Last updated: April 2026
LeadJaw is operated by AppJaw Ltd, 12, Melbourne Business Court, Millennium Way, Derby DE24 8LZ. We are registered with the UK Information Commissioner's Office under registration number ZC149414.
This policy explains what data we collect, why we collect it, how we use it and what rights you have over it. It covers visitors to www.leadjaw.com, users of the LeadJaw platform and people who contact us directly.
Who we are
LeadJaw is a B2B website visitor intelligence platform. We help businesses identify the companies visiting their websites using IP address lookup and company enrichment data.
When a visitor lands on a client website using the LeadJaw script, their IP address is collected and we attempt to match it against business network data. IP addresses that resolve to residential, mobile or consumer connections do not produce a match and no data about those visits is returned to the client dashboard. Visitors who cannot be matched to a business network are classified as anonymous. No personal data about individuals is returned to client dashboards through the IP identification process.
For the purposes of UK GDPR, LeadJaw, a trading company of AppJaw Ltd acts as both a data controller (for data relating to our own website visitors and customers) and a data processor (when processing visitor data on behalf of our clients).
For more detail on our data processing approach and lawful bases, see our GDPR and Data Privacy page.
What data we collect and why
Website visitors (www.leadjaw.com)
When you visit our website we collect standard server log data including your IP address, browser type, pages visited and time of visit. We use this for security monitoring and to understand how our site is used. We do not use this data for marketing purposes and we do not sell it.
Account holders and trial users
When you create a LeadJaw account we collect your name, email address, company name and billing details. We use this to provide the service, send transactional emails, process payments and communicate with you about your account. The lawful basis for this processing is contract performance.
Visitor intelligence data (processed on behalf of clients)
When a client installs the LeadJaw script on their website, we process the IP addresses of that website's visitors. We match those IP addresses against business network data to identify the visiting company.
When a visitor lands on the client’s website, their IP address is collected and we attempt to match it against business network data. IP addresses that resolve to residential, mobile or consumer connections do not produce a match and no data about those visits is returned to the dashboard. Visitors whose IP addresses cannot be matched to a business network are recorded as anonymous and no company data is returned. The lawful basis for this processing is legitimate interests.
Contact enrichment data
We provide an enrichment service that uses third-party services to retrieve publicly available contact data associated with identified companies. This may include job titles, business email addresses and business telephone numbers. The lawful basis for this processing is legitimate interests. Clients are responsible for their own compliance when using this data for outreach.
Form fill data
Where a client's website contains a form and a visitor completes it, LeadJaw captures the submitted data and associates it with the visiting company record. This data may include personal data submitted by individuals. Clients control this data as data controllers. LeadJaw processes it as a data processor on their behalf and does not use it for any purpose beyond delivering the service to that client.
Where a client enables a CRM integration, such as HubSpot, LeadJaw transfers identified company and contact data to the client's own CRM account on the client's instruction. The client is the data controller for all data held in their CRM. LeadJaw acts solely as a conduit for this transfer and retains no additional copy of that data beyond what is already held in the LeadJaw platform.
Sub-processors
We use a number of carefully selected third-party services to operate the LeadJaw platform. Each is subject to contractual data protection obligations and is reviewed for compliance before use. A full list of sub-processors is available on request by emailing [email protected].
Data retention
- Visitor intelligence data is retained for as long as a client account remains active. On account closure we delete visitor data within 30 days.
- Visitor records for unmatched IP addresses are retained for the same period as other visitor data and deleted within 30 days of account closure.
- Billing records are retained for seven years to meet our legal obligations.
- Server logs are retained for 90 days.
International transfers
LeadJaw operates primarily from servers in the UK. Some sub-processors may transfer data outside the UK and EEA. Where this occurs we ensure appropriate safeguards are in place, including standard contractual clauses approved by the ICO.
LeadJaw operates under UK GDPR as its primary compliance framework. Clients based outside the UK are responsible for ensuring their use of LeadJaw meets their own local data protection obligations, including CCPA in California and PIPEDA in Canada.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to correct inaccurate data, to request deletion, to restrict processing and to object to processing based on legitimate interests. To exercise any of these rights please contact us at [email protected]. We will respond within 30 days.
For a full description of your rights please see our GDPR and Data Privacy page.
Cookies
We use a small number of cookies on www.leadjaw.com. See our Cookie Policy for full details. The LeadJaw tracking script sets a first-party cookie on your device with a lifespan of 365 days. This cookie stores an anonymous visitor identifier used to recognise returning visits to the same website. It does not contain any personal data, it is not used for advertising and it is not shared with third parties. The script also uses session storage to group page views within a single browser session.
Changes to this policy
We may update this policy from time to time. We will notify active account holders of any material changes by email. The date at the top of this page shows when it was last updated.
Contact
For any privacy-related questions please contact us at [email protected] or by post at AppJaw Ltd t/a LeadJaw, 12, Melbourne Business Court, Millennium Way, Derby DE24 8LZ, United Kingdom.