Privacy Notice

Last updated 28 September 2026

This notice explains how LHCL Trading Limited (company number 15719098, registered office Leytonstone House, 3 Hanbury Drive, London, E11 1GA) — “Stoop”, “we” — uses personal data. We are the controller. ICO registration: [ICO registration number — to be confirmed]. Questions or requests: [privacy email — to be confirmed].

It covers two groups of people: people in our database (directors and owners of UK companies), and our customers’ users and visitors to our website.

1. People in our database

Stoop helps businesses find and contact other UK businesses. To do that we hold information about the people who run UK companies.

What we hold:

  • from the public Companies House register: your name, month and year of birth (never the full date), nationality, occupation, country of residence, the companies you’re a director, secretary, member or person with significant control of, your role and dates, and the town and postcode of your correspondence address;
  • from specialist data providers, only when one of our customers asks: a business email address or mobile number;
  • things we work out from the above, such as whether you also run an established business.

We don’t hold your home address, your full date of birth, or any special category data.

2. Why we use it, and our lawful basis

We use this information to provide a business-to-business prospecting service: letting our customers find companies and the right people to contact about products and services relevant to their business.

Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)) — our interest, and our customers’ interest, in business-to-business marketing and finding new business. We believe this is balanced fairly against your rights because:

  • the information relates to your business role and most of it is already published by Companies House for the purpose of transparency about who runs companies;
  • we limit what we hold (for example, month and year of birth only, and business contact details only);
  • contact is about business, and you can object and be removed at any time;
  • our customers must follow the law when they contact you, including giving you an easy way to opt out.

Because we didn’t collect this information from you directly, this notice is how we tell you about it.

3. Who we share it with

  • Our customers — businesses who subscribe to Stoop, for their own business-to-business sales and marketing. They must use it lawfully and are controllers for their own use of it.
  • Service providers who help us run Stoop — hosting, data storage, and data enrichment providers — under contract and only on our instructions.
  • Regulators, courts or law enforcement where the law requires, and a buyer of our business if it is sold.

We don’t sell data to data brokers. Where data is transferred outside the UK, we rely on UK adequacy regulations or approved safeguards such as the International Data Transfer Agreement.

4. How long we keep it

We keep Companies House information for as long as it is on the public register and relevant to our service, and remove roles that have ended when they’re no longer useful. Enriched contact details are kept while they’re likely to be accurate and useful.

If you ask to be removed, we delete your information and keep only the minimum needed to stop you being added back (see section 6).

5. Your rights

You have the right to:

  • object to our use of your information — including an absolute right to object to direct marketing;
  • ask for your information to be erased;
  • get a copy of the information we hold about you;
  • have inaccurate information corrected;
  • ask us to restrict how we use it.

To use any of these rights, use our removal request page or email [privacy email — to be confirmed]. We’ll respond within one month. If you’re unhappy with how we handle your information, you can complain to the Information Commissioner’s Office — ico.org.uk or 0303 123 1113 — though we’d appreciate the chance to put things right first.

6. How to be removed

Fill in our removal request page, or email [privacy email — to be confirmed] with your name and the companies you’re linked to. We may ask for a little more information to make sure we remove the right person.

When we remove you, we delete your information from Stoop — including from every customer’s lists, CRM and enrichment results — and remove your name from our records of searches.

So that you aren’t added back the next time Companies House publishes an update, we keep a suppression record: your Companies House officer ID and a one-way scrambled code made from your name and month and year of birth. It can’t be read back into your details — we use it only to recognise and block you.

Removing you from Stoop doesn’t remove you from Companies House, or from records a business keeps after contacting you. To stop a particular business contacting you, please tell them directly — they must stop.

7. Our customers’ users and website visitors

  • Account details — name, work email, role and login activity — to provide the service under our contract with your employer, and for security.
  • Billing contacts — to invoice and manage the account.
  • What you do in Stoop — for example searches, lists and notes — to provide the service and keep it secure, and in aggregate to improve it (legitimate interests).

We keep account information for as long as the account is active and for up to 6 years afterwards for legal and accounting purposes.

8. Cookies

Stoop uses only the cookie it needs to keep you signed in. We don’t use advertising or tracking cookies.

9. Security

We protect information with access controls, encryption in transit, Microsoft 365 sign-in and activity logging, and limit access to the people who need it.

10. Changes to this notice

We’ll update this notice if how we use personal data changes. The date at the top shows when it last changed.