Privacy notice for CTRL 18 business outreach
Last updated 4 November 2026
This notice explains how CTRL 18 handles the business contact details it uses to send introduction emails from ctrl18.in. It covers that outreach only.
Who is responsible
The data fiduciary (controller) is:
CTRL 18 Private Limited249, 2nd Main, 2nd Cross, Domlur 2nd Stage
Bangalore 560071, India
For anything in this notice, including complaints, write to optout@ctrl18.in.
What we hold about you
- your name and job title,
- your company and its web domain,
- your work email address,
- your country,
- the address of your public LinkedIn profile,
- the emails we send you, any replies you send us, and their status (for example sent, replied, bounced or unsubscribed).
We do not hold personal email addresses, phone numbers or home addresses for this outreach, and we do not use tracking pixels or click tracking in our emails.
Where it came from
We get business contact details from revternal, a B2B data provider, or from business contact lists that we bought. We only use work email addresses that the provider has verified. We never guess email addresses.
Why we use it
To send you one introduction email about one CTRL 18 product that is relevant to your role, and at most one follow-up. If you reply, we stop the sequence and answer you personally. We do not sell your details, and we do not use them for anything else.
Who can see it
Named CTRL 18 staff who run and approve this outreach. Every email is reviewed and approved by a person before it is sent. We also use these service providers, who process the data on our behalf and only for this purpose:
- Google Workspace, to send and receive the emails,
- Anthropic, to help draft the text of emails and to sort replies,
- our hosting provider in the EU, where the system that holds this data runs.
Some of these providers process data outside India.
How long we keep it
- If we never contact you, we delete your details after 90 days.
- If we contact you, we delete your details 12 months after our last email to you.
- If you opt out, we delete your details except a short record, so that we never write to you again and can show that we honoured your request: your email address, name and company, which of our emails you answered, and when and how you opted out. We keep that record for 24 months. After that we keep only a one-way hash of your email address, permanently, which lets us recognise the address without storing it. We do not use the record for anything else.
- These periods apply to our outreach system. The sender’s mailbox at Google Workspace also keeps a copy of the emails we sent you and of your replies, and those copies are not deleted automatically. If you ask us to delete your details (see “Your rights” below), we delete them from that mailbox too.
Where we do not send
We do not send these emails to people in the European Union or the European Economic Area, the United Kingdom, Switzerland, Canada or Australia. If you are in one of these places and received an email from us, tell us at optout@ctrl18.in and we will delete your details.
Opting out
To stop all emails from CTRL 18, do any one of these:
- reply “unsubscribe” to any email we sent you,
- use the unsubscribe link at the bottom of the email, or
- write to optout@ctrl18.in.
When you use the unsubscribe link, we record the request together with a shortened form of your IP address (never the full address) so we can spot abuse of the page.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to optout@ctrl18.in from the address we wrote to, so we can match your request. We do not charge for this.
If you are in India, you also have the rights given by the Digital Personal Data Protection Act, 2023 (DPDPA), including grievance redressal through the address above and, if you are not satisfied with our answer, a complaint to the Data Protection Board of India.
Changes
If we change this notice, we will update the date at the top of this page.