Legaro Privacy Notice
Who we are. Legaro is a business development agency run by Robert Houghton, a sole trader trading as Legaro, in the United Kingdom. We arrange introductory meetings between UK businesses and specialist finance software partners. For anything about your data, email privacy@legaro.uk.
What this notice covers. It explains how we use the business contact details of people we contact about our own services or on behalf of our clients, and of people who contact us or book a meeting with us.
What we hold. Your name, job title, work email address, the company you work for and its website, business location, publicly available company information (such as Companies House records), and a short note of anything relevant from your company’s public website. If you reply or book a call, we also keep your messages, the meeting time and notes from the conversation. We do not collect sensitive personal data.
Where it comes from. Business contact databases (Apollo.io), your company’s own website, Companies House, and you, when you reply or book.
Why we use it and our lawful basis. We use your details to contact you about services relevant to your role, to arrange and manage meetings, and to keep a record of our contact with you, including any request not to be contacted. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): we have a legitimate interest in offering relevant business services to people in relevant roles. We have assessed this and concluded it does not override your rights, because we contact only work addresses, about matters related to your role, and you can opt out at any time. We email only corporate addresses (limited companies, LLPs and PLCs), as permitted by the Privacy and Electronic Communications Regulations 2003.
Who we share it with. If you agree to a meeting with one of our clients (a finance software partner), we share your name, role, company, contact details and the meeting details with that client. We also use service providers who process data for us under contract: email sending and warm-up (Saleshandy), email and calendar (Google Workspace), database hosting (Supabase), automation hosting (Railway) and AI drafting assistance (Anthropic). We never sell your data.
International transfers. Some of these providers store or process data outside the UK, mainly in the United States. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to protect your data.
How long we keep it. Prospect details for up to 24 months from our last contact, then deleted. If you ask us not to contact you, we keep only your email address on a do-not-contact list, indefinitely, so that we never contact you again. Client and meeting records for 6 years for tax and legal purposes.
Your rights. You can ask us to access, correct or delete your data, to restrict or object to our use of it, and to receive a copy of it. You can object to direct marketing at any time and we will stop. Email privacy@legaro.uk, or simply reply to any of our emails. We will respond within one month.
Opting out. Reply to any email with “no thanks” or “remove me” and we will stop contacting you and add you to our do-not-contact list.
Complaints. Please contact us first at privacy@legaro.uk and we will respond without undue delay. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes. We will update this notice if how we use data changes, and show the date of the latest version at the top.