Legal
Privacy notice.
This notice explains how BuyerState Ltd uses personal information when you visit buyerstate.app, contact us, request a sample report, use our services, or appear in business research we lawfully compile.
Last updated: 20 August 2026
1. Who we are
BuyerState Ltd is the controller of personal information used for its own business purposes. When we process information solely on a client’s documented instructions, that client may be the controller and its privacy notice will also apply.
BuyerState Ltd is newly incorporated. Its company number, registered office address and jurisdiction of registration will be added here when the Companies House record becomes publicly available.
Email: jay@buyerstate.app
2. Information we collect
Information you give us
- Your name, work email, company and contact details.
- Enquiry messages, sample-report briefs, targeting criteria, commercial priorities and files you choose to upload.
- Client, contract, billing and service communications.
Business research information
- Professional identity, employer, role, work contact details and public professional profiles.
- Company facts, public business events, published statements and the sources supporting them.
- Research quality, suppression and compliance status needed to prevent inappropriate contact.
We do not intentionally collect special-category information for prospect intelligence.
Technical information
- IP address, browser, device, requested pages, timestamps, referral information and security logs generated when the website is delivered.
- Privacy preferences and an optional sample-form draft stored on your own device. See our cookie notice.
3. How and why we use information
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Respond to enquiries and sample requests | Contact details, company and brief | Steps before a contract and our legitimate interests in responding to business enquiries |
| Provide and improve BuyerState services | Client instructions, research inputs, reports and communications | Contract and legitimate interests in operating and improving the service |
| Research relevant B2B companies and professional contacts | Public and licensed professional information | Legitimate interests in providing accurate, relevant B2B intelligence, balanced against individual rights |
| Protect the website and service | Technical and security data | Legitimate interests in security, fraud prevention and service reliability |
| Meet legal and accounting duties | Contract, billing and compliance records | Legal obligation and legitimate interests in establishing or defending legal claims |
4. Where information comes from
We obtain information directly from you, from our clients, and from lawful public or licensed sources. These may include company websites, Companies House, public professional profiles, reputable news and trade publications, public registers, search services, and specialist business-data providers.
5. Who we share information with
We share information only where necessary with service providers supporting website hosting and forms, email, secure cloud storage and databases, document generation, and AI-assisted processing. Current infrastructure includes Netlify and Supabase. We may also share information with professional advisers, regulators, courts, law-enforcement bodies, or a buyer of our business where lawfully required.
Service providers must process information under appropriate contractual and security controls. We do not sell personal information or provide it to data brokers for their independent marketing.
6. International transfers
Some service providers may process information outside the United Kingdom. Where this happens, we use an applicable UK adequacy regulation or contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum, together with appropriate security measures.
7. How long we keep information
- Enquiries and sample requests: normally up to 24 months after the last meaningful contact.
- Client and financial records: normally up to seven years after the relationship ends where required for tax, accounting or legal purposes.
- Prospect-research records: while needed for the client purpose, quality assurance, suppression and legal compliance, then deleted or anonymised.
- Optional form drafts: up to 30 days on the user’s device.
We may keep information longer where required by law, a dispute, fraud prevention, or a valid suppression request. We review retention against purpose, sensitivity and legal requirements.
8. Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to our use of your information, and to receive portable information. Where processing relies on consent, you may withdraw it at any time.
You may object at any time to processing based on legitimate interests, including B2B research or direct marketing. We will stop unless we can demonstrate compelling lawful grounds. Direct-marketing objections are honoured without exception.
To exercise a right, email jay@buyerstate.app. We may need to verify your identity.
9. Complaints
Please contact us first so we can try to resolve your concern. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.
10. Security, children and changes
We use proportionate technical and organisational measures to protect information. No internet service can guarantee absolute security.
BuyerState is a business service and is not directed at children.
We may update this notice when our service, suppliers or legal duties change. The current version and date will remain on this page.