis is legitimate interests.
• To keep records and meet our legal obligations, such as acting on privacy requests. Our lawful basis is legal obligation.

We don't make decisions about you based only on automated processing that have legal or similarly significant effects.

Who we share it with

The brand named on the form. When you fill in a form for a brand's content, we pass your business contact details (such as your name, work email address, phone number, company, job title, country and company size), your answers to the form’s questions, and engagement data (such as how you interacted with the content) to that brand. The brand then uses them in accordance with its own privacy policy, which is linked on the form. We don’t pass your details to any other brand.

Our service providers, who handle information for us under contract and only on our instructions:

• Vercel (website hosting)
• Supabase (database and file storage)
• SendGrid (sending emails)
• Anthropic and Voyage AI (powering the AI assistant)

Others, when we must. We may share information to meet a legal obligation, to protect our rights or others' safety, or as part of selling or reorganising our business.

Transfers outside the UK and EU

Some of our service providers store or access information outside the UK and the European Economic Area, including in the United States. When they do, we use safeguards such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or the UK–US data bridge.

How long we keep it

We keep the details from your form fills and chats for as long as required to provide our services. We will delete them when the brand named on your form asks us to, when you ask us to, or when we determine through periodic review that we no longer need them. We keep requests not to sell or share your information for as long as we need them to respect your choice. Brands keep the details we pass them under their own policies.

Your rights

Depending on where you live, you can ask us to:

• give you a copy of the personal information we hold about you;
• correct it if it's wrong;
• delete it;
• restrict or object to how we use it, including for direct marketing;
• give it to you, or another organisation, in a portable format.

Because we rely on legitimate interests, you have the right to object to our processing of your personal data. If you object to receiving direct marketing, we will stop immediately. For other objections, we will stop unless we can demonstrate compelling legitimate grounds that override your interests. To ask for any of these, email privacy@prospectbase.com. We'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

California residents

This section applies if you live in California, under the California Consumer Privacy Act as amended (CCPA).

What we collect. In the last 12 months we have collected these categories of personal information: identifiers (such as name, email address and IP address); professional or employment information (such as company and job title); internet activity (such as your interactions with our pages and the AI assistant); and inferences drawn from your answers. We collect them from you, and from your browser, for the purposes described above.

Selling and sharing. When you fill in a form, we pass your details to the brand named on it, and the brand pays us for running its campaign. This may count as "selling" or "sharing" personal information under the CCPA. We don't knowingly sell or share the personal information of anyone under 16.

Your rights. You can ask to know what personal information we've collected, used and disclosed about you; to delete it; to correct it; and to opt out of its sale or sharing. We won't treat you differently for using these rights.

How to use them. To opt out of selling or sharing, use our Do not sell or share my personal information form. We also treat a Global Privacy Control signal from your browser as a request to opt out for that browser. For the other rights, email privacy@prospectbase.com. We'll need to check who you are before acting on some requests. You can ask someone to act for you as your authorised agent; we'll ask for proof that they can.

Other US states

If you live in a US state with its own privacy law (such as Colorado, Connecticut, Virginia or Texas), you have similar rights to access, correct and delete your information and to opt out of its sale and of targeted advertising. Use the same form and email address. If we turn down your request, you can appeal by replying to our decision.

Children

CXO Insights is for business professionals. It isn't meant for anyone under 16, and we don't knowingly collect their information.

Keeping your information safe

We use encryption, access controls and careful permissions to protect your information. Only the people who need it can see it.

Changes to this policy

We'll update this page when we change how we handle personal information. The date at the top shows when it last changed.

Contact us

Email privacy@prospectbase.com or write to ProspectBase UK Ltd, Wessex House, Teign Road, Newton Abbot, Devon, TQ12 4AA.