Privacy policy

The data controller is LEADGOAT LLC, a limited liability company (LLC) formed in the State of New Mexico, United States, registered with New Mexico Secretary of State under Entity ID 0008137159 (articles of organisation filing number 3314202), whose principal and mailing address is 539 W. Commerce St #1964, Dallas, TX 75208, United States (hereinafter “Quotbox” or “we”).

For any question about your data or to exercise your rights: [email protected].

Quotbox does not sell containers: we forward quote requests to professional partners, who pay us for this service.

• When collecting, verifying and forwarding requests, Quotbox acts as a data controller.
• Once a partner has purchased a request, it becomes the controller of its own processing of the data received (contacting the requester, preparing a quote and managing the business relationship). It undertakes to comply with the GDPR where it applies, other applicable data protection rules and marketing rules, in accordance with our terms and conditions of sale.

• Identity and contact details: surname, first name, email, telephone and, where applicable, company name and national business registration number.
• Project: product sought, purchase or hire, condition, quantity, intended use, timeframe, budget, delivery requirements and free-text message.
• Location: the project's country, postcode and municipality, together with the region and province derived from them.
• Evidence of consent: the exact wording accepted, in the form's language, the maximum number of professionals it states, the version of that wording, date and time, and form page. When your request is forwarded to us by another website (for example a website in our network), we retain the consent wording shown to you there.
• Language: the form's language, used for the emails we send you.
• Technical data: IP address (retained only as an irreversible hash), browser type, source page and campaign parameters.

Required fields are identified on the form: without them, your request cannot be processed.

• Forwarding your request to a maximum of 5 professionals, and never to more professionals than the number stated in the wording you accepted, so that they can contact you by telephone, email or SMS to offer you a quote. Legal basis: your consent, given by ticking a box that is not pre-ticked, valid for 12 months and withdrawable at any time.
• Offering you other offers related to your project for a maximum of 12 months. Legal basis: your optional consent, given separately.
• Checking request quality and preventing fraud (duplicates, false numbers, spam and suppression list). Legal basis: our legitimate interest in providing a reliable service.
• Informing you of the identity of the professionals who have received your request and responding to requests to exercise your rights. Legal basis: our legal obligations.
• Retaining evidence of your consent and any withdrawal. Legal basis: our legal obligations and our legitimate interest in being able to demonstrate it.

• Quotbox, operated by LEADGOAT LLC, a US company, which receives your request and contact details to verify and forward them.
• Professional partners selling or hiring out containers who purchase your request, up to the number stated in the wording you accepted (a maximum of 5). The name of each is sent to you by email whenever your request is forwarded, together with their town or city, telephone number and website where provided. A partner may be established in another country where the service is offered. Until a partner purchases your request, it sees only an anonymous preview, with no name, email, telephone number or precise address.
• Our technical providers (hosting, email delivery and other services described below), within the scope of their tasks.
• Administrative or judicial authorities, where required by law.

Your data is not disclosed to other third parties outside the circumstances described in this policy. Possible international processing and transfers are addressed in the section on providers.

• Your request is offered to new professionals only for 10 days after publication.
• Your consent to be contacted is valid for 12 months from your request.
• Your data is retained for a maximum of 3 years from collection, then deleted or irreversibly anonymised.
• If you withdraw your consent, your contact details are no longer forwarded, partners that have received them are informed that they must no longer contact you, and only evidence of your consent and its withdrawal is retained for the applicable limitation period.

You can withdraw your consent at any time, without having to provide a reason:

• by clicking the withdrawal link in each of our emails;
• by writing to [email protected].

Quotbox acts on the withdrawal immediately. Professionals who have already received your request are informed and must cease all contact. You can also object directly to each professional who contacts you.

Professional partners call you only because you expressly consented when submitting your request, and only about that request. They undertake to comply with the rules applicable in the requester's country, including consent, permitted days and times, number of calls and local opt-out lists. They must clearly identify their business and the source of your contact details, and cease all contact as soon as you ask.

• Account: name, business email, telephone, password (stored in an irreversible encrypted form) and language.
• Business: country, company name, national business registration number, VAT number and the result of its VIES verification (published company name and date), address, website and description.
• Service usage: targeting, alerts, lead purchases, sales follow-up (statuses, notes, reminders and amounts), complaints and quality ratings.
• Billing: subscription, top-ups, invoices and credit history. Payment card data is processed exclusively by our payment provider and is never disclosed to us.
• Technical logs: sign-ins and sensitive actions, for security purposes.

• Account creation and management, provision of the platform, alerts, mini-CRM and service emails. Legal basis: performance of the contract (our terms and conditions of sale).
• Business verification (registration number and VAT number through VIES), fraud and abuse prevention, and security. Legal basis: our legitimate interest, and our legal obligations regarding the VAT treatment of invoices.
• Billing and accounting. Legal basis: our legal obligations.
• Service improvement and anonymous statistics, for example the average quality of leads by source website. Legal basis: our legitimate interest.
• Informing requesters: whenever a request is purchased, the partner's company name, town or city, telephone number and website are sent by email to the requester concerned. Legal basis: our obligation to inform requesters of the recipients of their data.

• Account data: throughout the contractual relationship, then for 3 years after it ends to manage any disputes and for marketing purposes.
• Invoices and accounting records: 10 years under our retention policy.
• Sales follow-up for leads (notes and statuses): until the data of the requester concerned is deleted, meaning a maximum of 3 years after their request.

LEADGOAT LLC is a US company. Depending on the features used, the following technical providers are involved in operating the service:

• platform hosting: Hostinger (hosting provider contact);
• delivery of emails and notifications required for the service;
• secure processing of online payments, where this payment method is offered;
• geocoding for certain requests: OpenStreetMap's Nominatim service (OpenStreetMap Foundation, United Kingdom), which receives the project's country, postcode and municipality;
• delivery of SMS verification codes, where this feature is enabled.

VAT numbers of relevant partners established in the European Union are verified through the European Commission's VIES system.

Hosting and processing countries depend on the infrastructure and providers used. Where the GDPR applies, its requirements concerning international transfers must be respected. For information about recipients, processing countries and the conditions or safeguards applicable to a transfer involving your data: [email protected].

We implement appropriate technical and organisational measures to protect your data: encrypted communications (HTTPS), irreversibly encrypted passwords, IP addresses retained only as hashes, access to requesters' contact details restricted to partners that have purchased the request, and logging of sensitive actions.

Depending on the legislation applicable to your situation, you have rights in relation to your data, including:

• the right of access and rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to object, particularly to direct marketing;
• the right to portability of the data you have provided to us;
• the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before that withdrawal.

To exercise these rights, write to [email protected], specifying the email address or telephone number concerned. We will respond within one month, which may be extended by two months if the request is complex. You may be asked for proof of identity if there is reasonable doubt.

You may lodge a complaint with the competent data protection authority under applicable rules. Where the GDPR applies, its remedies remain available, including the complaint provided for by Article 77 before the competent authority for the place of habitual residence, work or the alleged infringement. A list of European authorities is available at edpb.europa.eu. Access to competent courts is not excluded by the contractual clauses applicable to professional partners.

We use only cookies that are strictly necessary for the operation of the website (sign-in, language and display preferences), subject to applicable cookie rules. They are listed in our legal notice.

This policy may change, particularly to reflect changes in regulations or our services. The last updated date appears at the top of this page. In the event of a significant change, partners are informed by email. This policy may be offered in several languages: in the event of a discrepancy, the English version prevails, subject to applicable mandatory provisions.