Data protection

Your leads stay in the European Union

Every contact captured with LeadShake is stored on infrastructure inside the European Union and processed under the GDPR. You can export it all to XLSX at any time, and delete your account and its data yourself, without asking anyone.

Hosting
European Union
Operator
KERN-IT, Belgium
Transfers outside the EU
None
Export format
XLSX
Account deletion
Self service

The life of one contact

  1. 01

    Captured

    The visitor fills the form on their own phone, and ticks the consent box.

  2. 02

    Stored

    The record lands on infrastructure inside the European Union.

  3. 03

    Exported

    You pull the whole campaign to XLSX whenever you want it.

  4. 04

    Erased

    You delete one contact, or the entire account, yourself.

Who is responsible for what

When someone fills in your card page, you are the controller of that contact: it is your prospect, in your register. LeadShake is the processor, acting on your instructions to store, email and export it.

LeadShake is operated by KERN-IT, a company established in Belgium. That places both the operator and the infrastructure inside the European Union, so no transfer mechanism such as standard contractual clauses is needed for the hosting itself.

What is collected, and why

From the person who fills in your form: the fields they choose to complete, which are email, first and last name, company, phone, LinkedIn, job title and a free message. Nothing is inferred and nothing is bought from a data broker.

From the visit itself: a timestamp, the referring page, the browser user agent and the IP address, kept to count scans and to tell a real visit from a bot. This is the minimum that makes a scan counter meaningful.

From you, the account holder: what you put on your own card, which is public by design, since the point of the card is to be shown.

Consent is asked at the point of capture

The form on your card page carries its own consent checkbox. A contact is only written to your register once the person has ticked it, so the lawful basis is collected where the data is, not buried in a policy nobody opens.

Connection and follow-up emails go to that person because they asked to be in touch with you. Each one identifies you as the sender, not a marketing platform.

What we do not do

No advertising network, no third party tracker and no data broker sits between you and your leads. LeadShake does not resell contacts, does not enrich them from external databases, and does not use them to train anything.

This is worth stating plainly because it is not the norm in this market: several competitors build their pitch on enrichment, which means matching your contact against databases they bought elsewhere.

Exercising the rights, without writing to anyone

Access and portability
Export any campaign to XLSX from the leads screen. The file holds every field captured.
Rectification
Open a lead and edit it. Notes and status are yours to correct.
Erasure, one contact
Archive a lead to remove it from the register.
Erasure, everything
Settings, then delete my account. This erases the account, its campaigns and every lead captured. It is immediate and cannot be undone.
Anything else
contact@leadshake.io
The account deletion screen in LeadShake, with email confirmation
The actual screen: Settings, then delete my account

Questions

On servers located in the European Union, operated by KERN-IT from Belgium. Leads, campaigns and account data never leave that perimeter, and there is no replication to a region outside the EU.

Competitor hosting locations checked at source on 2026-07-15.

Go further