Privacy Policy
Two different sets of people appear in this policy: our customers, and the recipients our customers email. We hold data about both, for different reasons, and this page separates them clearly rather than blurring them together.
1. Who we are
Outfrank Ltd, registered in England and Wales, is the controller for data about our customers and website visitors. For contact data our customers upload, we act as a processor — the customer is the controller. That distinction runs through everything below.
2. Data about our customers
When you open an account we hold your name, work email, company, billing details and the technical logs your usage generates. We rely on contract performance for most of this, and legitimate interest for security logging and fraud prevention.
Billing details are handled by Stripe. We never see or store full card numbers.
3. Data our customers upload
Contacts, custom fields and campaign content belong to the customer. We process them only to deliver the service: verifying addresses, sending messages, recording replies and reporting on outcomes.
We do not sell this data, share it between customers, or use it to train models. Our obligations here are set out in the Data Processing Addendum.
4. If you received an email sent through Outfrank
We did not choose to contact you — our customer did. They are the controller of your data and the right people to ask about why you were contacted, what they hold and to request erasure. The sender's identity is in the message.
If you cannot reach them, email support@outfrank.com and we will pass the request on and, where we are able, suppress your address across the sending customer's account.
5. Cookies and the website
Our marketing site uses a small number of cookies, described in the Cookie Notice. The application itself uses only what is needed to keep you logged in and secure.
6. Where data is held
In the region chosen for each workspace — EU (Ireland) or US (Virginia). Data does not leave the chosen region, including backups. Sub-processors and their regions are listed on our Security page.
7. How long we keep it
Customer account data is kept for the life of the account and 60 days after closure. Uploaded contacts are kept until the customer deletes them. Rejected import rows are purged after 30 days. Security logs are kept for 12 months.
8. Your rights
Depending on where you live you may have rights of access, correction, erasure, portability, restriction and objection. Customers can exercise most of these directly in the dashboard; for anything else, email support@outfrank.com.
We respond within 30 days and we do not charge for reasonable requests. You can also complain to your local supervisory authority — in the UK, the ICO.
9. Changes
Material changes are emailed to account holders at least 30 days ahead. The date at the top of this page always reflects the current version.