Privacy Policy

1. Who we are

B2BLAST is a trade name of LBF Initiatives Limited, a company registered in Ireland (CRO 789791). Director: Thomas Germain. Registered office: Flat 5, 2 Richmond Row, Dublin 8, D08 T25Y, Ireland. Company website: https://lbfinitiatives.com. Contact: contact@b2blast.com.

2. Data we collect

When you use a B2BLAST form, we collect the information you choose to provide. The contact form collects your name, work email, company, monthly ad budget range and message. The free-audit form collects your current ad platforms, budget range, main challenge, target market, CRM, website, name and email. The budget calculator's email option collects your email and the calculator selections used to generate the result. The resource waitlist collects your email.

To protect forms against bots and abuse, we process your IP address for short-lived rate limiting and use Cloudflare Turnstile. Turnstile processes security signals including IP address, TLS fingerprint, user-agent, site key and origin to distinguish people from bots. These checks are necessary for site security and are not used by B2BLAST for advertising.

When you visit our site and accept analytics cookies, we use Google Analytics 4 to collect usage data such as pages visited, device and browser information, approximate location, referral source, and interaction events. GA4 does not log or store IP addresses. This data is only collected after your explicit consent via our cookie banner.

3. How we use your data

Your data is used to respond to inquiries, assess project fit, prepare an audit or calculator result, send a requested resource-availability notification, schedule calls, protect the forms against abuse and, only after analytics consent, improve the website. We do not sell, rent or share personal data with third parties for their own marketing.

4. Legal basis (GDPR)

We rely on steps taken at your request before a possible contract and our legitimate interests to answer inquiries and assess project fit; your consent for analytics cookies and the optional resource-waitlist notification; our legitimate interests in protecting the site against abuse; contractual necessity during an active service relationship; and legal obligations where applicable. Submitting an inquiry does not mean that you consent to every form of processing described here.

5. Data retention

Contact, audit and calculator-email submissions are retained for up to 24 months from submission, or for the duration of an active client relationship plus 12 months. Waitlist details are retained until the requested resource notification has been sent plus six months, and never for more than 24 months, unless you ask us to delete them sooner.

The local IP rate-limit counter expires after at most one hour on a running server instance. B2BLAST does not create a separate Turnstile profile or retain the one-time verification token after the request; Cloudflare applies the retention described in its own Turnstile privacy notice.

Google Analytics first-party cookies expire after up to two years unless you withdraw consent or delete them sooner. User-level and event-level data in our standard GA4 property is retained for no more than 14 months; standard aggregated reports may remain available for longer under Google's reporting rules.

6. Cookies

The site stores your Accept or Decline choice in strictly necessary browser storage for six months. Cloudflare Turnstile may use strictly necessary security signals and cookies to protect forms. If you explicitly accept analytics, Google Analytics 4 sets the first-party cookies _ga and _ga_*, each with a default lifetime of up to two years. No advertising pixels are used. You can withdraw consent at any time through “Cookie settings” in the footer; this stops future analytics collection and removes the Google Analytics cookies accessible to the site.

7. Your rights

Under GDPR, where applicable, you may request access, correction, deletion, restriction or portability of your personal data; object to processing based on legitimate interests; and withdraw consent at any time without affecting earlier lawful processing. To exercise a right, email contact@b2blast.com. You may also lodge a complaint with the Irish Data Protection Commission or with the supervisory authority where you live or work.

8. Who else receives your data

These providers run parts of this site, or carry your message to us. Each receives only what its purpose requires. We do not sell or rent your data, and we do not pass it to anyone for their own marketing.

Most are our processors, contractually bound to provide their service on our instructions. Cloudflare also acts as a controller for the limited purpose of improving Turnstile's bot detection, and the consumer Google mailbox is an independent controller. We state those differences rather than imply that every provider has the same role.

• Vercel Inc. (United States) — processor, on our instructions — Website hosting and serverless function execution. Processes request metadata, including IP address, and carries form submissions in transit. Privacy policy
• Cloudflare, Inc. (United States) — processor for the service and controller for a limited purpose — DNS resolution for b2blast.com, inbound email routing for contact@b2blast.com, and Turnstile bot protection on forms. For Turnstile, processes signals such as IP address, TLS fingerprint, user agent, site key and origin: as our processor to protect the site, and as a controller for the limited purpose of improving Turnstile's bot detection. It also receives and forwards the full content of form emails sent to contact@b2blast.com. Privacy policy
• Resend (United States) — processor, on our instructions — Delivery of the emails generated by the contact, audit, calculator and waitlist forms. Receives the full content of what you submit. Privacy policy
• Calendly LLC (United States) — processor, on our instructions — Scheduling calls when you choose the external Calendly booking service. Processes the contact details, availability and meeting information that you submit there on our behalf. Privacy policy
• Google Ireland Limited (Ireland) — independent controller, on its own terms — Final delivery and storage of the mailbox that Cloudflare forwards to. Receives and retains the full content of every form submission. This mailbox is a personal Google Account on Google's consumer terms, not Google Workspace, so there is no data processing agreement behind it: Google acts as an independent controller of that content under its own terms rather than solely on our instructions. Privacy policy

About the mailbox. The address our forms deliver to is a personal Google Account on Google’s consumer terms, not Google Workspace. Consumer accounts come with no data processing agreement, so Google is not bound to handle that message content only on our instructions, and we cannot promise that it is. If that matters to you, email us at contact@b2blast.com instead of using a form, or ask for the current position before sending anything sensitive. We would rather tell you this than describe an arrangement we do not have.

Vercel, Cloudflare, Resend and Calendly are established in the United States, so using the relevant site features can involve transfers outside the EEA. Those transfers rely on the EU–US Data Privacy Framework where the provider is currently certified under it, and otherwise on the European Commission's Standard Contractual Clauses, as set out in each provider's data processing terms. Google Ireland Limited is established in Ireland but may transfer onward to Google LLC in the United States under Google's own terms, which we are not party to. To request details of the safeguards in place, email contact@b2blast.com.

Google Analytics 4 is covered in sections 2 and 6: it loads only after you consent, and you can withdraw that consent at any time. It is separate from the mailbox described above.

9. Contact

For any privacy-related questions: contact@b2blast.com.