Legal

Privacy Policy

Last updated: 6 June 2026  ·  Acquistly

Acquistly is a B2B lead generation agency. This policy explains how we collect and use personal data — both on this website and in the outbound campaigns we run on behalf of clients. We take GDPR compliance seriously because it is central to what we do.

1. Who we are

Acquistly is a B2B lead generation service run by Adam Vassallo and Keith Abela, based in Malta. We help UK recruitment agencies generate more qualified sales meetings through targeted outbound outreach. For questions about this policy, contact us at privacy@acquistly.com.

2. Data we collect on this website

When you visit acquistly.com, we may collect:

We use a cookie consent banner to obtain your permission before loading analytics cookies. You can withdraw consent at any time by clearing your browser cookies and declining on your next visit.

3. Data we process in outbound campaigns

Acquistly's core service involves identifying and contacting business contacts on behalf of our clients. This means we process personal data of third parties — specifically, business professionals at companies that match a client's ideal customer profile.

The categories of data we process for outbound campaigns include:

Our lawful basis for processing this data is legitimate interests under UK GDPR Article 6(1)(f). We process business contact data to send relevant, personalised B2B communications to professionals whose job responsibilities make them a plausible recipient of the services being offered. We conduct a Legitimate Interests Assessment before each campaign and maintain records of those assessments. A copy is available on request by emailing privacy@acquistly.com.

4. Where data comes from

Contact data used in outbound campaigns is sourced from:

We verify all email addresses before sending to minimise bounces and protect sending reputation. We do not purchase lists from sources that cannot evidence their own lawful basis for collection.

5. Opt-out and suppression

Every outbound email we send includes a clear and functional unsubscribe mechanism. If a contact opts out, their details are added to a suppression list and they will not be contacted again — by Acquistly or by the relevant client — through our infrastructure.

If you have received an email from an Acquistly campaign and would like to be removed, click the unsubscribe link in that email or contact us at privacy@acquistly.com.

6. International data transfers

Some of the third-party services we use are based outside the UK and EU, primarily in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including International Data Transfer Agreements (IDTAs) approved by the UK ICO, or equivalent mechanisms. If you would like more information about specific safeguards for any transfer, contact us at privacy@acquistly.com.

7. Data retention

8. Data sharing

We do not sell personal data. We share data only with:

9. Your rights

Under UK GDPR, you have the right to:

To exercise any of these rights, email privacy@acquistly.com. We will acknowledge your request within 30 days.

10. Complaints

If you have a concern about how we have handled your personal data, email privacy@acquistly.com. We will acknowledge your complaint within 30 days and aim to resolve it within 3 months. If you are not satisfied with our response, you can escalate to the ICO or IDPC using the links above.

11. Security

We use industry-standard measures to protect personal data, including access controls, encrypted connections (HTTPS), and restricted access to contact databases. Our tool providers maintain their own security certifications.

12. Changes to this policy

We may update this policy as our services or legal obligations change. The "last updated" date at the top of this page will reflect any revisions.

13. Contact

For any privacy-related queries: privacy@acquistly.com