Data sourcing & compliance policy

Purpose

This policy explains where IntroHarbor opportunities come from, what we don't accept and how we check.

Sources and channels we accept

• Personalised, one-to-one business email to people whose role makes the message relevant, where local law permits it without prior consent.
• Manually dialled phone calls by a real person, following do-not-call rules.
• LinkedIn and other professional networks, used in line with each platform's terms.
• Events, communities and the partner's own professional network.
• Company websites, professional profiles and public business registers, used to confirm details.

Prohibited sources and practices

• Bought, rented, shared or traded contact lists.
• Scraping, email harvesting or list-cleaning services used to build outreach lists.
• Autodialled, prerecorded or AI-voice cold calls.
• Misrepresenting who you are, who you work for or why you're calling.
• Contacting anyone on our suppression list or a relevant national do-not-call list.
• Collecting sensitive data, or data about children.

Consent to introduction

Before submission, the prospect must agree to be introduced and understand that their business contact details and project notes will be shared with one vetted provider only. Our team contacts the prospect directly to confirm it before we accept the opportunity.

Verification and deduplication

• Checks against duplicates, buyer exclusion lists and the suppression list.
• A verification call, or written confirmation, by our team before every delivery.

Opt-outs and suppression

Anyone can opt out on our opt-out page or by email to hello@introharbor.com. Opt-outs go onto our suppression list. We never accept or introduce anyone on it, and we pass relevant requests to buyers who received the data.

Checks

We check submissions regularly and stop working with anyone who breaks these rules.

Retention

We keep records only as long as needed, and suppression records for as long as needed to honour the opt-out.

Regional rules we apply