Legal
Privacy Policy
Last updated: October 26, 2026
This Privacy Policy explains how B2B Lead Growth (“we,” “us,” or “our”) collects, uses, stores, and protects information when you visit this website or complete our fit check. We keep data collection to the minimum needed to respond to you and deliver our service.
1. Information we collect
Information you give us. When you complete the fit check, we collect the contact details you choose to provide — your name, work email and company, and your website if you add it — along with your service area, anything you add in the free-text notes, and your answers to these questions (the short answers in your own words are optional; the rest are needed to give you an honest answer and to build your free audit):
- how much of your work is commercial
- who quotes and wins your commercial bids
- how many people work in the business
- how long you have been in business
- where your commercial work comes from today
- how much of that work rests on one customer, contractor or source
- how often a new commercial account starts with you
- what you most want to change
- whether you could take on more accounts
- whether you want commercial accounts contacted in your company's name
- whether you can name the commercial accounts and the area you want
- the smallest commercial job worth your time
- who follows up with commercial buyers today
- what happens when a commercial buyer replies or asks for a price
- where you think commercial opportunities get lost
- whether you want each buyer's need and timing confirmed and the next step set before your team takes over
- the commercial accounts and work you want more of (optional, in your words)
- how you describe your company to a commercial buyer (optional, in your words)
Information we derive. From those answers the site computes and stores a fit assessment — a Fit for a Call result of “Strong Fit”, “Possible Fit” or “Not a Fit Right Now”, how many of the published fit signals your answers show, and a suggested starting plan. It is generated by a fixed set of rules, not by a person and not by a machine-learning model, it is shown to you on screen at the time, and it has no effect on you beyond deciding what we say next and whether we offer you a call. You can ask us for it, or to correct it, on the same basis as everything else below. Please share only what you’re comfortable providing.
Information collected automatically. When you submit the form, our server records the date and time and the IP address the request came from, to prevent spam and abuse. Be aware that the IP address is stored alongside your submission for as long as we keep the submission, not just for the moment of the check. If you click “Book a 15-minute call” on the result, we also record that you reached that step, so we know which enquiries went on to book. We also record which page you completed the fit check on, and — if you arrived from one of our outreach emails via a tagged link — the short campaign tag in that link, so we can tell which message you came from. The tag identifies the message, not you.
Where your visit came from. So that we can tell which channels send us companies we can actually help, we record these values, when they exist:
- the campaign source tag in the link you arrived on (utm_source), if it had one
- the campaign medium tag (utm_medium), if it had one
- the campaign name tag (utm_campaign), if it had one
- the campaign content tag (utm_content), if it had one
- the campaign term tag (utm_term), if it had one
- the path of the first page you opened on this site during the visit
- the domain name of the site that linked you here, if there was one
We record the path of that first page but never its query string, and the domain name of the referring site but never the full address you came from. Your browser keeps these values in its session storage — a first-party store that is not a cookie and is cleared when you close the tab — and sends them to our own server, and nowhere else, with each of the events listed below, starting with the one that records that your visit began, and with the fit check if you submit it. This site does not use third-party advertising or cross-site advertising cookies. Optional Google Analytics uses analytics cookies only after you choose to allow it, as described below.
How the site is used. To tell whether this website and the fit check work, our own server records these first-party events:
- that a visit began, on which page, and whether the screen was phone-sized
- that the main button was clicked, and on which page
- that the fit check was started
- which step of the fit check was reached
- that the fit check was left unfinished, and at which step
- that the fit check was completed
- the fit result the form showed and the plan it suggested
- that the scheduling link was opened
- which page of the site was shown
- that the fit check could not continue or could not save, and the kind of problem (never what you typed)
- that an email or phone link was clicked, and where on the page
- that the fit check said it was not a fit before asking for any contact details, and which rule decided it
- which plan's button on the pricing page opened the fit check
Each event carries the page it happened on and the visit-origin values listed above when they exist. Each event also carries a random value your browser makes up for the current tab, so that the steps of one visit can be read in order — including the two our server records itself (the fit result and the scheduling link), which carry no other reference to your submission. That value is not a cookie; it is kept in your browser’s session storage, is not used to recognise you on a later visit or on any other site, and is gone when you close the tab. If you submit the fit check, the same value is saved with your submission, so we can see which pages led to it; until you submit, it is not tied to your name or email. If the fit check tells you it is not a fit, nothing you answered is sent to us — only the fact that it said so, and which rule decided it. No event contains your name, email, IP address or browser details — the only thing any event says about your device is, for the start of a visit, whether the screen was phone-sized. These first-party records are separate from optional Google Analytics, described below. Requests from automated crawlers are discarded rather than recorded; our server tells them apart by the description every browser and crawler sends about itself, reads it for that decision only, and does not store it.
