LEGAL

Privacy notice.

We are an outbound sales agency, so we hold business contact details for people who never gave them to us directly. This notice explains what we hold, where it came from, what we do with it, and how to make us stop.

IN SHORT

We contacted you and you want it to stop? Email zaid@salessourcers.com with the words do not contact. We will remove you from every campaign we run and keep only the minimum record needed to make sure you are not added again.

Who we are

SalesSourcers FZ-LLC is the data controller for the personal data described in this notice. We are a company incorporated in the Ras Al Khaimah Economic Zone, United Arab Emirates. Our full registration and registered-office details are available on request.

For anything to do with personal data — a question, a request, an objection or a complaint — write to zaid@salessourcers.com. It reaches the person responsible for data protection at SalesSourcers directly.

We provide outsourced sales development to business clients: we research their market, identify the companies and people likely to need what they sell, contact those people by phone and email, and arrange introductory meetings. Nearly everything in this notice follows from that.

This notice applies to the UK General Data Protection Regulation and the Data Protection Act 2018, the EU General Data Protection Regulation, the Privacy and Electronic Communications Regulations 2003, and UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Which of these applies to you depends on where you are, and you may be covered by more than one. Where they differ, we apply whichever gives you the stronger protection.

The two ways we end up with your data

It matters which one you are, because the explanations below differ.

  • You came to us. You filled in a form, booked a call, emailed us or applied for a job. Everything you gave us, you gave us knowingly.
  • We came to you. You are a potential customer for one of our clients, we found your business contact details, and we got in touch. You never gave us anything. This is the situation most people reading this notice are in, and it is covered in its own section below.

If you contacted us or used this website

When you submit the strategy request form we collect your name, work email address, company name and company website. Our server also records the IP address the submission came from, and we keep that in our server logs.

We use all of this to research your market, produce the outbound strategy you asked for, send it to you, and follow up about it. The lawful basis is our legitimate interests in responding to a business enquiry you made of us, and in offering you the service you expressed interest in. If you book a call with us, we also use it to arrange and hold that meeting, and to keep notes of what we discussed.

We use the IP address for a narrower purpose: to rate-limit the form and to check that the website and email domain you entered actually exist. That is legitimate interests too, specifically keeping the form usable and keeping automated spam out of our systems. We do not use it to profile you or work out where you are.

Giving us the data is voluntary, but we cannot produce a strategy without the name, email, company and website, so the form will not submit without them.

If you apply for a job with us, that is handled through our recruitment portal at jobs.salessourcers.com and governed by the notice presented to you there.

If we contacted you

This is the section to read if we called you or emailed you out of the blue.

What we hold. Your name, job title, employer, work email address, work telephone or mobile number, the public professional profile we found you through, and the business reason we thought you were worth contacting. Where we have spoken, we also hold notes of the conversation and, where you were told at the start of the call, a recording of it. We do not seek out or want anything about your private life, and we do not knowingly hold any special category data about you.

Where we got it. Not from you. We build prospect lists from a mixture of: licensed business contact data providers; publicly accessible professional profiles and company websites; public registers and accreditation registers; and job advertisements. We then verify the email address or phone number is live before using it. If you ask us, we will tell you specifically where your details came from.

Why, and on what basis. We use it to contact you once or a few times about a product or service we believe is relevant to your job, and to arrange a meeting if you are interested. Our lawful basis is legitimate interests — ours and our client's interest in reaching potential business customers, balanced against your interest in not being bothered. We have assessed that balance and we keep the assessment on file. We rely on this basis only for contacting you in your professional capacity, about something plausibly relevant to your role, at your work contact details.

You can object, and we will stop. You have an absolute right to object to direct marketing. There is no balancing test and we do not get to weigh it against our interests. Tell us and we stop, permanently. Email zaid@salessourcers.com, reply to any email we sent you asking us to stop, or say so on the phone. We will add you to our suppression list so that a later campaign does not pick you up again — that is the one record we keep after you object, and we keep it for that reason alone.

Calls. Where we make marketing calls to UK numbers we screen against the Telephone Preference Service and the Corporate Telephone Preference Service and do not call registered numbers unless we have been told we may. We apply the equivalent screening in the other countries we call into. If we have called you on a registered number, tell us and we will both stop and look at why it happened.

When we are working for a client

Two different things happen, and the distinction decides who you ask about what.

  • Prospect data we source ourselves. We decide who to put on the list, where to get the details and how to make contact. We are the controller for that, which is what this notice covers.
  • Our client's own data. Where a client gives us their existing contacts, CRM records or suppression lists to work from, they decide what happens to it and we act on their instructions as their processor, under a written contract. For that data, their privacy notice applies, not this one, and we will tell you which client is involved if you ask.

Once a meeting is arranged, we pass your name, job title, employer and contact details to the client so they can hold it. From that point they are a controller of your data in their own right and handle it under their own notice.

Who else sees it

We do not sell personal data, and we do not share it for anyone else's marketing.

