Sales Boutique is a B2B client acquisition agency operating under the legal entity Sales Boutique BV. We operate from offices in Amsterdam (Netherlands), London (United Kingdom), and Cape Town (South Africa). Our website is salesboutique.io.
For the purposes of GDPR and UK GDPR, Sales Boutique BV is the data controller responsible for your personal data.
Sales Boutique processes personal data in two distinct contexts:
Context A: Website visitors and inbound enquiries
When individuals visit our website or submit an enquiry through our contact or application forms.
Context B: Outbound prospecting
When we conduct outbound sales and marketing activity on behalf of ourselves or our clients, we reach out to business professionals whose details have been obtained through legitimate B2B data sources and research.
Both contexts are addressed separately in this policy.
3. Data We Collect: Website Visitors and Inbound Enquiries
When you visit our website or submit an enquiry we may collect:
Name and surname
Business email address
Company name and website URL
Message content submitted via our forms
IP address and browser data collected automatically via analytics tools
Cookie and usage data (see Section 9)
4. Data We Collect: Outbound Prospecting
When conducting outbound prospecting activity, Sales Boutique and our clients may process the following categories of business contact data:
Full name
Job title and seniority level
Business email address
Business telephone number
Company name, size, sector, and location
LinkedIn profile URL
Information about your role inferred from publicly available sources such as LinkedIn, company websites, and professional directories
We do not collect or process sensitive personal data (special category data) as part of our outbound activity.
5. Legal Basis for Processing: Website and Inbound
We process website and inbound enquiry data on the following legal bases under Article 6 of GDPR:
Legitimate interests (Article 6(1)(f)): responding to inbound enquiries and assessing whether we can work with you
Consent (Article 6(1)(a)): where you have actively opted in to receive marketing communications
Contract (Article 6(1)(b)): where processing is necessary to perform a contract or take pre-contractual steps at your request
Legal obligation (Article 6(1)(c)): where processing is required to comply with applicable law
6. Legal Basis for Processing: Outbound Prospecting
Sales Boutique conducts outbound B2B prospecting activity both for itself and on behalf of its clients. We take our obligations under GDPR seriously and operate within the legal framework for legitimate B2B outreach.
Our legal basis is Legitimate Interests under Article 6(1)(f) of GDPR.
We have conducted a Legitimate Interests Assessment (LIA) and concluded that our outbound prospecting activity is lawful on this basis.
Why legitimate interests applies:
All outreach is directed exclusively at business professionals in their professional capacity, not private individuals
We only contact individuals whose roles are directly relevant to the services being offered
All contact data is sourced from legitimate, publicly available professional sources including LinkedIn, company websites, Companies House, and verified B2B data providers who operate under their own GDPR compliance frameworks
Every outreach message clearly identifies who is contacting the recipient, why, and includes a straightforward way to opt out
We do not use deceptive or misleading practices in our outreach
We do not send unsolicited bulk email to consumer email addresses
Recipients can opt out at any time and we honour all opt-out requests immediately and permanently
The balancing test:
We have weighed our legitimate interests against the rights and interests of the individuals we contact. We have concluded that the impact on those individuals is minimal because the outreach is relevant to their professional role, it is clearly identified as commercial communication, opting out is immediate and frictionless, we do not process sensitive data, and we do not profile individuals beyond what is necessary to assess relevance.
What this means if you have received outreach from us
If you have received a message from Sales Boutique or from one of our clients via a campaign we are running, your business contact details were obtained from a legitimate professional source. You were contacted because your role was assessed as relevant to the services being offered. You have the right to opt out at any time (see Section 8).
7. How We Use Your Data
Website and inbound data is used to:
Respond to your enquiry
Assess whether your business is a suitable fit for our services
Communicate with you about our services where you have expressed interest
Improve our website and understand visitor behaviour
Comply with legal obligations
Outbound prospecting data is used to:
Send personalised outreach messages via email, LinkedIn, and other agreed channels
Assess whether a prospect is likely to benefit from the services being offered
Record responses and manage ongoing conversations
Improve targeting and messaging based on engagement data
We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.
8. Your Rights
Regardless of how your data came to be processed by Sales Boutique, you have the following rights under GDPR and UK GDPR:
Right of access: you can request a copy of the personal data we hold about you
Right to rectification: you can ask us to correct inaccurate data
Right to erasure: you can ask us to delete your data where there is no compelling reason for us to continue processing it
Right to restriction: you can ask us to restrict how we process your data in certain circumstances
Right to object: you have an absolute right to object to processing based on legitimate interests. Where you object to outbound prospecting we will cease all outreach immediately and permanently.
Right to data portability: you can request your data in a structured, machine-readable format
Right to withdraw consent: where consent is our legal basis you can withdraw it at any time
To exercise any of these rights contact us at hello@salesboutique.io
We will respond within 30 days. If you are unsatisfied with our response you have the right to complain to your local supervisory authority:
United Kingdom: Information Commissioner's Office (ICO) - ico.org.uk
South Africa: Information Regulator - inforegulator.org.za
To opt out of outbound prospecting
Simply reply to the message you received with the word "unsubscribe" or email hello@salesboutique.io with your name and company. We will remove you from all active and future campaigns within 48 hours and will not contact you again.
9. Cookies
Our website uses cookies to understand how visitors use the site and to improve performance. We use the following types:
Essential cookies: required for the site to function. Cannot be disabled.
Analytics cookies: used to understand visitor behaviour in aggregate. Only set with your consent.
You can manage cookie preferences through your browser settings at any time.
10. Data Retention
We retain personal data for the following periods:
Data Type
Retention Period
Inbound enquiry data
24 months from submission
Client and contract data
Duration of engagement plus 5 years
Outbound prospect data - no response
12 months from last contact attempt
Outbound prospect data - active conversation
Duration of conversation plus 24 months
Opt-out records
Indefinitely to prevent re-contact
Analytics data
In line with provider settings
11. Third Party Processors
We work with third party providers who may process personal data on our behalf. All processors are bound by data processing agreements and are required to handle data in compliance with GDPR. Categories of processors include:
B2B data providers (for outbound prospect sourcing)
Email and LinkedIn outreach platforms
CRM and pipeline management tools
Analytics and website performance tools
Form and lead capture tools
12. International Transfers
Sales Boutique operates from the Netherlands, United Kingdom, and South Africa. Where data is transferred outside the European Economic Area or UK, we ensure appropriate safeguards are in place including Standard Contractual Clauses (SCCs) where required by law.
13. Data Security
We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, disclosure, or destruction. Access to personal data is limited to team members who require it to perform their role.
14. Changes to This Policy
We may update this policy periodically. The date at the top of this page reflects when it was last updated. We encourage you to review it from time to time.
15. Contact
For any questions about this policy or how we handle your data: