Privacy Policy

Who we are

Ubruo is a B2B lead generation and appointment setting agency. We run LinkedIn, email and InMail outreach for client companies. Ubruo, formerly BizzLead, is a brand of Bizzlead2021, registered in Serbia as Jelena Stojanović Janković PR Konsultantske aktivnosti Bizzlead2021 Smederevo. That registered business is the data controller for everything on this page.

This site is ubruo.com. For anything in this policy, write to hi@ubruo.com. A person reads that inbox, not a queue.

What we collect on this website

One form, in the contact section. It asks for your name, company, email address, phone number and the package you want scoped. That is all we ask for. No account, no payment details, no uploads.

The form is relayed to our inbox by FormSubmit, a form-to-email service. It passes your submission on and does not use it for anything else.

Your browser also sends standard technical data with every request: IP address, browser type and the page you came from. Cloudflare, our host, logs this to serve the site and block abuse. The typefaces load from Fontshare and Google Fonts, so those two see your IP address when a page loads, the same as any site using their fonts.

Why we use it, and for how long

We use a form submission for one thing: to reply to you and scope the work you asked about. The legal basis is your consent, given when you press send. We do not sell this data. We do not add you to a marketing list you did not ask for.

We keep enquiry data for 24 months from your last contact with us, so a conversation that goes quiet can pick up where it stopped. After that we delete it. If you become a client, contract records stay for as long as tax and accounting law requires.

Outreach data we process for clients

Separately from this website, we process business contact data about prospects on behalf of our clients. In that work the client is the data controller. Ubruo is a processor, acting on the client's documented instructions.

That data is business contact information: name, job title, employer, work email, work phone and public professional profile. It comes from the client, from licensed data vendors and from publicly available professional sources. The legal basis is legitimate interest in B2B communication, weighed against your rights. Every message names the sender and gives you a way to opt out.

If you received outreach from us and want out, email hi@ubruo.com. We suppress you across every campaign we run, not only the one that reached you.

Who else touches your data

We share personal data only with the providers that make the business run, and only as far as each one needs it:

• Cloudflare, for hosting and content delivery.
• FormSubmit, to relay the contact form to our inbox.
• Google Workspace, for email and calendar.
• Fontshare and Google Fonts, for the typefaces.
• The CRM and outreach tooling we use to run campaigns.
• Accounting and payment processing, for clients only.

Some of these providers sit outside the EEA and the UK. Where that is the case, transfers rely on Standard Contractual Clauses or an equivalent approved safeguard. We do not sell personal data to anyone, under any circumstances.

Cookies and analytics

This site sets no cookies for advertising or tracking, and it runs no analytics today. If we add traffic measurement later, it will count visits in aggregate without identifying you, and this page will say so before it goes live. Nothing here profiles you or follows you to other websites.

Your rights

Under Serbian data protection law, the GDPR and the UK GDPR you can ask us for a copy of your data, ask us to correct it, delete it, restrict how we use it, or object to our using it at all. You can withdraw consent at any time. That stops future processing and does not undo what was lawful before.

Email hi@ubruo.com and we respond within 30 days. We are based in Serbia, so the Serbian Law on Personal Data Protection applies to us. The GDPR and UK GDPR apply when we handle data about people in the EEA or the UK. If you are not satisfied with our answer, you can complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or to your own national data protection authority.

Security and changes

Access to personal data is limited to the people who need it, over encrypted connections, on accounts protected by multi-factor authentication. No system is perfect, and we will not claim otherwise. If a breach affects your rights, we notify you and the relevant authority within the statutory deadline.

When this policy changes, we update the date at the top. Material changes are announced on this page before they take effect.