Privacy Policy
Last updated: September 30, 2026
Alto Reach (“Alto Reach”, “we”, “us”) runs managed LinkedIn outreach for B2B companies. This policy explains what personal data we handle, why, and the choices you have, whether you visit our website, become a client, or are a professional we contact on a client’s behalf.
1. Who this policy covers
- Website visitors: people who browse altoreach.co, send us a message or book a call.
- Clients: the businesses and people who engage us, and the team members whose LinkedIn profiles we operate as “seats”.
- Prospects: business professionals we research and contact on behalf of our clients.
2. Information we collect
Information you give us. When you use our contact form or email us, we receive your name, work email, company, industry and anything you write in your message. When you book a call, our scheduling provider collects your name, email and the details you choose to add.
Client information. To deliver the service we collect business contact details, billing information, information about your offer and ideal customers, and the access needed to operate the LinkedIn profiles you assign to us.
Prospect information. To personalize outreach we use business information that is publicly available or professionally shared, such as name, job title, employer, industry, company size, location, public LinkedIn profile content and public posts or talks. We also keep records of messages exchanged and replies received. We do not seek out sensitive personal data.
Usage data. We use Vercel Web Analytics to understand aggregate traffic (pages viewed, referrer, country and device type). It does not use cookies and does not identify individual visitors.
3. How we use information
- To respond to enquiries, schedule calls and provide proposals.
- To deliver our services: build target lists, write and review messages, manage replies and book meetings.
- To report on campaign performance and improve our messaging and processes.
- To invoice, keep business records and meet legal obligations.
- To keep our website and services secure and working properly.
4. Legal bases
Where data protection laws such as the GDPR or UK GDPR apply, we rely on: contract (to provide services to clients); legitimate interests (to run relevant, low-volume B2B outreach, respond to enquiries and improve our services, balanced against your rights); legal obligation (for tax and accounting records); and consent where we ask for it, which you can withdraw at any time.
When we contact prospects for clients, the client is generally the controller of that data and we act as their processor, following their instructions.
5. Prospects we contact
Every message we send is written for one specific person and reviewed by a human before it goes out. If we contacted you and you don't want to hear from us or our client again, simply reply saying so or email arthur@altoreach.co. We will stop outreach and add you to a suppression list so you aren't contacted again.
6. Sharing
We do not sell personal data. We share it only with:
- Our clients, for prospect conversations and meetings we arrange on their behalf.
- Service providers who help us operate, under contracts that protect your data. These include our outreach platform (Zenith), LinkedIn, Formspree (contact form), Calendly (scheduling), Vercel (hosting and analytics), and our email, CRM and payment providers.
- Authorities or advisers when required by law or to protect our rights.
7. International transfers
Our providers may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
8. Retention
We keep enquiry data for up to 24 months, client data for the length of the engagement plus the period required for legal and accounting purposes, and prospect data for as long as the relevant campaign runs, after which it is deleted or anonymized. Suppression-list entries are kept so we can honor opt-out requests.
9. Security
We use access controls, encrypted connections and reputable providers to protect personal data. No system is perfectly secure, but we work to protect your information and will notify you where the law requires.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. California residents may also request information about the categories of data we collect and ask us to delete it; we do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email arthur@altoreach.co. You can also complain to your local data protection authority.
11. Children
Our services are for businesses and are not directed at anyone under 16.
12. Changes
We may update this policy from time to time. We'll change the date at the top and, for significant changes, let clients know directly.
13. Contact
Questions or requests about privacy? Email arthur@altoreach.co.