Privacy notice
Last updated: 28 October 2026.
Who we are
BossRoster ("we") is the controller of the personal data described here. Deal Baker Ltd (company number 14906367), International House, 64 Nile Street, London N1 7SR. Contact: hello@dealbaker.io.
Two groups of people
- People we hold business contact data about (hiring managers and other managers at companies). You did not give us this data directly. This is the Art. 14 information for you.
- Customers who sign up to use BossRoster.
If we hold your business contact data
What we hold: your name, employer, job title, country, and your work email address, where we found one and verified it.
Where it came from: a people-data provider and an email-finding and verification service we pay to look up work addresses. We do not read private sources.
Why we use it, and our lawful basis: to let our business customers (such as recruiting agencies) find and contact the right manager at a company about a professional matter. Our lawful basis is legitimate interests (UK GDPR / GDPR Art. 6(1)(f)). We have written down our assessment of why that is balanced against your interests.
Who sees it: our customers, when they ask for it. Our service providers who host and process it for us. We do not sell your data to anyone else and do not use it to profile you.
How long we keep it: if you are in the UK, the EU or EEA, or your country is unknown, your name, title, employer and email are deleted 30 days after we first stored them. We keep only a scrambled fingerprint (a hash) of your details, so that if you ask us not to hold your data we can recognise you and keep it that way, without holding the data itself. For people elsewhere, a verified email is kept up to 90 days, an unconfirmed one up to 30 days, and a job title and employer up to 60 days; then we check again or delete.
People in the United States: we do not serve data about people in the United States at this time.
Your rights
You can ask us to:
- tell you what we hold and give you a copy;
- correct it;
- delete it, and not look you up again: use the form at bossroster.com/erase;
- stop using it (object): same form; we always honour this for legitimate-interests processing about you;
- restrict how we use it.
We answer within one month. If we cannot resolve your concern you can complain to the Information Commissioner's Office (ICO), ico.org.uk, or to your local data protection authority.
If you are a customer
What we hold: your account details (email, name, organisation), your plan and credit balance, your usage and the requests you make, and billing details held by our payment provider (we do not see your card number).
Why: to run your account and bill you (contract), to prevent abuse and keep our records (legitimate interests), and to meet legal duties.
Who else sees it: our payment provider and hosting providers. Not sold.
How long: while your account is open and for as long after as the law or a dispute requires: we keep account and billing records for up to six years after the account closes, then delete them.
Cookies
The site uses only the cookies it needs to keep you signed in.
International transfers
Our providers may process data outside the UK/EEA. Where a provider is outside the UK and the EEA (for example our email provider, in the United States), we rely on a UK adequacy arrangement or on standard contractual clauses with the UK addendum, so your data keeps the same protection.
Changes
We will post changes here and change the date above.