• Identity and contact: name, email, phone, company, role, postal address.
• Business information: services requested, project details, notes from calls.
• Billing: invoicing details and payment confirmations. We do not store full card data.
• Technical: IP address, device, browser, pages visited, interactions, collected via cookies and analytics.
• Communications: emails, forms, messages, and call notes.
• Client platform data when delivering services inside Lead It Lab, configuration details needed to implement automations and workflows, limited to what is necessary.

• Provide and manage services including onboarding, support, and platform access (performance of a contract).
• Respond to enquiries and schedule calls (legitimate interests or steps prior to a contract).
• Operate and improve our website and platform including troubleshooting and analytics (legitimate interests).
• Send service updates and important notices (performance of a contract or legal obligation).
• Marketing about similar services to existing clients (legitimate interests, with opt out), other marketing with consent where required.
• Legal and compliance (legal obligations).

We share data with trusted service providers acting as processors only where needed to deliver our services, for example:

• Hosting, CRM, and automation infrastructure supporting Lead It Lab
• Email and SMS providers for communications you request
• Payment processors for invoicing and subscriptions
• Professional advisers and legal or regulatory bodies when required by law

All processors are bound by contracts to protect your data and act only on our instructions.

Where data is transferred outside the UK, we use appropriate safeguards such as adequacy regulations or the UK International Data Transfer Agreement (IDTA) or EU SCCs with the UK Addendum.

We keep personal data only for as long as necessary for the purposes set out in this policy, including to meet legal, accounting, or reporting requirements. Typical retention:

• Client records and project files, up to 7 years after the end of our engagement
• Marketing contacts, until you unsubscribe or we determine the data is out of date
• Website analytics, short, aggregated, or anonymised where possible

We use administrative, technical, and organisational measures such as role-based access, encryption in transit, regular updates, and staff confidentiality. We review processors for security and compliance. For more detail see our Compliance Hub.

Under the UK GDPR you have rights to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase data in certain circumstances
• Restrict or object to processing
• Data portability
• Withdraw consent where we rely on consent

To exercise these rights, email [email protected]. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

We use essential cookies for site functionality and may use analytics cookies to understand usage and improve our content. Where required, we will request your consent via a banner. You can change your preferences at any time in your browser or consent tool.

Questions about this policy or your data, email [email protected]. We may update this policy from time to time and will post the new version here with an updated date.