Referrals from our clients. A current client can refer another business to us from their private page. We use the business name and any contact details they give only to reach that business about the referral, and we delete them if that business asks.
Optional Google Analytics
Google Analytics stays off until you select “Allow analytics” in Analytics preferences at the bottom of a public page. Declining does not affect the audit or the site. Your choice is saved on this browser for up to 180 days. Global Privacy Control and Do Not Track signals keep this optional measurement off.
If allowed, Google receives public page paths and events for audit starts, saved audit submissions, contact-link clicks and scheduler openings. An opening does not confirm a booking. We exclude form answers, names, email addresses, lead and visit identifiers, query strings, URL fragments and referring-page paths from our Analytics payloads. We include only the referring site’s hostname for traffic-source attribution. Google’s tag also processes browser and device information and network requests, and sets analytics cookies to measure usage. Advertising consent and Google signals are off. This optional measurement excludes private pages and marked internal or QA traffic.
You can withdraw permission through Analytics preferences. This stops optional collection, removes this site’s Google Analytics cookies and reloads the page if the tag was loaded; it does not erase information Google already received. The site’s first-party event records described above continue separately. Read how Google uses information from sites that use its services.
2. How we use your information
- Respond to your enquiry, prepare your free pipeline audit, and schedule a call if your answers show a strong fit and you want one.
- Assess fit and, if we work together, plan and deliver the agreed service.
- Maintain records of requests and protect against spam or misuse.
- Improve our website and the relevance of what we offer.
We do not sell your personal information, and we do not use it for unrelated advertising.
3. Consent and legal basis
The tick-box on the form is your consent to be contacted about your enquiry, and you can withdraw it at any time (see “Your choices and rights” below). Withdrawing it stops us contacting you; it does not by itself erase the record of your enquiry, which we keep on the basis of our legitimate interest in responding to business enquiries, running this website, and keeping records of who we have dealt with. You can ask us to delete that record too, and we will.
3a. Information about prospects we research for clients
Separately from this website, our service researches business contacts on behalf of our clients. That information comes from freely available public sources, is limited to business-context details, and always records the source it came from. If you have been contacted as a result of that work and want to be removed, tell us and we will add you to a suppression list as soon as your message is read, permanently — you will not be contacted again for that client. This policy covers our own handling of that data; the client on whose behalf the outreach is sent is responsible for their own compliance obligations as the sender.
Where a business contact replies with interest and agrees to speak with the client, we keep the conversation and pass it, with a warm introduction, to the client it concerns. On our Opportunity Engine plan we also record what the contact tells us in that conversation — their role, the need they describe, the timing, details of the building or the work, and the next step they agreed to — and hand it to that client so its team can follow up. We record what a contact says; we do not invent details a contact did not give, and we never contact consumers.
3b. Information about contractors we contact about our own service
We also research HVAC contractors from public sources — their own website and public listings — to decide whether to offer them this service, and we email the ones that appear to fit. We record the source of each fact we use, and we keep business-context details only: the company, its public contact paths, the people its own pages name, and why we think the service fits. If you have received an email from us and want no more, reply “stop” or email us, and we will suppress your address and stop all of B2B Lead Growth’s outreach to your company as soon as your message is read, permanently.
When you reply to one of our emails, our software reads the reply, and its text may be processed by our AI model provider, Anthropic, to sort it and to draft an answer. While automatic answers are switched on, software may send an answer to a routine reply (interest, a request for the work we offered, a question our published facts answer, a routine objection, or a time you suggest, answered with our booking link) after an independent automated reviewer and a pre-send stress test both pass it. A person reads and approves every other answer before it is sent, including a price negotiation, a proposal, a contract, a phone call or a complaint. A request to stop is acted on by code, whether or not a model also reads it.
