Privacy notice

Who we are

The Pipeline Partner, Inc. (“we”, “us”) is a corporation organised under the laws of the State of New York, with its registered address at 575 Lexington Avenue, New York, NY 10022, United States.

We have appointed a Data Protection Officer. You can contact them at privacy@thepipelinepartner.io with any question about this notice or about personal data we hold.

The two roles we act in

This distinction matters, and our customers’ legal teams look for it.

As controller

For personal data collected through properties we own and operate — our newsletters, resource libraries, and events — we determine why and how the data is processed. That includes contact details, professional role information, the content engaged with, and the technical record of consent: timestamp, IP address, and the exact consent wording displayed at capture.

As processor

When we deliver records to a customer under a written agreement, we act on that customer’s documented instructions. Our obligations in that role are set out in the data processing agreement we sign with them, and those terms take precedence over this notice where the two differ.

What we collect, and why

• Contact and professional data — name, business email address, job title, function, seniority, employer, and business location, provided at the point of registration. Lawful basis: consent.
• Engagement data — which asset was requested, when, and from which property. Lawful basis: consent, and our legitimate interest in maintaining an auditable delivery record.
• Consent evidence — timestamp, IP address, and the exact opt-in wording shown. Lawful basis: legal obligation, and our legitimate interest in being able to demonstrate compliance.
• Qualification responses — where a record is telephone-qualified, the answers given and, where notice has been provided, a recording of the call. Lawful basis: consent.
• Firmographic attributes — company size, industry, and revenue band, matched from business data providers to verify the record against a campaign specification. Lawful basis: legitimate interests.

We do not knowingly collect personal data from anyone under 16, and we do not collect special category data as defined by the GDPR.

Who we disclose data to

We disclose personal data to the customer for whose campaign the record was collected, and to the advertiser named in the consent wording shown at the point of capture. Each record is disclosed to one customer only.

We also use the following service providers, who process personal data on our behalf under written contract:

• Microsoft Corporation — cloud hosting, business productivity, and email
• HubSpot, Inc. — customer relationship management and marketing operations
• Twilio Inc. (SendGrid) — transactional and campaign email delivery
• Zoho Corporation — business applications and email
• NeverBounce (ZoomInfo Technologies) — email address verification
• ZeroBounce — email address verification
• AtData — email intelligence and contact data verification

This list is current as at the date below. We provide it to customers before contract, notify them before any addition or replacement, and supply it to anyone else on request.

International transfers

We are established in the United States and transfer personal data from the United States to service providers and customers located in other countries, including outside the United States and the European Economic Area.

Where personal data originating in the EEA or the United Kingdom is transferred to or from us, we rely on the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum where applicable, and any supplementary measures identified as necessary. A copy of the relevant clauses is available on request from privacy@thepipelinepartner.io.

How long we keep it

We retain personal data, including recordings of qualification calls, for 24 months from the date of collection, or until the data subject asks us to delete it, whichever comes first. On expiry we delete the data or irreversibly anonymise it.

Where we are required to retain consent evidence for longer to meet a legal or contractual obligation, we keep only the minimum record necessary for that purpose.

Your rights

Depending on where you are located, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to our processing of it, to withdraw consent at any time, to receive a portable copy, and not to be subject to a decision based solely on automated processing. Withdrawing consent does not affect processing already carried out before the withdrawal.

To exercise any of these rights, email privacy@thepipelinepartner.io. We will verify your identity before acting on a request, which normally means confirming control of the email address on the record. Once verified, we respond within one month. Where a request is complex or you have made several, we may extend that period by up to two further months and will tell you within the first month if we do.

If you are unhappy with our response, you may complain to your supervisory authority. In the United Kingdom this is the Information Commissioner’s Office; in the EEA it is the authority in your country of residence.

Notice to California residents

This section applies to residents of California and supplements the notice above. It is provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act. The exemption that previously applied to business-to-business contact data has expired, so this section applies to professional contacts in full.

Categories we collect

• Identifiers — name, business email address, employer, and IP address.
• Professional or employment-related information — job title, function, and seniority.
• Internet or other electronic network activity — the content requested, and the time and context of the request.
• Audio recordings — where a qualification call is recorded and notice has been given.
• Commercial information — the campaign a record was collected for and the qualification responses given.
• Inferences — segment and qualification attributes derived from the above.

We do not collect sensitive personal information as that term is defined in the CPRA, and we do not use or disclose personal information for purposes that would give rise to a right to limit.

Sources

Directly from you, at the point you register on a property we own and operate. We also match your employer against business data providers to verify firmographic attributes.

Purposes

To deliver the record to the customer whose campaign it was collected for, to verify it against that campaign’s specification, to maintain auditable evidence of consent, and to meet our legal obligations.

Disclosure and sale

We disclose the categories listed above to the customer for whose campaign the record was collected, to the advertiser named at the point of capture, and to the service providers listed earlier in this notice.

Because we transfer personal information to customers in exchange for payment, this constitutes a sale of personal information as that term is defined under California law. It is a sale in the statutory sense only: we do not operate an open marketplace, we disclose personal information only to the single customer whose campaign it was collected for, and we do not sell the personal information of consumers we know to be under 16.

We do not share personal information for cross-context behavioural advertising.

Your California rights

• Right to know — the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties to whom we disclosed it.
• Right to delete — subject to the exceptions permitted by law.
• Right to correct — inaccurate personal information we hold about you.
• Right to opt out of sale — see the section immediately below.
• Right to non-discrimination — we will not treat you differently for exercising any of these rights.

Submit a request by emailing privacy@thepipelinepartner.io. We will verify your identity before acting on it and respond within 45 days, extendable by a further 45 days where permitted, in which case we will tell you. You may use an authorised agent, in which case we will require written proof of their authority and may still verify your identity directly.

Retention

We retain each category of personal information for 24 months from collection, or until you ask us to delete it, whichever comes first.

Do not sell or share my personal information

California residents have the right to direct us not to sell their personal information. To exercise it, email privacy@thepipelinepartner.io with the subject line “Do Not Sell”, from the email address on the record where possible. We will verify the request and action it within 15 business days, and we will not sell that record thereafter.

This website sets no advertising or analytics cookies and does not collect personal information through trackers, so there is nothing to opt out of at the point of browsing. Where we receive an opt-out preference signal such as Global Privacy Control from a browser, we treat it as a valid opt-out request for any personal information we can associate with it.

Changes to this notice

We will post any changes on this page and update the date below. Where a change materially affects how we use data collected under consent, we will notify affected individuals directly.

Last updated: 17 May 2026