Privacy Policy

Last updated: 8 November 2026

This Privacy Policy explains how B2B Lead Warrior collects, uses, shares and protects personal information. It covers visitors to https://www.b2bleadwarriors.com, people who contact us, our clients, and business professionals whose contact information we research for our clients or for our own business development.

1. Who we are

B2B Lead Warrior is a B2B research and data services business owned and operated by Tazmir Hossain and based in Khulna, Bangladesh. Our services include B2B lead research, decision-maker identification, business contact enrichment, email verification, CRM data preparation and ongoing research operations, as well as outreach support for some clients.

For any privacy question or request, contact us at hello@b2bleadwarriors.com.

2. Information we collect through this website

Contact and sample request form

When you submit our contact form, we collect the information you enter. This includes your first and last name, work email address, company name, the type of help you need, the service you are interested in, and your project details. You may also choose to provide your company website, your role, your target audience, the data fields you need, expected volume, preferred file format, a deadline, and any other information you include in your message. Please do not send sensitive or confidential information through the form.

When a form is submitted, our form software also records technical information with the submission, such as your IP address, browser and device type, and the page the form was submitted from.

Emails you send us

If you email us directly, we receive your email address, your name as it appears in your email, and anything you include in your message or attachments.

3. How we use website enquiries

We use the information you send us to:

review your brief and respond to your enquiry
ask questions needed to understand your target market, data requirements, volume and timing
prepare proposals, quotes, sample terms and project scopes
keep a record of our communication with you
protect our website and forms against spam and misuse

We do not add people who contact us to a marketing mailing list, and we do not currently operate a newsletter.

4. Service providers that support our website

We use the following service providers to run our website and handle enquiries:

Website hosting: our WordPress website is hosted with Namecheap. Namecheap has confirmed that our website files and website database, including contact form submissions, are hosted in a data centre in the United States.
Forms: we use the Fluent Forms plugin for WordPress. Form submissions are stored in our own website database and are not sent to the plugin developer.
Email: our business mailbox, hello@b2bleadwarriors.com, is hosted by Namecheap in a data centre in the United States and accessed through its cPanel webmail service. Form notifications are sent from our own domain mailbox through Namecheap’s email (SMTP) service to this inbox. Our website keeps a short email delivery log, which is automatically deleted after 14 days.
Hosting backups: Namecheap keeps backup copies of hosting data. Namecheap does not guarantee the country or data centre where backups are stored, so backup copies of website and email data may be stored outside the United States.
Spam protection: our forms use Cloudflare Turnstile to check that a submission comes from a person rather than an automated bot. To do this, Cloudflare processes technical information from your browser, such as your IP address and device and browser characteristics. Cloudflare’s privacy policy is available at https://www.cloudflare.com/privacypolicy/.

5. Professional contact research for clients

Our core service is researching business contacts for our clients. Depending on the project, this can include:

names and job titles
business email addresses
business telephone numbers
LinkedIn or other professional profile URLs
company information, such as company name, website, industry, size and location
research notes, such as the source of a record, the date it was checked, and its verification status

We research professionals in their business capacity only. We do not intentionally collect sensitive information, such as health, religious, political or financial information, and we do not research private individuals for consumer purposes.

Where this information comes from

We gather business contact information from:

publicly available business sources, such as company websites, press releases, public business directories, event and association listings, and government or regulatory directories
professional networking platforms, used in line with our accounts and the terms that apply to them
commercial B2B data and contact-research providers
email and phone verification services, which check whether contact details are valid
information supplied by our clients, such as account lists, existing CRM records or files to enrich or clean

Information being publicly available does not mean it can be collected or reused without restriction. We review each project’s purpose, the type of data requested and the sources involved, and we may decline or limit work where we believe the data or its intended use is not appropriate.

Research and verification tools

Depending on the project, we use third-party tools from the following categories to find, enrich and verify business contact data:

B2B contact and company databases, used to identify companies and professionals that match a client’s criteria
Professional networking and prospecting platforms, used to confirm current roles, titles and employers
Data enrichment and research workflow platforms, used to organise research and add missing business details to records
Email-finding services, used to locate likely business email addresses
Email and phone verification services, used to check whether an email address or telephone number appears valid
Spreadsheet and file-sharing tools, used to prepare and deliver files to clients

Tools vary by project. When we use these services, we share only the information needed for the task, such as a name and company domain for a lookup, or an email address to be verified. These providers process information under their own terms and privacy policies. Automated tools support our work, but manual research, validation and human quality review remain central to how we prepare data.

6. Our role when we process data for clients

Client-directed work. When a client hires us, the client decides the purpose of the project. This includes the target market, the roles and fields required, and how the delivered data will be used. In this work we process personal information on the client’s instructions and for the client’s purposes. We do not use client-supplied data, or data researched for a client, for our own marketing, and we do not resell it to other clients.

Shared responsibilities. Clients decide how they use the data we deliver. They are responsible for having a lawful basis for that use, for the outreach they send themselves, and for honouring opt-out and deletion requests they receive. We are responsible for how we carry out our own part of the work, including how we research, handle, secure and deliver data, and how we carry out any outreach we run for a client. How these responsibilities are divided for a particular project depends on our written agreement with that client and on the laws that apply.

Activities we determine ourselves. We decide how personal information is used when we handle enquiries, manage client relationships, invoice, keep business records, secure our systems, and handle privacy requests about our own activities.

Duplicate checking for the same client. Where a client permits it, we keep records from lists previously delivered to that client and use them only to avoid delivering duplicate records in that client’s future projects. We do not reuse one client’s lists or confidential data for any other client.

