Privacy Policy
This policy explains what personal data B2BLCC collects through b2blcc.com, why, how long it is kept and what your rights are. Last updated 5 November 2026.
Who we are
B2B Lead Connect Consulting (B2BLCC) is the data controller for the personal data described here. It is run by Samuel Ilelaboye, based in London, United Kingdom. For anything to do with your data, email sam@b2blcc.com.
What we collect and why
- Contact form enquiries: your name, email, optional phone and company, and your message. Used to reply to you. Lawful basis: legitimate interest in responding to an enquiry you sent us.
- Downloads and the video library sign-up: your email address, and for paid guides your name and payment details (handled by Stripe, see below). Used to deliver the item you asked for and, where you opted in, to send you related updates. Lawful basis: contract for the delivery, consent for any updates.
- Courses and the members area: account details (name, email, password hash, optional profile fields) and your progress. Used to provide the course or membership you bought. Lawful basis: contract.
- Payments: amount, product and Stripe reference. Full card details never reach our systems; Stripe processes them as an independent controller. Lawful basis: contract and our legal duty to keep financial records.
- Security and abuse prevention: short-lived records of IP address and endpoint used to rate-limit forms, plus server logs. Lawful basis: legitimate interest in keeping the site working.
The public pages of b2blcc.com set no cookies and run no advertising or analytics scripts. See the cookie statement for the full picture.
Who we share it with
We use a small number of service providers to run the site. They process data on our instructions under their standard data-processing terms, and some are outside the UK under the UK international data transfer addendum:
- Vercel (hosting and file storage)
- Neon (the database)
- Stripe (payments; an independent controller for card data)
- Google Workspace (our email) and Resend (transactional and member emails)
- Google (calendar sync, only when you book an appointment with a connected calendar)
We do not sell personal data, and we do not share it with advertisers.
How long we keep it
- Contact form enquiries: 3 years, then deleted.
- Member accounts: 5 years after your last login, then anonymised.
- Email delivery logs: 3 years, then deleted.
- Payment records: 6 years, as required by HMRC.
- Rate-limiting records: days, cleared by a weekly job.
These periods are enforced by scheduled jobs, not by hand. You can ask for earlier deletion at any time (see your rights below).
Your rights
Under the UK GDPR you can ask us to: tell you what data we hold about you (a subject access request), correct it, delete it, restrict or object to how we use it, or give it to you in a portable format. Where we rely on consent, you can withdraw it at any time. Email sam@b2blcc.com; we respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Traffic to the site is encrypted (HTTPS, with HSTS). Passwords are stored as salted hashes, calendar tokens are encrypted at rest, and access to the database and admin area is limited to the founder.
Changes
When this policy changes, the date at the top changes with it. Material changes to how we use your data will be announced to affected members by email.