Introduction
Right Lead AI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with and the rights you have over it. It applies when you visit our website, contact us, book a call or use our services.
We handle personal data in line with UK data protection law: the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
Who We Are
Right Lead AI is based in West Sussex, United Kingdom, and works with businesses in the UK and around the world. For the personal data described in this policy, we are the "controller", which means we decide how and why it is used.
When we work on a client's lead or customer data, the client is the controller and we act as their "processor". See "Client Lead Data" below.
You can contact us about anything in this policy at hello@rightleadai.com.
Information We Collect
Information You Give Us
We collect information you choose to give us when you:
- Fill in a form on our website
- Book a Lead-Flow Audit or other call
- Use the chat on our website
- Email, phone or message us
- Become a client and set up an account with us
This may include your name, email address, phone number, business name, job title, billing details, and anything else you choose to tell us.
Information Collected Automatically
When you visit our website, our hosting and service providers automatically receive limited technical information, such as:
- IP address
- Browser type and version
- Device type and operating system
- The pages requested and the date and time of the request
Information from Other Sources
We may receive personal data from:
- Our clients, who give us lead and customer lists to work on for them
- Publicly available business sources, such as a company's website or public listings, when we contact a business about our services
How We Use Your Information and Our Lawful Bases
UK data protection law requires us to have a lawful basis for using personal data. We use your information for the following purposes:
- Replying to enquiries and arranging calls. Lawful basis: our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
- Providing our services, managing client accounts and taking payment. Lawful basis: performance of our contract with you.
- Sending marketing messages by email, SMS or WhatsApp. Lawful basis: your consent, or our legitimate interest in telling business contacts and existing customers about similar services, where the law allows. You can opt out at any time.
- Keeping business, accounting and tax records. Lawful basis: compliance with our legal obligations.
- Keeping our website and systems secure, preventing misuse and improving our services. Lawful basis: our legitimate interest in running a safe and effective business.
- Establishing, exercising or defending legal claims. Lawful basis: our legitimate interests and compliance with our legal obligations.
Where we rely on legitimate interests, we make sure those interests are not overridden by your rights and freedoms. Where we rely on consent, you can withdraw it at any time.
Automated Messages
Some of our replies to enquiries are sent automatically, including with the help of AI tools. We do not use automated processing to make decisions that have a legal or similarly significant effect on you, and you can ask to deal with a person at any time.
Marketing Messages
We only send marketing by email, SMS or WhatsApp where PECR allows it: where you have agreed to receive it, where you are an existing customer and the message is about similar services, or where you are a business contact that the rules permit us to approach.
Every marketing message tells you how to opt out. You can also opt out at any time by replying STOP to a text message, using the unsubscribe link in an email, or emailing hello@rightleadai.com. Opting out does not affect messages we need to send about a service you have asked for.
Client Lead Data
Our clients ask us to follow up enquiries and contact people on their behalf. When we do this, the client decides why and how that personal data is used and is the controller. We act as their processor: we use the data only on the client's instructions and under a written agreement, as the UK GDPR requires.
If you have been contacted on behalf of one of our clients and want to exercise your rights, it is usually best to contact that business directly. You can also contact us and we will pass your request to them.
Cookies and Similar Technologies
What We Use
Cookies are small files stored on your device. Similar technologies, such as your browser's local storage, work in the same way.
Our website does not use advertising cookies or analytics cookies. The chat, contact form and booking pages are provided through our customer relationship management (CRM) platform, which may store a small amount of information on your device so that these features work, for example to keep a chat or a part-completed form in place.
Fonts
Our website loads its fonts from Google Fonts. To deliver them, Google receives your IP address and basic browser information. Google does not set cookies for this.
Managing Cookies
Most web browsers let you block or delete cookies and local storage through their settings. If you do, the chat, form and booking features may not work properly. If we ever introduce cookies that are not strictly necessary, we will ask for your consent first and update this policy.
Who We Share Your Information With
We do not sell your personal data. We share it only in the following circumstances:
- Service providers: Businesses that provide services to us, such as website hosting, our CRM platform, email, SMS and WhatsApp messaging, calendar booking and payment processing. They act on our instructions and are bound by contract to keep your information secure
- Professional advisers: Accountants, lawyers and insurers, where needed
- Legal requirements: When required by law, a court order or a regulator
- Business transfers: In connection with a sale or restructuring of our business, subject to the same protections
- Your consent: Where you ask or agree for us to share it
International Transfers
Some of our service providers are based, or store data, outside the United Kingdom. When your personal data is transferred outside the UK, we make sure it is protected by a safeguard recognised under UK law, such as UK adequacy regulations for the destination country, or the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more information about the safeguards we use.
How Long We Keep Your Information
We keep personal data only for as long as we need it for the purposes described in this policy:
- Enquiries that do not lead to work together are kept for as long as needed to deal with the enquiry and for a reasonable period afterwards in case you come back to us
- Client account and service records are kept while you are a client and for a reasonable period afterwards
- Invoices and accounting records are kept for as long as UK tax law requires
- Marketing contact details are kept until you opt out. We then keep a record of your opt-out so that we do not contact you again
- Client lead data is kept according to the client's instructions and our agreement with them
When information is no longer needed, we securely delete or anonymise it.
Data Security
We use appropriate technical and organisational measures to protect your information against unauthorised access, loss, alteration or disclosure. These include:
- Encrypted connections (HTTPS) on our website and platform
- Password protection and access controls on our systems
- Limiting access to personal data to those who need it
- Using established service providers that maintain their own security standards
No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to put your rights and freedoms at risk, we will tell you and the Information Commissioner's Office as the law requires.
Your Rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal data we hold about you
- Ask us to correct inaccurate or incomplete data
- Ask us to erase your data in certain circumstances
- Ask us to restrict how we use your data in certain circumstances
- Object to our use of your data, including an absolute right to object to direct marketing
- Ask for your data in a portable format, where this applies
- Withdraw your consent at any time, where we rely on consent
- Not be subject to decisions made solely by automated means that have a legal or similarly significant effect on you
Exercising Your Rights
To exercise any of these rights, email hello@rightleadai.com. There is normally no charge. We may need to confirm your identity first. We will respond within one month. If a request is complex, the law allows us to extend this by up to two further months, and we will tell you if we need to.
If You Are Outside the United Kingdom
We work with businesses worldwide. If you are in the European Economic Area, you have equivalent rights under the EU General Data Protection Regulation. If you are elsewhere, you may have additional rights under your local law. Whatever your location, you can contact us using the details below and we will deal with your request fairly.
Children's Privacy
Our services are for businesses and are not aimed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.
Third-Party Links and Services
Our website and services may contain links to third-party websites and services that we do not operate. This Privacy Policy applies only to information we collect. We are not responsible for the privacy practices of third parties, and we encourage you to read their privacy policies before giving them any information.
Contact Us and Complaints
If you have questions, concerns or requests about this Privacy Policy or how we use your personal data, please contact us:
Right Lead AI
West Sussex
United Kingdom
Email: hello@rightleadai.com
Complaints
If you are unhappy with how we have handled your personal data, please tell us first by emailing hello@rightleadai.com so that we can try to put it right. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. We will post the updated version on this page and change the "Last updated" date at the top. If we make a significant change to how we use your personal data, we will tell you directly where we reasonably can.