Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Leads2b is a Brazilian B2B sales acceleration platform offering prospecting databases, reverse IP visitor identification, email automation, and CRM integration for outbound sales teams.
Leads2b is a Brazilian B2B sales acceleration suite. It combines a tracking pixel that performs reverse IP lookups to identify visiting companies, a prospecting database with contact and firmographic records, email and call cadences, and CRM integrations. Customers embed a JavaScript snippet on their websites so that anonymous visits are matched to corporate identities and can trigger sales workflows.
The pixel sets first party cookies on the customer domain, captures page views, referrer and UTM parameters, and sends them to tracker.leads2b.com. The platform then resolves the visitor IP against its company graph to attach a likely corporate identity. Because the IP and behavioural data are personal data under GDPR, and the resolved company profile is enriched with contact level B2B records, the activity is not purely technical and requires both prior consent in EU jurisdictions that follow ePrivacy and a documented legitimate interest assessment for the enrichment.
Leads2b distributes B2B contacts sourced from public sources, partners and scraping. When a customer imports those records into their CRM and contacts the prospects, the customer becomes a controller for that processing. Article 14 GDPR applies because the personal data was not obtained from the data subject. The customer must inform prospects of the source, purpose, legal basis and rights within one month of obtaining the data or at the first communication, whichever is earlier. CNIL guidance on B2B prospecting requires opt out in the first message and a clear sender identification.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Leads2b operates from Brazil with primary storage in AWS Sao Paulo and secondary processing in AWS US East. Brazil is not the subject of an EU adequacy decision, so EU controllers must rely on Standard Contractual Clauses and a transfer impact assessment that takes into account the Brazilian LGPD framework and the United States onward transfer. Brazilian customers should align with LGPD Articles 33 to 36 and ANPD guidance on international transfers when serving EU prospects.
The combined activities of reverse IP profiling, large scale B2B contact database use and cross border flows place Leads2b in the high risk tier. A DPIA is expected, with mitigations including granular consent for the tracking pixel, suppression lists, retention limits for prospect data, role based access in the CRM, and Article 14 notices distributed through cadences.
Load the pixel only after consent in EU and UK jurisdictions, document the legitimate interest balancing test for B2B enrichment, configure suppression for unsubscribes and complaints, add Article 14 wording to the first outbound message, restrict CRM access to sales operators, and review the data processing agreement and SCCs annually.
Websites using Leads2b must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is required. Leads2b combines three high risk processing activities: reverse IP lookup that profiles website visitors at company level, use of a large B2B contact database sourced from third parties triggering Article 14 GDPR information duties, and cross border transfers from Brazil to EU and US. The balancing test for legitimate interest must document data minimization, opt out for prospects, retention limits, and security of the B2B records. Document consent capture for the tracking pixel, Article 14 notice timing for prospects whose data is imported, transfer impact assessment for Brazil and US flows, and a documented procedure for handling deletion and objection requests from non customers.
Sample consent text
We use Leads2b to identify the companies visiting this website through reverse IP lookup and to measure marketing performance. This sets first party cookies and shares limited visit data with Leads2b in Brazil and the United States. You can accept, reject, or fine tune your choice at any time.
Third-party domains contacted
leads2b.comapp.leads2b.comtracker.leads2b.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _l2b_session | technical | session | Maintains the active visitor session for the Leads2b pixel |
| _l2b_visitor | analytics | 1 year | Visitor recognition + reverse IP linking |
| _l2b_attribution | marketing | 90 days | Marketing attribution and campaign source tracking |
Leads2b places tracking cookies for advertising — comply with GDPR using FlowConsent.
Yes. The Leads2b pixel sets first party cookies including a session cookie, a one year visitor cookie used for visitor recognition and reverse IP linking, and a ninety day attribution cookie for marketing. These are not strictly necessary and require prior consent in EU jurisdictions that follow ePrivacy and TTDSG.
Yes for the tracking pixel. Reverse IP lookup and the analytics cookies are not strictly necessary, so EU customers must collect prior opt in consent before loading the script. Outbound prospecting based on the B2B database relies on legitimate interest with an opt out, but in some jurisdictions such as Germany B2B email outreach to natural persons can also require prior consent under UWG.
The tracking layer is processed under Article 6(1)(a) consent. The B2B contact database and outbound contact are typically justified under Article 6(1)(f) legitimate interest, conditional on a documented balancing test, Article 14 notice to prospects, an easy opt out and suppression lists. Some authorities, including the CNIL and the French DGCCRF, scrutinise this basis closely for cold outreach.
Leads2b processes data primarily in AWS Sao Paulo Brazil with secondary processing in AWS US East. EU controllers must put in place Standard Contractual Clauses and a transfer impact assessment for both flows since Brazil and the United States lack a full adequacy status for this scenario.
Yes. The combination of reverse IP profiling, use of a large third party B2B contact database and cross border transfers makes Leads2b a high risk processing under Article 35 GDPR. A DPIA should document mitigations such as consent for the pixel, balancing test for enrichment, retention limits and access controls.
Gate the pixel behind a consent banner, distribute Article 14 notices to prospects at the first communication or within one month, include a clear opt out in every outbound message, configure suppression for unsubscribes and complaints, maintain SCCs and a transfer impact assessment for Brazil and US flows, and review retention periods for unqualified prospects.
Comparable B2B sales acceleration tools include Apollo.io, Lusha, ZoomInfo Engage and Cognism. Cognism sources EU data through opt out compliant providers and offers more EU friendly defaults, while Lusha provides a contact verification workflow that can simplify Article 14 compliance.
Review the cookie policy at least once a year and after any change in vendors, cookie names or retention. For Leads2b, also align the policy with updates to the Brazilian LGPD, the ePrivacy framework, TTDSG and CNIL guidance on B2B prospecting.