Privacy Notice

LeadFlow is operated by Nathaniel Vickers. For the purposes of data protection law, Nathaniel Vickers is the data controller for the personal data described in this notice.

• Account details: your name, email address and login credentials
• Business details: business name, phone, email, service areas and settings
• Support messages you send us
• Usage and device data: IP address, device identifiers and how you use the app
• Enquiry data: contact details, job information and photos that your customers submit through your quote link — you are the controller of this data and we process it on your behalf

Payment card details are collected and processed directly by Paddle, our Merchant of Record. We never see or store your card details.

• Creating and running your account (contract performance)
• Providing the lead management service and storing your enquiries (contract performance)
• Security, fraud prevention and abuse detection (legitimate interests)
• Improving the product through usage analysis (legitimate interests)
• Customer support (contract performance)
• Product and marketing communications, where you have not opted out (consent or legitimate interests)
• Meeting legal obligations such as tax and accounting (legal obligation)

• Service providers that help us run the service, such as hosting, database and analytics providers
• Paddle, our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance and invoicing
• Professional advisers such as lawyers and accountants
• Authorities, where required by law

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep your personal data for as long as your account is active and for as long afterwards as needed for legal, tax and accounting purposes. When data is no longer needed it is deleted or anonymised.

Under UK GDPR you have the right to access, rectify, erase, restrict, object to, and port your personal data, and to withdraw consent at any time. You also have the right to complain to the Information Commissioner's Office (ICO). We respond to requests within one month.

We apply appropriate technical and organisational measures, including encryption in transit and strict access controls, to keep your data secure.

We use essential cookies to keep you signed in and run the app. If we use analytics or marketing cookies, they will be clearly identified and you can manage your preferences in your browser settings.

To exercise your rights or ask a question about this notice, contact us through the support details shown in the app.