Privacy Notice – Business Contact Forms
Last updated: 30 April 2026
This Privacy Notice describes how Proton (“we”, “us”, or “our”) collects, processes, stores and protects personal data in connection with your interactions through our business contact forms.
1. Personal Data We Collect
When you contact us through our dedicated website business contact forms, we collect and process the following categories of personal data:
- First and Last name
- Business email address
- Business phone number
- Company or organization name
- Any other information you provide voluntarily
We may also collect limited technical information regarding your interactions with our communications and engagement metrics for analytical purposes.
2. Purposes of Processing
We process personal data for the following purposes:
- To respond to inquiries, requests and questions submitted via our contact forms.
- To manage and maintain our business relationship with you, including record-keeping and internal workflow management.
- To send marketing communications regarding our products, services and promotional offers
- To analyze interactions with our emails and communications, in order to optimize our content, measure engagement and improve relevance.
- To comply with legal or regulatory obligations, where applicable.
3. Use of Third-Party Services
We use certain third-party service providers to process personal data on our behalf as data processors. These providers may include services such as:
- Customer relationship management and marketing automation platforms, used to store contact information, manage workflows, and send communications. This processing activity is based on your consent.
- Cloud-based productivity and data management tools, used for temporary storage and internal processing of contact information. This processing activity is based on your consent.
We may also use additional services for data verification, and research purposes in order to ensure the accuracy, completeness, and currency of the personal data we hold. These services may include:
- Business data enrichment and intelligence platforms, used to supplement missing contact details or company information. This processing activity is based on your consent.
- Professional networking platforms and public professional databases, used to verify job titles, company information, and other publicly available professional details. This processing activity is based on your consent.
Personal data may be supplemented with information obtained from publicly available sources, professional databases, or authorized third-party data providers to maintain accurate and up-to-date records.
4. Legal Basis for Processing
We rely on the following legal grounds under GDPR for processing your personal data:
- Consent: Where you have provided explicit consent for marketing communications.
- Legitimate Interests: To manage our business relationship, improve communications, and perform internal analytics, provided this does not override your rights and interests.
- Legal Obligation: To comply with applicable laws or regulatory requirements, where necessary.
You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
5. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.
6. Security Measures
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. Our third-party processors are also required to adhere to strict security standards.
7. Withdrawal of Consent and Contact
Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time.
You may withdraw your consent to receive marketing communications or request that we stop processing your personal data for such purposes by contacting us at:
Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. We will process your request as soon as reasonably practicable and in accordance with applicable data protection laws.
In case of discrepancy between the English version of this Privacy Notice and any translated version, the English version shall prevail.