1. Data we handle
Fewertools Ltd operates FewerLeads. For buyers, we handle names, business names, email addresses, order choices, payment references, downloads, claims, feedback, and contact messages. Stripe handles full payment details when automatic checkout is used. Manual payment details remain with the payment service used for that transaction. For business research, we handle public business names, categories, locations, phones, social links, source URLs, and dated verification evidence. We do not intentionally collect special-category data.
2. Why we use it
Buyer data is used to form and perform the order contract, prevent abuse, provide secure delivery, support replacements, keep accounting records, and improve the first customer release. Public business data is used to produce accountable business research, maintain accuracy, respond to corrections, and support customers’ lawful business development.
3. Legal bases and marketing
Depending on the person, location, and activity, relevant bases may include contract, legal obligation, and legitimate interests after a purpose, necessity, and balancing assessment. Buyers remain responsible for their own outreach decisions. Under the UK GDPR and PECR, publicly available personal data does not automatically mean consent. Under the Nigeria Data Protection Act 2023, people can object to direct marketing and other rights may apply.
4. Service providers
Hosting and database services process site and order data. Stripe processes automatic checkout and payment events when connected. A separate payment service may process a manually arranged transaction. Resend processes transactional delivery email when connected. Public-source providers supply research evidence. Each provider receives only the information needed for its role.
5. Site analytics
We use first-party, cookie-free event measurement to understand page views, list interest, reservations, payments, downloads, feedback, and contact-form completion. Analytics events use a short-lived random page-session identifier. They do not store IP addresses, browser fingerprints, names, email addresses, order notes, contact messages, or full page URLs. Campaign labels are limited to short source, medium, and campaign tokens.
6. Retention and security
Secure CSV links normally expire after seven days. We retain order, payment, claim, contact, audit, and accounting records only as long as reasonably needed for fulfilment, legal obligations, disputes, fraud prevention, and service improvement. Access tokens are stored as one-way hashes in our database. Aggregate analytics are retained only while they help operate and improve the release. No internet system can promise absolute security.
7. International processing
The service covers the United Kingdom and Nigeria and may use providers operating in other countries. Where personal data is transferred internationally, the operator and its providers must use the safeguards required by applicable law.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion or removal, restriction, objection, or information about processing. A business can also ask us to suppress a listing. We may ask for evidence that you are authorised to act for that business.
Submit a data request
Use this form for an access, correction, removal, or objection request relating to a listed business. Do not include passwords, financial information, or identity documents in the message.
9. Complaints
Please use the form first so we can investigate. You may also complain to the relevant data protection regulator, including the UK Information Commissioner’s Office or the Nigeria Data Protection Commission, where applicable.