Privacy Policy
How we handle personal data on this website and in the outbound campaigns we run for clients.
Last updated: 15 August 2026
Before you publish: this document is a working template, not legal advice. Replace every [BRACKETED] field with your real details and have a qualified lawyer in your jurisdiction review it — particularly the sections covering cold outreach, data sources, and liability.
1. Who we are
Zenith Outbound ("Zenith Outbound", "we", "us") provides outbound prospecting and appointment setting services to business customers. The data controller for this website and for our own marketing activity is [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS], company number [COMPANY NUMBER].
For personal data we process on behalf of a client as part of a campaign we run for them, that client is the controller and we act as their processor under a written agreement.
2. What we collect
From visitors to this website
- Information you submit when booking a call through our scheduling provider: your name, business email address, company, and anything you type into the booking form.
- Information you send us by email.
- Basic technical data your browser sends automatically, such as IP address, browser type, and referring page.
From business contacts we reach out to
To run outbound campaigns we process limited business contact data about people in their professional capacity:
- Name and job title
- Business email address and, where relevant, business phone number
- Employer name, industry, company size, location, and publicly available company information
- Our correspondence with you and your response status, including opt-out requests
We do not knowingly collect special category data, and we do not collect personal data about children.
3. Where the data comes from
Business contact data is obtained from licensed commercial data providers, publicly accessible professional sources such as company websites and professional networking profiles, and information provided directly to us by a client about their own market.
4. Why we process it, and on what basis
- To contact business decision-makers about relevant services. Legitimate interests — direct business-to-business marketing. We have assessed that this does not override the rights of the individuals concerned, because contact is limited to professional roles, relevant to their job function, low in volume, and always carries a working opt-out.
- To schedule and hold calls you request. Steps taken at your request prior to entering a contract.
- To deliver services to clients and administer our agreements. Performance of a contract.
- To honour opt-outs and keep a suppression list. Legal obligation and legitimate interests.
- To keep our systems secure and our records accurate. Legitimate interests.
5. Who we share it with
We share personal data only with service providers who process it on our instructions, under contract, and only as needed to run our operations:
- Scheduling: Calendly
- Email delivery and sequencing: [YOUR SENDING PLATFORM]
- Contact data enrichment and verification: [YOUR DATA PROVIDERS]
- Hosting and content delivery: [YOUR HOST]
- Mailbox and calendar: [YOUR EMAIL PROVIDER]
We do not sell personal data, and we do not share it for cross-context behavioural advertising. We may disclose data where required by law or to establish or defend legal claims.
6. International transfers
Some providers are located outside the country you are in, including in the United States. Where personal data protected by UK or EU law is transferred outside those areas, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
7. How long we keep it
- Prospect records that produce no engagement: deleted or anonymised within [24] months of last contact.
- Correspondence and booking records: retained for the duration of the relationship and [6] years afterwards for legal and accounting purposes.
- Suppression list entries: retained indefinitely, because that is the only way to guarantee we never contact you again.
8. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to object to direct marketing at any time. Objecting to direct marketing is absolute — we will always honour it.
To exercise any of these rights, email hello@zenithoutbound.com. We respond within 30 days. We may ask for enough information to confirm your identity. You will never be charged or treated differently for exercising a right.
If you are in the UK or EU and you are unhappy with our response, you may complain to your national data protection authority. In the UK this is the Information Commissioner's Office at ico.org.uk.
9. Cookies and analytics
This site sets no advertising or tracking cookies of its own. The embedded scheduling widget is provided by Calendly and may set cookies necessary for it to function; see Calendly's own privacy notice for details. Web fonts are loaded from Google Fonts, which receives your IP address as part of that request.
[If you add analytics, name the tool here and say whether it uses cookies. If it does, you need a consent banner in the UK and EU.]
10. Security
We use access controls, encrypted transport, and reputable providers with their own security programmes. No system is perfectly secure, but we take reasonable and proportionate measures to protect the data we hold.
11. Changes
If we change this policy we will update the date at the top of this page. Material changes affecting how we use your data will be communicated directly where we hold a contact address for you.
12. Contact
Zenith Outbound, [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Email hello@zenithoutbound.com.
Questions about this page? Write to hello@zenithoutbound.com.
Book a discovery call