01Who we are
BOLDBEAM B.V. ("Boldbeam", "we", "us", "our") is a private limited company incorporated under the laws of the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 97629901, with its registered office at Stokerkade 60, 1019 XA Amsterdam, the Netherlands. Boldbeam operates an enterprise technology-intelligence platform and related services for business customers.
This Privacy Policy explains how we handle personal data and the rights available to individuals under applicable data-protection laws. It applies to our website, our dealings with the professionals at our clients, prospects, partners, and suppliers, and the personal data that may be contained in the public and third-party sources our platform analyses.
02Our approach and scope
Boldbeam is a business-to-business company. We deal only with organisations and their professional representatives, and we do not offer services to consumers or knowingly collect personal data from children. We hold personal data in three limited contexts: (a) business contact information about the professionals at our clients, prospects, partners, and suppliers (Section 3); (b) limited personal data within the public and third-party sources our platform analyses (Section 4); and (c) limited aggregate information about how our website is used (Section 5).
Profiling. Our intelligence platform analyses technologies and organisations, not individuals. We do not use platform data to evaluate, score, or target people. Our website sets no cookies and we do not carry out interest-based profiling of visitors.
For all personal data described in this Policy, Boldbeam acts as the controller.
03Business contact data of clients, prospects, partners, and suppliers
We collect limited business contact information about professionals: name and job title; business email address and business telephone number; employer or organisation name; professional-profile information; and the content of business correspondence you exchange with us.
3.1 Where we obtain it
Directly from you when you contact us or engage with us; from public professional sources such as company websites and professional networks (for example LinkedIn); and from our channel partners, who may introduce or share the business contact details of potential clients under our partner programme. We store this in our customer-relationship-management (CRM) system to contact potential and existing clients and manage our relationships.
Data from channel partners. Where a channel partner provides a potential client's contact details, we require the partner, under our partner agreements, to have a lawful basis for sharing that data and to have given any notice or obtained any consent required of it. Boldbeam acts as a controller once we receive the data.
3.2 Purpose, legal basis, and transparency
We use this data for business development and sales, and to manage relationships. Our basis is our legitimate interests in B2B promotion (GDPR Article 6(1)(f)) and, where required for electronic marketing, consent; every message offers an easy opt-out. Where we obtain prospect data from LinkedIn, other public sources, or a channel partner rather than from you directly, GDPR Article 14 applies: we provide this Policy as notice and identify the source on first contact, and you may object at any time.
04Personal data from public and third-party sources (platform)
To provide our technology-intelligence platform, we ingest and analyse patent publications. These are published by patent offices and are publicly available. Some records contain limited personal data, for example the names of inventors and applicants and their stated affiliations. We analyse them to assess technologies and organisations, not individuals.
Purpose and legal basis. We process this on the basis of our legitimate interests (GDPR Article 6(1)(f)) in producing technology and innovation intelligence, weighed against individuals' rights; the data is professional, already published, and used only for aggregate analysis, not to assess the individual. Because it is obtained from sources other than the individual, GDPR Article 14 applies, and, given the volume and lack of a direct relationship, we rely on the disproportionate-effort exemption in Article 14(5)(b), providing this Policy as our notice. We do not seek special-category data and exclude it where identified.
05Cookies and similar technologies
Our website sets no cookies. We do not use analytics cookies, advertising or targeting cookies, pixels, tags, or local storage, and there is therefore no cookie banner and nothing for you to consent to or withdraw.
We use a privacy-preserving analytics service that does not set cookies, does not track visitors between sessions, and does not identify individuals. It records aggregate information such as page views and referring sites so that we can understand which of our research is read.
Because we set no cookies and run no advertising technology, we do not share information about your browsing with advertising partners.
06Why we use personal data, and our legal bases
07Disclosure of personal data
We do not sell personal data for money, and we do not disclose the business contact data in our CRM or the personal data in our platform sources to any third party for that third party's own purposes.
We disclose personal data to: service providers (hosting, email and productivity, secure storage, e-signature, CRM, and analytics) who process it only on our documented instructions under written contract; our professional advisers, such as lawyers, accountants, and auditors, under duties of confidentiality; competent authorities, courts, and regulators where required by law or to establish, exercise, or defend legal claims; and a successor or acquirer in the event of a merger, acquisition, or sale of all or part of our business, subject to this Policy.
08International data transfers
Boldbeam is based in the Netherlands and our infrastructure is designed around EU data residency. Where a service provider processes personal data outside the EEA, the UK, or an adequacy-decision country, including providers in North America, we rely on appropriate safeguards, principally the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where relevant), with supplementary measures where required. You can request details using the contact in Section 14.
09How long we keep it
We keep business contact and CRM prospect data only as long as it remains relevant to a potential or actual relationship, and afterwards only as required for legal, tax, and accounting obligations or legal claims; we periodically review and remove records. Platform-source personal data is kept only as long as relevant to our analysis. When personal data is no longer needed, we delete or anonymise it.
10How we protect it
We maintain technical and organisational measures appropriate to the risk, including access controls, encryption in transit, network protections, logging, staff confidentiality obligations, and due diligence over our service providers. No method of transmission or storage is completely secure, but we work to protect personal data and to notify affected parties and regulators of any breach as required by law.
11Your rights in the EU, the EEA, and the UK (GDPR)
Subject to conditions and exemptions in applicable law, you have the right to: access your data; have it corrected or erased; restrict or object to processing, including processing based on legitimate interests and direct marketing; data portability; and to withdraw consent at any time without affecting prior lawful processing. You may also lodge a complaint with a supervisory authority: in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or your local authority.
To exercise your rights, contact us as described in Section 14. We respond within the time limits set by law, generally one month under the GDPR.
12Your rights in the United States
12.1 California (CCPA and CPRA)
If you are a California resident, you have the right to know, access, delete, and correct your personal information, and to be free from discrimination for exercising your rights. Information lawfully available from public records or widely distributed media is not "personal information" under the CCPA.
Sharing for advertising. We do not sell personal information for money. Our website sets no cookies and we run no advertising or targeting technology, so we do not share personal information for cross-context behavioural advertising and there is nothing to opt out of. We honour opt-out preference signals such as Global Privacy Control (GPC). We do not knowingly sell or share the personal information of anyone under 16.
12.2 Other US state privacy laws
If you are a resident of a US state with a comprehensive consumer privacy law (for example Virginia, Colorado, Connecticut, Utah, or Texas), you may have rights to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not conduct targeted advertising, sell personal data, or carry out profiling that produces legal or similarly significant effects. To exercise your rights or appeal a decision, contact us as described in Section 14.
13Your rights in Canada (PIPEDA)
If you are in Canada, we handle personal information in accordance with PIPEDA and applicable provincial laws. We collect, use, and disclose personal information only for appropriate purposes and with consent where required, subject to PIPEDA's exceptions, including for certain publicly available and business-contact information. You have the right to access and correct your information and to withdraw consent subject to legal or contractual limits. You may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
14How to contact us
For any privacy question or to exercise your rights, contact:
BOLDBEAM B.V.
Stokerkade 60, 1019 XA Amsterdam, the Netherlands
Email: privacy@boldbeam.ai
We have not appointed a statutory Data Protection Officer; the above contact handles privacy matters.
15Changes to this Policy
We may update this Policy from time to time. We will post the updated version here with a new effective date and, where changes are material, provide additional notice as required by law.