Free Buying Signals Test How it works Pricing Insights About

Privacy Policy

LamparaLab
Last updated: July 4, 2026

1. Introduction

This Privacy Policy explains how LamparaLab collects, uses, and protects personal data when you visit our website, communicate with us regarding our services, or are contacted by LamparaLab (or by a LamparaLab client) as part of outbound prospecting.

LamparaLab provides go-to-market (GTM) systems — including revenue analytics and signal-based outbound — for businesses using marketing, CRM, product, and operational data sources.

This policy applies to personal data collected through the LamparaLab website, through direct communication with LamparaLab, and through our outbound prospecting and outreach activities.

2. Data Controller

LamparaLab is operated by an independent professional based in Spain.

Data Controller:
Anna Orestova
Malaga, Spain
Contact: hello@lamparalab.com

3. Personal Data We Collect

Information you provide

When contacting LamparaLab or requesting a demo we may collect:

Automatically collected information

When visiting the website we may collect limited technical information such as:

This information helps us understand how visitors use the website and improve the service.

LamparaLab does not intentionally collect sensitive personal data.

4. Personal Data We Process for Outbound Prospecting

As part of our GTM and outbound services, LamparaLab identifies and contacts potential business customers ("prospects"). For this purpose we process limited business-context personal data about individuals acting in their professional capacity:

This data is obtained from the individual's employer website and from third-party and public sources, including professional networks (accessed via Apify), email-verification providers (Hunter.io), public regulatory filings (SEC EDGAR), and publicly available web pages. We do not knowingly process special-category (sensitive) personal data for this purpose.

Legal basis. Prospect data is processed under the legitimate interest (Art. 6(1)(f) GDPR) of LamparaLab or its client in B2B business development, balanced against the rights of the individuals concerned. Where LamparaLab runs outreach on behalf of a client, the client is responsible for ensuring a valid legal basis to contact the prospects.

Source disclosure (Art. 14 GDPR). Because this data is not collected directly from the individual, we disclose the categories of sources above. It is used only to assess business fit and to send relevant business communications.

Your choices. Every outreach email includes a one-click unsubscribe link. You may also object to processing or request deletion at any time at hello@lamparalab.com; on unsubscribe or objection, the address is suppressed from further outreach.

5. How We Use Personal Data

Personal data may be used to:

LamparaLab does not sell or rent personal data to third parties.

6. Legal Basis for Processing (GDPR)

Personal data is processed under the following legal bases:

Consent
When you voluntarily submit information through forms or accept cookies.

Legitimate Interest
To operate, secure, and improve the website, communicate with potential B2B clients, and conduct B2B outbound prospecting as described in Section 4.

Individuals whose personal data is processed based on legitimate interests may object to such processing at any time by contacting hello@lamparalab.com. Where personal data is processed for direct outreach, such objection is honoured without exception, and the address is suppressed from further contact.

Contract Performance (Art. 6(1)(b) GDPR)
Where processing is necessary for the performance of a contract with a client or in order to take steps at the request of a client prior to entering into a contract.

7. Role of LamparaLab

LamparaLab may act as either a Data Controller or Data Processor depending on the context.

Data Controller
For personal data collected through:

Data Processor
When LamparaLab processes business data provided by clients as part of analytics or outbound services (including running outreach on a client's behalf).

In those cases:

Processing of client data through the LamparaLab analytical platform, including data submitted via the chat interface, is governed by separate client agreements.

8. Use of Artificial Intelligence

LamparaLab may use artificial intelligence systems to assist with data analysis and interpretation.

AI systems are used strictly as analytical tools to support business insights.

LamparaLab may rely on third-party AI providers to process analytical queries and generate responses. Such providers operate under contractual data protection obligations, including Data Processing Addendums and Standard Contractual Clauses where applicable.

Client data processed through AI systems:

Key sub-processors used by LamparaLab include:

A complete and up-to-date list of sub-processors is available upon request at hello@lamparalab.com.

AI-generated outputs are intended to support analysis and should not replace independent business judgment.

LamparaLab's use of third-party AI providers is subject to those providers' terms and policies, which may change. LamparaLab will notify clients of any material changes to sub-processor arrangements that may affect data processing.

9. Third-Party Service Providers

LamparaLab may rely on trusted third-party providers to operate the service, including providers of:

These providers process data only as necessary to support the operation of the service and are subject to contractual confidentiality and data protection obligations.

