Last updated 15 September 2026
This notice explains what CatchLead Ltd (trading as HireTrigger) does with personal data. We are the data controller. Company no. 17079928, registered at 124 City Road, London, EC1V 2NX, United Kingdom.
The short version. We hold two kinds of personal data: details you give us when you enquire, and business contact details we use to introduce our clients to companies that are hiring. We do not sell personal data to advertisers, we run no tracking pixels or advertising cookies on this website, and you can have your details removed permanently by emailing us. One request is enough — it is honoured across every current and future campaign.
When you submit the enquiry form we collect your name, work email, agency name, the trade you place into, and your territory. We use it to send you the sample leads you asked for and to correspond about our service. The lawful basis is legitimate interests — responding to a business enquiry you initiated.
We keep enquiry records for up to 24 months, then delete them.
To provide our service we process business contact details of people responsible for hiring at companies — typically name, job title, employer, business email address and public professional profile. This is used to contact them on behalf of a client about a role their organisation has publicly advertised.
The lawful basis is legitimate interests: business-to-business outreach relevant to the recipient's professional role, balanced against their rights. We do not process special category data, and we do not target personal email addresses.
Licensed commercial data providers and publicly available sources such as employer job advertisements and company websites. We do not scrape LinkedIn or any platform in breach of its terms. Where a provider supplies data, we require them to have obtained it lawfully.
We do not sell personal data to advertisers or list brokers.
We are UK-based and most of the people whose data we process are in the United States. Where data moves between the UK, EEA and US it is covered by UK International Data Transfer Agreements, the EU Standard Contractual Clauses, or an adequacy decision, as applicable.
Under UK and EU GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. You can object to direct marketing at any time and we must stop.
If you are a California resident, the CCPA/CPRA gives you rights to know, delete, correct, and to opt out of the sale or sharing of personal information. We honour Global Privacy Control signals. Exercising these rights will never result in different treatment.
To exercise any of them, email [email protected]. We reply within 30 days and there is no charge.
Reply "no", "remove", or "unsubscribe" to any email from us, or email us directly. Your address goes onto a permanent suppression list and will not be contacted again by us or on behalf of any client. Suppression is permanent by design — it survives every future campaign and every system reset.
This website sets no cookies, runs no analytics, and embeds no advertising or tracking pixels. Our emails contain no open-tracking pixels. The only third-party request this page makes is to Google Fonts to load typefaces.
Access to personal data is restricted to those who need it, transmission is encrypted in transit, and suppression records are retained indefinitely — we must keep them to honour your opt-out. Other records are deleted once they are no longer needed.
Please contact us first. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk or your local supervisory authority.