GDPR & your data rights

Your privacy and the protection of your contact data are a top priority — whether you’re visiting our website or using our contact management application. The GDPR gives individuals in the EU and EEA strong rights over their personal data, and it places clear obligations on the organizations that process that data. As the data controller for personal information processed through our Services (GDPR Article 4(7)), Contacts Plus LLC supports those rights and obligations as described below. For the complete detail, always refer to our Privacy Policy.

Our lawful bases for processing

We only process personal data where we have a lawful basis under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): to deliver the core Services you sign up for — storing, syncing, deduplicating, searching, and managing your contacts.
• Consent (Art. 6(1)(a)): for optional processing such as marketing communications, contact enrichment, processing of sensitive data, and certain data sharing. You may withdraw consent at any time (Art. 7).
• Legitimate interests (Art. 6(1)(f)): for analytics, service improvement, fraud prevention, and security — balanced against your rights and freedoms.
• Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and other legal requirements.

We do not carry out automated decision-making or profiling that produces legal effects, per GDPR Article 22.

Your rights as a data subject

Under GDPR Articles 15–22, you have the right to:

• Access the personal data we hold about you (Art. 15);
• Rectify inaccurate or incomplete data (Art. 16);
• Erase your data, subject to exemptions (Art. 17);
• Restrict processing in certain circumstances (Art. 18);
• Data portability — receive your data in a structured, machine-readable format (Art. 20);
• Object to processing based on legitimate interests or to direct marketing (Art. 21);
• Withdraw consent at any time, without affecting prior lawful processing (Art. 7).

To exercise any of these rights, visit our Own Your Data page or email our Data Protection Officer at dpo@contactsplus.com. We verify your identity and respond within one month (GDPR Article 12(3)), extendable as permitted by law.

International data transfers

The Services are hosted in the United States, and we may process personal data with affiliates and service providers in regions including Europe, India, and the Americas. For transfers of EU/EEA personal data outside the European Economic Area, we rely on the Standard Contractual Clauses or Standard Contractual Clauses, as required by GDPR Article 46. Our service providers are bound by data processing agreements compliant with GDPR Article 28.

Data processing & subprocessors

If you are a business customer acting as a data controller and we process personal data on your behalf, our Data Processing Agreement (DPA) sets out the Article 28 processor terms. The third-party subprocessors we engage to deliver the Services are listed on our Subprocessors page.

Security & breach notification

We implement technical and organizational measures appropriate to the risk, per GDPR Article 32 — including encryption in transit and at rest, access controls, and regular security testing (see our Security page). In the event of a personal data breach, we notify the relevant supervisory authority within 72 hours where required (GDPR Article 33) and affected individuals without undue delay where the breach is likely to result in a high risk to their rights (Article 34).

Complaints & supervisory authorities

If you have concerns about how we handle your personal data, please contact our DPO first at dpo@contactsplus.com — we aim to resolve issues directly. You also have the right to lodge a complaint with your local supervisory authority (GDPR Article 77) or to seek a judicial remedy (Article 79).

Contact our Data Protection Officer

• Data Protection Officer: dpo@contactsplus.com
• General: support@contactsplus.com
• Address: Contacts Plus LLC, 3636 S. Geyer Road, Suite 100, Saint Louis, MO 63127

For more on how to submit a request regarding data privacy, see our Privacy Policy and Own Your Data page.