Privacy Policy

1. Who We Are

LeadBuzz ("we", "us", "our") provides mobile-first lead capture, email and browser notifications, and callback workflow tools for UK trade and service professionals operating at https://www.leadbuzz.site.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018:

• We act as a Data Controller for personal data collected when you register for an account, subscribe to our service, or visit our marketing website.
• We act as a Data Processor when processing enquiries submitted by your customers via your public LeadBuzz page, widget, or QR code.

For privacy questions, contact support@leadbuzz.site.

2. Information We Collect

A. Information You Provide Directly:

• Account Registration: Name, business name, trade/profession, email address, password, phone number, and service area.
• Optional product email updates: Your account email and business details, plus a record of when you opted in or out. We only use these details for LeadBuzz product news and tips if you actively subscribe in account settings.
• Billing Information: Payment card details and billing address (processed securely by our payment partner, Stripe; LeadBuzz does not store raw credit card numbers).
• Communications: Any support tickets, feedback, or email correspondence.

B. Customer Enquiries Collected on Your Behalf:

• Name, telephone number, email address, job description, street address, and postcode submitted via your hosted callback page.
• Phone and email button click counts for each business page, used to show activity totals in that business's dashboard.

C. Automated & Technical Data:

• Service and security logs may include IP address, browser or device information, operating system, and request timestamps. Request metadata is used for rate limiting, security, and service operation; hosting providers may retain infrastructure logs under their own policies.
• Web push subscription endpoints (used to deliver browser notifications on devices where push has been enabled).

3. Lawful Basis for Processing (UK GDPR Art. 6)

• Contractual Necessity: To provide the LeadBuzz service, dispatch lead notifications, and process subscription payments.
• Legitimate Interests: To protect our platform from spam, fraud, DDoS attacks, and unauthorized table scraping, and to improve system reliability.
• Legal Obligation: To maintain accounting records and tax documentation in compliance with UK HMRC regulations.
• Consent: For browser notifications when you enable them in your browser or device.
• Consent: For optional LeadBuzz product and business-update emails when you switch them on in account settings. You can withdraw that permission there at any time.

4. Third-Party Data Processors

We use the following infrastructure and software providers to operate LeadBuzz:

• Supabase Inc. – Database hosting and account authentication.
• Stripe – Subscription checkout and billing. Card details entered through Stripe checkout are handled by Stripe; LeadBuzz does not store raw card numbers.
• Brevo (Sendinblue SAS) – Transactional email delivery, customer-requested lead synchronization, and optional LeadBuzz business-update emails for subscribed account holders.
• Vercel Inc. – Edge hosting, serverless computing, and static asset distribution.
• Vapi – If your business connects its own Vapi voice agent, call events and the details included in those events are sent to LeadBuzz.
• Google Maps – If you choose to open directions for a booked lead, the location is included in the link opened with Google Maps.

5. Data Retention

We retain account and customer lead data while an account is active and as needed to provide the service. To request deletion or a copy of your data, contact support@leadbuzz.site. Some billing records may need to be retained where required by law.

6. Your Rights Under UK GDPR

You have the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request permanent deletion of your personal records ("right to be forgotten").
• Restriction: Ask us to limit the processing of your data under certain circumstances.
• Data Portability: Where the legal right applies, request a copy of your personal data in a portable format by contacting us.
• Objection: Object to processing based on legitimate interests.

To exercise any of these rights, email us at support@leadbuzz.site. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.