Who is responsible
Unfair Advantage Ltd, Meleti 2C, 8570 Pegeyia, Cyprus, operates Postelix. Our privacy contact is help@postelix.com.
We act as a controller when we independently collect and maintain professional profiles and public activity for our B2B research service. A business receiving this information is responsible for its own research, marketing and other uses.
We also provide services under a customer's documented instructions, including handling their CRM records, connected accounts and requested email lookups. For those activities we act as a processor where the actual service and agreement support that role. Our Privacy Policy explains account, integration and website processing.
Information and sources
Professional research can include your name, professional profile URL, headline, job role, current or past employer, professional biography, approximate location and relevant public professional posts, comments or reactions. It can also include the dates and sources of those signals and our assessment of their business relevance.
Sources include publicly available LinkedIn profiles and activity, company websites, public professional event pages, company news and filings, and professional-data services. Our source-collection providers can include HarvestAPI and Apify. The source or combination of sources varies by feature and record. You can ask us which sources we hold for your information.
Customer-supplied CRM information, private messages and private relationship information are handled for that customer's workspace. They are outside our independently reusable public professional dataset.
We restrict the service to professional business purposes. Targeting based on health, political or religious beliefs, ethnic origin, sexual orientation or other sensitive personal characteristics is prohibited. Please contact us if you believe irrelevant or sensitive information appears in a record about you.
Purpose and relevance
Postelix helps businesses identify professionals whose work may be relevant to their offering, understand public activity in their market and decide where to focus relevant business development.
We compare professional roles, company context and relevant public activity with a customer's stated business market. Software and AI can summarise the evidence and estimate relevance or interest. These assessments are inferences: reacting to a post is not proof that you intend to buy, attended an event or visited a particular website.
Customers can review and correct their market selections. The service must not be used to make decisions about employment, credit, insurance, housing or access to public services. We do not use the professional-relevance score to make those decisions about you.
Customer requested emails
A customer can request a work-email lookup for a person in its workspace, individually or through an enabled business rule. BetterContact is used for this enrichment. A found address is associated with the requesting customer's workspace and is not added to a shared contact-email database for other customers.
The customer determines its purpose for the lookup and subsequent use, subject to the applicable service agreement and law. The customer must give the information required for its processing and respect objections. Requesting an email is not the person's consent to marketing.
Keeping a requested email customer-specific does not remove our controller responsibilities for any separate professional-data research we carry out ourselves.
Our lawful basis
For independent professional research, we rely on legitimate interests under Article 6(1)(f) GDPR: providing proportionate B2B market research and helping businesses identify relevant professional contacts. Reliance on this basis requires a valid necessity and balancing assessment for the actual processing.
The assessment considers the business purpose, whether the information is necessary, the professional publication context, reasonable expectations, the effect of combining and sharing information, accuracy, retention and the ability to object. Public availability alone does not establish a lawful basis.
For services under customer instructions, that customer determines the lawful basis for its processing. The rules for sending marketing messages depend on the channel and country and can require consent independently of the basis for research.
How we provide information
This page is our public information for professional contacts. Individual information may also be delivered by us or through an agreed customer or other party, depending on the processing and the available contact route.
Where we consider an exception for information that would be impossible or require disproportionate effort to deliver individually, we assess the specific circumstances under Article 14(5)(b) GDPR. This includes contact availability, the effort involved, the privacy impact of our actual research and sharing, and safeguards. Having no email address does not automatically establish an exception.
Any exception must be documented and reassessed when relevant circumstances change. Our public information and your rights remain available. A customer's later message does not automatically replace information required for our earlier processing.
How long information is kept
We assess continued need by the defined professional-research purpose, a record's relevance to current business research, accuracy, changes in role or employer, the age and usefulness of supporting activity, and any objection or deletion request. Information that is no longer needed or is shown to be inaccurate is removed, corrected or restricted as appropriate.
Customer-directed information follows the customer's instructions and the applicable agreement. Customers are responsible for records they retain in their own CRM or exports. Limited legal, security and recovery records have separate retention purposes and access restrictions.
We may retain the minimum identifier necessary to honour an objection and prevent re-collection or re-contact. This suppression record is used to respect your choice, rather than to continue business targeting.
International processing
Our primary production database is in Ireland. Some source, hosting, support, integration and AI providers process information outside the EEA. An EU database location does not mean every processing step occurs in the EU.
International transfers must have an applicable GDPR basis, such as an adequacy decision or appropriate contractual safeguards with any necessary additional measures. Contact us for information about the providers and safeguards applicable to your data and how to obtain a copy.
Your rights
You can ask to access your information and sources, correct inaccuracies, request erasure, restrict processing or object. You can object at any time to processing for direct marketing, including related profiling. Other rights and exceptions depend on the circumstances.
Use our objection form to stop outreach and sourcing, or email help@postelix.com for access, correction, removal or other privacy requests. You do not need a Postelix account. We may ask for proportionate information to verify your identity before disclosing or changing personal information.
We respond without undue delay and normally within one month. If a lawful extension is necessary, we explain it within that first month. Where required, we communicate relevant corrections, restrictions or erasure to recipients.
You can complain to a supervisory authority, including the authority where you live or work or where an alleged infringement occurred. Our home authority is the Cyprus Commissioner for Personal Data Protection.
Information for customers
Your business is responsible for its own processing and privacy information. A customer-requested email lookup does not transfer all of Postelix's independent controller responsibilities to you.
We supply first-layer wording beside revealed emails. Use it with a complete notice identifying your organisation, actual purpose and lawful basis, sources, sharing, retention and rights. Complete the placeholders and keep the source statement accurate:
We obtained professional profile or activity information through Postelix to identify relevant business contacts. We use your details for [your specific business purpose]. Our privacy information, including how to object, is at [your privacy notice URL]. Postelix explains its independent professional-data research, sources and your rights at https://www.postelix.com/prospect-privacy.
Meet the applicable timing: ordinarily no later than one month after obtaining personal data, and earlier at first communication or disclosure where required. The clock does not necessarily begin at email enrichment. A person you never contact can still need a notice. Any exception requires its own assessment.
Keep a record of the notice, when and how it was provided and the result. Copying a template is not evidence of delivery. Agree any delivery of information on Postelix's behalf with us; each controller remains accountable for its own processing.