Privacy notice

Last updated: 15 October 2026

Who we are

Legaro is a trading name of Robert Houghton, a sole trader based in the United Kingdom. We are the controller of the personal information described in this notice. You can contact us at robbie@legaro.uk.

What we do

We contact people at UK businesses, by email, about services that may be relevant to their role. This includes our own services and, on behalf of our clients, the services of finance and accounting software partners. We only contact people at limited companies, limited liability partnerships and public limited companies, and only at business email addresses.

What information we hold

• Your name and job title
• Your business email address
• The company you work for and public information about it (for example its size, sector and Companies House details)
• The link to your public professional profile, where available
• A record of our emails to you and any replies you send

We do not collect sensitive information about you.

Where we get it

• Business contact data providers (such as Apollo.io)
• Companies House and other public registers
• Company websites and public professional profiles

Why we use it, and our legal basis

We use your information to contact you about services relevant to your role and your company, to arrange meetings if you are interested, and to respect your preferences if you are not. Our legal basis is legitimate interests (Article 6(1)(f) UK GDPR): we and our clients have a legitimate interest in telling businesses about relevant services, and we keep our contact limited, relevant to your job, and easy to stop. We have written an assessment balancing these interests against your rights, and you can ask us for a copy.

Business-to-business emails to corporate subscribers are permitted under the Privacy and Electronic Communications Regulations, provided every email identifies us and gives you a simple way to opt out, which ours do.

Who we share it with

• Our clients: if you agree to a meeting, we share your name, role, company and contact details with the client you agreed to meet.
• Service providers who process data for us: email hosting (Google Workspace), email sending and deliverability (Saleshandy and TrulyInbox), our database (Supabase), workflow automation (n8n), and AI tools that help us sort and draft replies (Anthropic). They may only use your information to provide their service to us.

We never sell your information.

International transfers

Some of our service providers store or process data outside the UK, including in the United States, the European Union and India. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum to keep your information protected.

How long we keep it

If you don't engage with our emails, we delete your information within 12 months of our last contact. If you become a client or a client's prospect, we keep it for as long as that relationship needs it. If you opt out, we keep only your email address on our do-not-contact list, indefinitely, so we can make sure you are never contacted again.

Your rights

You have the right to:

• object to us using your information for direct marketing, at any time (we will always stop)
• ask for a copy of the information we hold about you
• ask us to correct or delete it
• ask us to restrict how we use it
• complain to the Information Commissioner's Office (ico.org.uk)

To use any of these rights, email robbie@legaro.uk. We will reply within one month.

Changes

We may update this notice. The date at the top shows when it last changed.