Client agreements. Our client work is carried out under written terms. Depending on the client and the project, these may be a data processing agreement, an Upwork contract or another written service agreement. Not every engagement has a separate data processing agreement.

Outreach on behalf of clients. Some clients ask us to run cold email or LinkedIn outreach on their behalf. In this work we act on the client’s instructions: the client decides who is contacted and for what purpose, and we carry out the outreach as agreed. The client is responsible for the lawful basis for its outreach; we are responsible for the parts of the work we carry out, such as sending messages and recording replies, in line with our agreement and applicable law. How opt-out requests are recorded and passed on is agreed with each client and can differ between projects. Requests about outreach we run for a client are handled in coordination with that client, in line with our agreement with them and applicable law.

7. Our own business development outreach

Separately from client work, we contact businesses to offer our own services. We do this through cold email and LinkedIn messages sent to professionals in their business capacity.

For our own outreach we use business contact information such as names, job titles, business email addresses, company details and professional profile URLs, gathered from the types of sources described in Section 5. Our own outreach is kept separate from client work: we do not use data researched for a client, or data supplied by a client, for it (see Section 6).

If you do not want to hear from us, reply to our message or email hello@b2bleadwarriors.com and ask us to stop contacting you. We will then stop contacting you about our own services.

8. Sharing personal information

We share personal information only as needed to run our business:

with the client who commissioned a research project, which receives the data researched for them
with service providers that host our website, deliver email, protect our forms, or provide the research, verification, outreach, email and file-storage tools we use
with team members and contractors who need access to deliver our services
with the client concerned, when a reply or request relates to outreach we run on that client’s behalf
where required by law, or to protect our rights, our clients or others

Team members and contractors who work on client projects are instructed to keep client and project data confidential and to use it only for authorised project work.

9. International data transfers

We are based in Bangladesh and work with clients in other countries, including the United States, the United Kingdom and Canada. Our website, website database and business email are hosted in the United States. Backup copies held by our hosting provider may be stored in other countries, and we cannot guarantee their location. Personal information may also be accessed from Bangladesh by our team, processed in the countries where our research and software providers operate, and delivered to clients in their own countries. These countries may have different data protection laws from your own.

10. How we protect personal information

We take reasonable steps to protect personal information, including:

our website is served over HTTPS
our website forms use spam and bot protection
two-factor authentication is enabled on our hosting account, our hosting control panel and our website administrator accounts
two-factor authentication is enabled on the Google accounts our team uses for project work
team members are instructed to keep client and project data confidential and to use it only for authorised project work

No method of storage or transfer is completely secure, and we cannot guarantee absolute security.

11. Cookies and similar technologies

At the time of writing, our website does not use analytics, advertising or social media tracking cookies or pixels.

WordPress cookies: WordPress sets cookies only for logged-in website administrators, so that it can remember login and display preferences. Comments are not enabled on this website.
Cloudflare Turnstile: on pages with a form, Turnstile runs a security check in your browser, as described in Section 4.

If we add analytics or other tracking technologies in the future, we will update this policy and, where required, ask for your consent first.

12. How long we keep information

We keep personal information only for as long as it is needed. How long depends on:

why the information was collected, and whether that purpose is still active
whether an enquiry, client relationship or project is still ongoing
what our written agreement with the client says about keeping, returning or deleting data
whether a client has asked us to keep delivered records for duplicate checking
whether we need a minimal record to avoid contacting someone again after they have asked us to stop
any legal, tax or accounting requirement to keep records

Applying these criteria:

Website enquiries: we keep form submissions and related emails for as long as needed to respond to the enquiry and keep a record of our communication. If an enquiry becomes a client project, it is kept with that client’s records.
Project data: how long we keep project files and research data depends on the project and the client agreement. Where a client permits duplicate checking, we keep records previously delivered to that client only to avoid duplicates in that client’s future projects, as described in Section 6. Where a client agreement sets requirements for deleting or returning data, we follow them.
Client business records: we keep contracts, invoices and related correspondence for as long as needed for accounting, tax and legal purposes.
Our own outreach records: we keep prospect and outreach records for as long as they are needed for our business development.
Email delivery logs: deleted automatically after 14 days.

13. Your privacy rights

Depending on where you live and the laws that apply, you may have the right to:

ask whether we hold personal information about you, and request a copy
ask us to correct inaccurate information
ask us to delete your information
object to, or ask us to restrict, certain processing
withdraw consent where we rely on your consent
complain to the data protection authority in your country

If you are a business contact in data we researched for a client, you can ask us whether we hold your information, where it came from, or to remove it. Where the data was researched on a client’s instructions, we may also refer you to that client, because they decide how the data is used.

To make a request, email hello@b2bleadwarriors.com with the subject line “Privacy request”. You can ask us for access to, correction of or deletion of your personal information, or object to how we use it. These rights depend on the law that applies to you and on the arrangements under which the information is processed. We may need to verify your identity before acting on a request. Where the information was researched or processed on a client’s instructions, we may need to refer your request to that client or handle it together with them. We will respond within the time required by the law that applies to you.

14. Children

Our website and services are intended for businesses and professionals. They are not directed at children, and we do not knowingly collect information from children.

15. Changes to this policy

We may update this Privacy Policy when our services, tools or legal obligations change. The “Last updated” date at the top shows when it was last revised.

16. Contact us

For questions about this policy or how we handle personal information, contact B2B Lead Warrior at hello@b2bleadwarriors.com.