Privacy Policy for LeadLift

Last Updated: 11 March 2025

This Privacy Policy describes how LeadLift ("we," "us," or "our") collects, uses, and protects your personal information when you use our website at https://leadlift.fit (the "Website") and our lead management service. We are based in the United Kingdom and process data in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the Website or our service, you agree to this Privacy Policy. If you do not agree, please do not use the Website or our service.

1. Information We Collect

1.1 Account and profile information

When you sign up or log in (e.g. via Google or email), we collect:
- Your name and email address
- If you use Google: your profile picture and identifier from Google
We use this to create and manage your account, authenticate you, and provide the service.

1.2 Payment information

When you purchase access to LeadLift, payment is processed by our payment provider (Stripe). We do not store your full card number or card security code on our servers. We may receive and store a reference to your payment (e.g. to confirm purchase and grant access to your dashboard).

1.3 Lead data you enter

When you use the dashboard, you enter lead information (such as names, email addresses, phone numbers, notes, and follow-up dates). We store this data so we can provide the service to you. You are the data controller for this lead data in relation to your own business; we process it on your behalf as part of providing the service.

1.4 Technical and usage data

We use session cookies and similar technologies to keep you logged in and to run the Website. We may collect technical information such as your IP address, browser type, and device information where necessary for security, fraud prevention, or to fix technical issues. We do not use this for advertising or selling to third parties.

2. Purpose of Processing

We use your personal data to:
- Provide the LeadLift service and your dashboard
- Process payments and manage your access
- Communicate with you (e.g. about your account, refunds, or important updates)
- Comply with legal obligations and protect our rights
- Improve and secure the service

3. Legal Basis (UK GDPR)

We process your data where:
- It is necessary to perform our contract with you (providing the service)
- We have a legitimate interest (e.g. security, improving the service), or
- We have your consent where required (e.g. for optional communications)
We may also process data where necessary to comply with the law.

4. Data Sharing

We do not sell your personal data. We may share it only:
- With our payment provider (Stripe) to process payments
- With our hosting and infrastructure providers (e.g. to host the Website and database) under strict confidentiality and data protection terms
- If required by law or to protect our legal rights
We require any such third parties to protect your data in line with this policy and applicable law.

5. Data Retention

We keep your account and lead data for as long as you have an account and use the service. If you close your account or ask us to delete your data, we will delete or anonymise it in line with our legal obligations, except where we must retain it for legal, regulatory, or legitimate business purposes (e.g. resolving disputes or tax).

6. Your Rights (UK)

Under UK data protection law you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data in certain circumstances
- Object to or restrict certain processing
- Data portability (where applicable)
- Withdraw consent where we rely on it
- Complain to the Information Commissioner's Office (ICO): https://ico.org.uk

To exercise any of these rights, contact us at the email address below. We will respond within one month.

7. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No system is completely secure; we cannot guarantee absolute security.

8. Children's Privacy

LeadLift is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will be revised when we do. We will post the updated policy on this page and may notify you by email about significant changes. Continued use of the service after changes means you accept the updated policy.

10. Contact

For any questions, requests, or complaints about this Privacy Policy or your personal data, contact us at:

leadlift@hotmail.com

Thank you for using LeadLift.