Who we are
Unified Outbound is a trading name of FFB Consulting Ltd, registered office 30/1, Kenilworth Court, Sir Augustus Bartolo Street, Ta'Xbiex XBX 1091, Malta. We run done-for-you cold email campaigns for B2B companies. For the personal data described on this page, FFB Consulting Ltd is the data controller, except where we act for a client (see Client campaigns).
Questions about this policy or your data: send us a message through our contact page.
Website visitors and enquiries
When you send us a message or book a call, we collect your name, work email, company and anything you choose to tell us about your business. We use it to reply, prepare for the call and, if you become a client, to run the work. Our legal basis is taking steps at your request before entering a contract, and our legitimate interest in answering business enquiries.
Our hosting provider records standard technical data (IP address, browser and pages requested) to deliver and protect the site. We don't use this to identify you.
People we contact by email
If you received a cold email from us or from one of our sending domains, here's what we hold and why.
- What: your name, job title, work email address, company, company website and public business details such as industry, size and location.
- Where it comes from: B2B data providers and public sources such as company websites and professional profiles.
- Why: to send you a small number of relevant business emails. Our legal basis is legitimate interest: offering a service that may be relevant to your role. We only email work addresses, never personal ones.
- Opting out: reply "unsubscribe" to any of our emails, or tell us through our contact page. We stop straight away and keep your address on a suppression list so you aren't contacted again.
Client campaigns
When we run campaigns for a client, we process prospect data on that client's behalf and on their instructions. In that case the client is the data controller and we are the processor, under a written data processing agreement. Opt-out requests we receive for a client campaign are honoured and passed on to the client.
Transfers outside the EU
Some of our providers are based in, or store data in, the United States and other countries outside the European Economic Area. Where that happens, we rely on an adequacy decision (such as the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
How long we keep data
- Enquiries and calls: up to 2 years after our last contact, unless you become a client.
- Clients: for the length of the contract, then as long as tax and accounting law requires (usually 6 years for invoices).
- Prospects: up to 12 months after the last email in a campaign.
- Suppression list: kept for as long as we send email, holding only what's needed to make sure we never contact you again.
Your rights
Under the GDPR you can ask us to:
- show you the personal data we hold about you;
- correct it or delete it;
- restrict how we use it, or object to us using it, including for direct marketing at any time;
- give you a copy in a portable format.
Send your request through our contact page and we'll respond within one month. If you're not happy with how we've handled your data, you can complain to the Information and Data Protection Commissioner in Malta (idpc.org.mt) or the data protection authority where you live.
Changes and contact
We'll update this page when our practices change and show the date at the top. For any privacy question, use our contact page.