Privacy Notice for Data Subjects

This Privacy Notice explains how Contacts Plus LLC (“we,” “us,” “our”) collects, uses, shares, and protects your personal information in our Contacts+ Database, and how you can exercise your privacy rights. It applies to anyone whose personal information — as defined in our Privacy Policy and Terms of Use (Section 4) — is processed through our website (contactsplus.com), mobile application, APIs, or related contact management services (collectively, the “Services”). For full details, see our Privacy Policy.

Our Mission

ContactsPlus helps people and businesses build better relationships by acting as a modern “phone book.” We combine contact information from public sources (e.g., websites, social media) and user contributions to create accurate, up-to-date records in our Contacts+ Database, including End User Contact Data and Completed Contact Data (as defined in our Terms of Use, Section 4). Our Services help users manage contacts, deduplicate records, and find relevant connections while prioritizing your privacy.

Information We Collect

We collect personal information, as defined under GDPR Article 4(1) and CCPA Section 1798.140, from the following sources:

• Public sources: data available online (e.g., names, job titles, public social handles), processed under legitimate interests (GDPR Article 6(1)(f)).
• User contributions: contact details (e.g., names, emails, phone numbers) provided by ContactsPlus users, such as through contact sharing or uploads.
• You directly: information you provide when interacting with our Services or exercising your rights (e.g., via our Own Your Data page).
• Third parties: data from authorized platforms (e.g., Google, per the Google API Services User Data Policy) or analytics providers, with your consent or under data processing agreements (GDPR Article 28).

Types of personal information: contact details (names, business emails, phone numbers, social handles, addresses, device IDs); professional information (job titles, organizational affiliations, skills); other personal information (interests, relationships, demographics such as age, gender, location, profile photos); sensitive data (gender or dates such as birthdays, processed only with your explicit consent, GDPR Article 6(1)(a)); and anonymized data (non-identifiable data used for analytics, not considered personal information, GDPR Recital 26).

We do not knowingly collect data from minors under 13, per our Terms of Use (Section 1.1) and COPPA (15 U.S.C. § 6502). For EU/EEA users aged 13–16, we require parental consent (GDPR Article 8).

How We Use Your Information

We use your personal information to provide contact-management services (storing, syncing, deduplicating, and searching contacts), enhance features like contact enrichment and deduplication (by combining your data with public or user-contributed data to create Completed Contact Data), improve our Services through analytics and research, send marketing communications with your consent, and comply with legal obligations such as fraud prevention or tax reporting. No automated decision-making or profiling with legal effects occurs (GDPR Article 22). Data from Google APIs is used only to provide the Services, per the Google API Limited Use requirements.

How We Share Your Information

We may share your personal information, per our Terms of Use (Sections 3.3, 4):

• With your consent — e.g., when you authorize sharing via connected services (e.g., Google) or promotional activities.
• With other users — limited data (e.g., business emails, public social handles) for deduplication or contact enrichment, unless you opt out. Private data (e.g., personal phone numbers, emails) is not shared without explicit consent.
• With service providers — for hosting, analytics, or payment processing (e.g., Stripe), under GDPR-compliant agreements (Article 28).
• With corporate affiliates — to support the Services, protected by appropriate safeguards (GDPR Article 46).
• For legal compliance — to meet legal obligations or protect our rights.
• With social media platforms — pseudonymized data (e.g., hashed emails) for lead generation, with consent.
• For business transfers — during mergers or acquisitions.

Anonymized data may be shared for analytics or marketing. You can opt out of data sharing at contactsplus.com/privacy.

Data Retention

We retain personal information only as long as necessary to provide the Services, improve our Database, or meet legal obligations (e.g., tax, auditing), per GDPR Article 5(1)(c) and CCPA Section 1798.105. Typically, data is retained for up to 5 years after last update or use, unless you request deletion. Deleted data is removed from our Database, but limited data may be retained for fraud prevention or legal compliance. Residual copies in backups are anonymized and retained for up to 12 months.

Cookies and Tracking Technologies

We use cookies and similar technologies for functionality and analytics (e.g., Google Analytics). EU/EEA users are prompted for consent (ePrivacy Directive). California residents can opt out of non-essential cookies at contactsplus.com/privacy (CCPA Section 1798.120). Disabling cookies may affect functionality. We do not respond to “Do Not Track” signals due to the lack of a standard. For full detail, see our Cookie Policy.

Your Privacy Rights

You have the following rights over your personal information, subject to local laws:

• Access — view your personal information (GDPR Article 15; CCPA Section 1798.110).
• Rectification — correct inaccurate data (GDPR Article 16; CCPA Section 1798.110).
• Deletion — request data removal, subject to exemptions (GDPR Article 17; CCPA Section 1798.105). Data may be marked as “hidden” to prevent re-entry.
• Portability — receive your data in a machine-readable format (e.g., CSV; GDPR Article 20; CCPA Section 1798.100).
• Restriction — limit processing in certain cases (GDPR Article 18).
• Objection — object to processing for legitimate interests or marketing (GDPR Article 21).
• Opt-out of sale/sharing — opt out of data sharing for analytics or enrichment (CCPA Section 1798.120).
• Withdraw consent — revoke consent for processing (e.g., marketing; GDPR Article 7).

Exercise these rights at our Own Your Data page or contact support@contactsplus.com. We verify requests and respond within one month (GDPR Article 12(3)) or 45 days (CCPA Section 1798.130). We do not discriminate against users exercising rights (CCPA Section 1798.125). California residents may request a list of third parties receiving data for direct marketing, free once annually (Cal. Civ. Code § 1798.83). EU/EEA residents may lodge complaints with their local data protection authority (GDPR Article 77) or seek judicial remedy (Article 79).

International Data Transfers

We may transfer your personal information to the United States, Europe, India, or other regions for processing. For EU/EEA data, we use Standard Contractual Clauses to ensure compliance (GDPR Article 46). Contact our Data Protection Officer at dpo@contactsplus.com for details.

Data Security

We use encryption (e.g., AES-256), firewalls, access controls, and regular audits to protect your data (GDPR Article 32; CCPA Section 1798.81.5). In the event of a data breach, we notify affected users and authorities within 72 hours (GDPR Article 33) or promptly (CCPA Section 1798.82). For more, see our Security page.

Children’s Privacy

We do not collect data from children under 13 (COPPA, 15 U.S.C. § 6502). For EU/EEA users aged 13–16, we require parental consent (GDPR Article 8). Contact support@contactsplus.com to delete a minor’s data.

Updates to This Notice

We may update this Privacy Notice to reflect changes in our practices or legal requirements. For material changes, we’ll notify you 30 days in advance via email or our website. EU/EEA users must consent to material changes affecting data processing (GDPR Article 7). Continued use after non-material changes indicates acknowledgment.

How to Contact Us

For questions, complaints, or to exercise your rights, contact:

• Email: support@contactsplus.com
• Data Protection Officer: dpo@contactsplus.com (GDPR inquiries)
• Address: Contacts Plus LLC, 3636 S. Geyer Road, Suite 100, Saint Louis, MO 63127
• Toll-free (California residents): 800-430-4095

We respond within one month (GDPR) or 45 days (CCPA).