We share it with the client whose campaign you were contacted for, as described above. Beyond that it is handled on our behalf by service providers under contract, who may only use it to provide their service to us: cloud hosting and infrastructure; the dialler and telephony platform our callers use; the email sending platform our campaigns run on; email and phone verification services; our own CRM and campaign systems; meeting scheduling; call recording and transcription; and the data providers described in the section above. We will tell you which specific providers are involved in handling your data if you ask.

We will also disclose personal data where we are legally required to, or where it is necessary to establish or defend a legal claim.

Where your data goes

We are based in the United Arab Emirates and our team works across several countries, so if you are in the UK or the EU your data is transferred outside your home jurisdiction when we handle it. Some of our service providers are in the United States.

The UAE is not currently covered by a UK or EU adequacy decision. Transfers of UK and EU personal data to us therefore rely on the safeguards permitted under Article 46 of the GDPR — the UK International Data Transfer Agreement or Addendum, and the European Commission's Standard Contractual Clauses — together with an assessment of the protection available in the destination country. We apply the same approach to service providers outside the UK and the EEA. You can ask us which safeguard covers a particular transfer of your data.

If you are in the UAE, your data may be transferred outside the UAE to our clients and service providers. We make those transfers on the bases permitted by the UAE PDPL. You can ask us for details of the safeguards covering any transfer of your data, and we will provide them.

How long we keep it

  • Prospect data in an active campaign: for as long as the campaign it belongs to is running, and for a limited period afterwards so we do not re-contact someone we have recently approached. We delete it once the campaign is closed and that period has passed.
  • Call recordings and transcripts: for as long as they are needed for coaching, quality review and resolving any dispute about what was said.
  • People who asked us to stop: the minimum needed to keep you suppressed — name, contact detail and the fact you objected — kept indefinitely, because deleting it is how you end up contacted again.
  • Strategy requests and enquiries: for as long as the conversation is live, and for a reasonable period afterwards in case you come back to us.
  • Client records and anything needed for accounts, tax or a legal claim: as long as the law requires.
  • Server logs containing IP addresses: a short operational period only — they exist to rate-limit the form, not to build a record of visitors.

Where we have not set a fixed period above, we keep the data only as long as the purpose it was collected for still applies, and review it against that. When a period ends we delete the data or anonymise it so it can no longer identify you. You can ask us what currently applies to your data and we will tell you.

Cookies and similar technologies

We do not use analytics, advertising or tracking cookies on this website. There is no advertising pixel, no analytics tag and no cross-site tracking. Nothing on this site builds a profile of you or follows you anywhere else.

What the site does store:

  • A dismissal record. If you close the strategy offer, your browser stores a single value (ssOfferDismissedUntil) in local storage so we do not show it to you again for seven days. It contains a date and nothing else, it never leaves your browser, and clearing your site data removes it.
  • Spam protection. When you open the strategy form we load Cloudflare Turnstile, which checks you are not a bot. It is loaded only at that point, not when you arrive on the site, and Cloudflare receives your IP address to perform the check.
  • Embedded content you choose to open. The booking calendar is provided by Calendly and client videos are hosted on YouTube. Both load only when you click to open them, and neither runs until you do. Once you open one, that provider may set its own cookies and will receive your IP address, under its own privacy policy. If you do not open them, nothing is set.

Fonts and other files the pages need are served from our own domain, so loading a page on this site does not send your IP address to any third party.

Your rights

Depending on where you are, you have some or all of the following rights. They are free to use and you do not have to give a reason.

  • To be told what we hold about you and where we got it.
  • To get a copy of it.
  • To have it corrected if it is wrong or out of date.
  • To have it deleted, or under the UAE PDPL to request its destruction.
  • To object to direct marketing, which is absolute — we must stop.
  • To object to other processing based on legitimate interests.
  • To restrict what we do with it while a dispute about it is resolved.
  • To receive it in a portable form, or have it sent to someone else.
  • To withdraw consent where we relied on consent, without affecting what we did before you withdrew it.
  • Not to be subject to a decision made purely by automated means that has a legal or similarly significant effect on you. We do not make any such decisions.

Email zaid@salessourcers.com and we will respond within one month, or within 30 days where the UAE PDPL applies. If a request is genuinely complex we may need longer, and we will tell you why within that first period. We may ask you to confirm who you are before we release data about you, which is to protect you rather than to delay you.

Complaints

Please come to us first — most things are quicker to fix directly. But you can complain to a regulator at any time, and you do not need our permission or to have asked us first.

  • United Kingdom: the Information Commissioner's Office, ico.org.uk/make-a-complaint, helpline 0303 123 1113.
  • European Union: the supervisory authority in the country where you live or work.
  • United Arab Emirates: the UAE Data Office.

Changes to this notice

If we change how we handle personal data we will update this notice and change the date below. Where a change materially affects you and we have a way of reaching you, we will tell you directly rather than relying on you to come back and read it.

Last updated 8 October 2026. Version 1.0.