4. How we store and share it
Form submissions are stored in our own records and in Google Workspace (Google Sheets, processed with Google Apps Script). Our email runs on Google Workspace, scheduling is handled through Google Calendar, and this website is hosted on Vercel. Research and drafting are assisted by an AI model provider, Anthropic, which processes public business information on our behalf — and, when we prepare your free audit, the business details needed for it, such as your company, website, service area and fit-check answers, and the replies people send to our own outreach emails, to sort them and draft answers. Our operating records, which include a note of each enquiry such as your company name and your fit-check result, are kept in a private code repository hosted by GitHub. For clients, payments are processed by Stripe and agreements are signed through SignWell; we never see or store your card details. Payment and signature notifications, and the link that connects a client’s mailbox, reach our systems through Cloudflare’s network.
These providers process data on our behalf so we can run the service; we don’t share your information with anyone else except where required by law. We limit access to your information to people who need it to respond to you or deliver the service.
4a. Your dedicated outreach mailbox, connected through Google
If you become a client, your outreach is sent from one dedicated Google Workspace mailbox on a commercial. subdomain of your company's own domain, which your Workspace administrator creates for this outreach only. You connect it in one of two ways. With our connector, you copy a short script whose source we publish into that mailbox's own Google account and authorize it there for these permissions: https://www.googleapis.com/auth/gmail.readonly, https://www.googleapis.com/auth/gmail.send, https://www.googleapis.com/auth/gmail.compose, https://www.googleapis.com/auth/userinfo.email (read, send and draft the mail in that mailbox, and see its address); we hold only a key that lets us call your copy of the script. With our Google sign-in, you grant one permission (the Gmail scope https://www.googleapis.com/auth/gmail.modify: read, send and organize the mail in that mailbox). We never ask for its password, and we request no other Google scope; calendar access, if it is ever needed, is a separate grant you give separately.
We use that access to send the outreach you approve, to read replies, bounces and opt-out requests, and to read the Sent folder for the conversations we take part in, so that we never answer a buyer a member of your team has already answered. Through the connector we also place a message you approved in that mailbox's Drafts for a person on your team to read and send, and we delete only a draft we placed there ourselves. Through our Google sign-in the permission is not limited to campaign mail, so every message that arrives in that mailbox is read; through the connector, at its recommended setting, only the conversations it took part in and the messages from or to the people our outreach wrote to are read. Either way, the mailbox must be used only for this outreach.
Messages we read from that mailbox are stored on our own production computer. They are classified, and any draft response and our automated pre-send review are prepared, by our own software and an AI model that runs on that same computer; we do not send the content of your mailbox to any outside AI provider. A person approves the exact words of every answer to a reply on your campaign before it is sent. We do not sell this data, use it for advertising, or use it to train AI models.
You can end our access at any time without asking us: disconnect the mailbox on your mailbox page, which stops sending at once, or remove our access in your Google account or your Google Admin console (for the connector, also by archiving its deployment), which stops it within minutes. When the engagement ends we revoke our sign-in grant at Google or switch off our access to your connector, delete our stored credential or key, and delete or de-identify copies of messages within the retention period in your agreement, keeping only what the law or our records require — including the do-not-contact list, which is kept on purpose.
B2B Lead Growth's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Data retention
We keep request information for as long as needed to respond to you, deliver any agreed service, and meet legal or record-keeping obligations. When it’s no longer needed, we delete it or remove identifying details. You can ask us to delete your information sooner at any time.
For clients, within 30 days of an engagement ending we delete or de-identify your data in our active systems, subject to any legal or record-keeping obligation. The one exception is the suppression and opt-out list — the record of people who asked not to be emailed — which we keep permanently as a minimal do-not-contact record and use for no other purpose (Terms §10).
6. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, or restrict the use of your personal information, to object to certain processing, and to withdraw consent. To make a request, contact us using the details in section 9 below and tell us what you’d like — we’ll act on verified requests within a reasonable time and won’t charge you for it. You can also ask us to stop contacting you and we will. We will not treat you differently for exercising any of these rights.
7. Children's privacy
This is a business-to-business service and is not directed to children. We do not knowingly collect personal information from anyone under 16.
8. Changes to this policy
We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above. Material changes will be reflected on this page.
9. Who we are, and how to contact us
B2B Lead Growth is the trading name of B2B Lead Growth LLC, a limited liability company formed in New Jersey, which is responsible for the information described in this policy. Full registered business details are available on request.
For anything to do with this policy or your information — including access, correction, deletion, or asking us to stop contacting you — email nishanth@b2bleadgrowth.com. You do not need to fill in any form, and we will not ask you for more information than we need to find your record and verify the request.