Privacy Policy

Last updated: Sun 30 Aug 2026

This Privacy Policy explains how Inbox Leads Limited, trading as GxPinnacle (“we”, “us”, “our”), collects, uses, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Inbox Leads Limited (company number 13995701), trading as GxPinnacle, is registered in England and Wales. Registered office: Unit 3 Wellbrook Court, Girton, Cambridge, CB3 0NA, United Kingdom.

2. Personal Data We Collect

• name and company details
• email address
• billing and invoice information, only after commercial sales open
• account activity and access records
• communications with us

3. How We Use Personal Data

We use personal data to operate the public catalogue and account services, communicate with users, protect the platform, and comply with legal obligations. GxPinnacle is currently in pre-trading mode: it does not accept commercial orders or payments. Billing data will be processed only after a separate commercial opening.

4. Legal Basis for Processing

We process personal data on the basis of contract performance, legal obligations, and our legitimate business interests.

5. Cookies

We currently use essential cookies only. We do not use analytics, advertising, or tracking cookies at this time.

6. Data Sharing & Processors

We use trusted third-party service providers to support our operations, including:

• Supabase (authentication, database, and storage)
• Brevo (transactional email delivery)

Customer data is not currently sent to Xero because commercial sales and invoicing are disabled in pre-trading mode.

7. International Users

While we are based in the United Kingdom, we may serve users worldwide. Where personal data is transferred internationally, appropriate safeguards are applied.

8. Data Retention

• Invoices and financial records, if commercial sales open: 6 years
• Active account data: for the duration of the account
• Inactive accounts: up to 24 months
• Support communications: up to 24 months

9. Your Rights

You have the right to access, correct, or request deletion of your personal data, and to object to certain processing activities, subject to applicable law.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

11. Contact

For privacy-related enquiries, please contact us at accounts@gxpinnacle.com.