Where client analytics data is processed, LamparaLab primarily relies on infrastructure located within the European Union. Some outbound enrichment and delivery providers (such as Apify, Hunter.io, and Google) are located in the United States; see Section 13.

10. Cookies and Website Analytics

The LamparaLab website uses cookies and similar technologies.

Cookies help to:

Non-essential cookies and analytics scripts are used only after user consent through a cookie banner. Subject to that consent, the website uses the following services:

Form submissions (such as demo requests) are sent to HubSpot CRM for the purpose of responding to your inquiry. This occurs independently of cookie consent, based on legitimate interest, as it processes only data you voluntarily provide.

Users may disable cookies through browser settings, although some website features may not function properly without them.

Outreach emails sent by LamparaLab do not use tracking pixels. Links in those emails are wrapped with a signed click-tracking redirect (link.lamparalab.co) so we can tell whether a recipient engaged; this does not set any cookies on your device.

Identification of business visitors

With your consent, we use RB2B to help us understand which companies visit our website. RB2B matches technical identifiers of a visit (such as IP address and device signals) against its own B2B identity data. For visitors from the United States it may provide us with the visitor's company and business-contact details (such as name, business email address, and LinkedIn profile); for visitors from other countries it may identify the visiting company only, not the individual.

We use this information for one purpose: to understand which businesses are interested in our services and, where appropriate, to reach out in a relevant, professional context. It is processed under the safeguards described in Section 4, and you may object or request deletion at any time at hello@lamparalab.com. If you do not consent to analytics cookies, this identification does not run.

11. Data Retention

Personal data collected through the website is retained only for as long as necessary to:

Business data processed for clients is retained only for the duration required to provide the agreed services or as specified in contractual agreements with the client.

Indicative retention periods:

12. Data Security

LamparaLab applies reasonable technical and organizational safeguards to protect personal data, including:

While reasonable precautions are taken, no system can guarantee absolute security.

13. International Data Transfers

Some service providers used by LamparaLab process personal data outside the European Economic Area, primarily in the United States. These include Anthropic (AI-assisted analysis), HubSpot (CRM and form processing), Apify (collection of public professional data), Hunter.io (email verification), and Google (analytics and email delivery).

Where such transfers occur, LamparaLab applies appropriate safeguards consistent with GDPR requirements, such as the European Commission's Standard Contractual Clauses and, where the provider holds a valid certification, the EU-U.S. Data Privacy Framework.

Client analytics data is primarily processed on infrastructure located within the European Union, as described in Section 9.

14. Your Rights

Under applicable data protection laws you may have the right to:

Requests may be submitted to: hello@lamparalab.com

You also have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. In Spain, the competent authority is the Agencia Española de Protección de Datos (AEPD).

15. Outreach to Recipients in the United States and Canada

Our outbound emails are sent primarily to business recipients in the United States and Canada. In addition to the GDPR safeguards described above, we follow the anti-spam laws applicable to those recipients.

United States (CAN-SPAM Act). Outreach emails do not use false or misleading header information or deceptive subject lines. Each message identifies the sender (LamparaLab or the client on whose behalf it is sent), includes a valid postal address, and contains a functioning one-click unsubscribe. Opt-out requests are honored promptly — in any case within 10 business days — and are permanent.

Canada (CASL and PIPEDA). We send commercial electronic messages to Canadian recipients only where consent exists, including implied consent under CASL — for example, where a business contact address has been conspicuously published without a statement declining unsolicited messages, and the message is relevant to the recipient's business role. Each message identifies the sender, provides contact information, and includes an unsubscribe mechanism that remains functional for at least 60 days; unsubscribe requests are processed within 10 business days. Canadian residents may request access to or correction of their personal information under PIPEDA by writing to hello@lamparalab.com.

16. Changes to This Policy

LamparaLab may update this Privacy Policy periodically.

Updated versions will be published on this page.

17. Contact

For privacy-related questions contact: hello@lamparalab.com

We use cookies to understand how the site is used — analytics, session replay, and identifying the companies that visit us. Details in our Privacy Policy.
Continue without accepting
Cookie Preferences
Necessary cookiesRequired for the website to function properly.
Always on
Analytics cookiesTraffic analytics (Google Analytics, HubSpot), session recordings and heatmaps (Microsoft Clarity), and B2B visitor identification (RB2B).