Privacy Policy

LeadCentre ("we", "us") operates my.leadcentre.com and a network of home-services websites (for example boilerquotes.com) that connect homeowners with one trusted local trade business. This policy explains what personal information we collect on those websites, in our partner portal and in the LeadCentre app for iPhone and Android, how we use it, and the rights you have over it. The app is covered in section 8, and connecting a Facebook or Instagram lead form in section 9.

1. Who we are

LeadCentre is the trading name for the lead-generation service operated by iLeads Ltd (United Kingdom). For anything in this policy, including any request to see, correct or delete the information we hold about you, email [email protected].

2. Information we collect

If you are a homeowner using one of our local websites:

• The details you give us in a quote form: your name, phone number, email address (optional), postcode and a description of the job, together with the time of your consent to be contacted.
• If you call the number shown on the site: your phone number, the time and duration of the call, and a recording of the call. Calls are recorded for quality purposes and you hear a notice before being connected.
• Technical information such as your IP address and browser type, used for spam and fraud prevention.

If you are a partner (a trade business) using my.leadcentre.com:

• Account details: company name, contact name, email, phone numbers, VAT number and notification preferences.
• Billing information: wallet balance and transaction history. Card details are collected and held by our payment provider, Stripe - we never see your full card number.

If you apply to become a partner on one of our websites: the details you provide in the form, plus your IP address for spam prevention.

3. How we use it

• To deliver your enquiry. A homeowner's enquiry is passed to one local trade business - the partner for that website - so they can contact you about the job. It is never shared with more than one business and never sold to lists.
• To run partner accounts: delivering lead notifications by email, SMS and WhatsApp, billing per delivered lead, and handling flagged leads (which may involve reviewing a call recording).
• To send instant replies: where a partner on our new portal switches this on, we email the customer on the partner's behalf when their enquiry arrives, using the email address they gave, to acknowledge it. Replies go to the partner.
• To keep the service safe: preventing spam, duplicate and fraudulent enquiries.
• To respond to enquiries you send us.

Our lawful bases are: performance of a contract (partner accounts and billing), consent (homeowner enquiry forms), and legitimate interests (delivering the enquiry you asked us to pass on, fraud prevention and call recording for quality and flag resolution).

4. Who we share it with

• The assigned partner: the one local trade business that receives your enquiry so they can contact you.
• Service providers who process data for us: Supabase (database and hosting), DigitalOcean (hosting), Stripe (payments), Twilio (calls, SMS and WhatsApp), Resend (email), Google (Google Tag Manager and the analytics tags loaded through it, used with your consent) and, for the LeadCentre app, Expo, Apple and Google, which deliver app notifications and updates, and Anthropic, whose AI suggests how a connected form or webhook's field names match our own (see section 9). Each processes data only on our instructions.
• Authorities where we are legally required to.

We do not sell personal information to anyone.

5. How long we keep it

Lead and call records (including recordings) are kept while the partner relationship and any flag window is active and for our accounting records afterwards. Partner account and transaction records are kept for as long as required for tax and accounting purposes. Partner applications are kept for up to 24 months.

6. Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal information; ask us to restrict or object to processing; and withdraw consent at any time. If you are a homeowner and no longer want to be contacted about an enquiry, tell us or the business that contacted you and we will action it. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

7. Cookies

my.leadcentre.com uses necessary cookies only, to keep partners signed in to the portal. There is no analytics or advertising tracking there, so there is nothing to consent to and no banner.

Our home-services websites additionally use, with your consent, analytics cookies through Google Tag Manager to understand how the site is used. A banner asks for your choice on your first visit, and you can change or withdraw it at any time using the "Cookie settings" option on the site.

Some of the local lead-generation websites in our network also use advertising technologies, such as the Meta (Facebook) Pixel, to measure and target advertising. Where they do, that website's own cookie banner and privacy policy explain it, and these only run where you accept marketing cookies.

8. The LeadCentre app (iPhone and Android)

The LeadCentre app is for our partners: the trade businesses that receive leads from us, and their team members. It lets you see the leads delivered to your business, contact customers and track each job. It uses the same account as my.leadcentre.com, and accounts are set up by us, not in the app.

The LeadCentre app. If you use our mobile app we process your sign-in details, the name and photo you add to your profile, your business contact numbers, and what you record about your leads (status, folders and job values). To send notifications we store a push token for each device you sign in on; signing out removes it. We use this only to run the app and the LeadCentre service, never for advertising, and we do not share it with third parties other than the providers that host the service and deliver notifications (Supabase, Expo, Apple and Google).

What the app collects and why:

• Your sign-in. Your email address and password. Your password is checked by our authentication service and never stored in readable form. The app keeps you signed in by storing a session key in your phone's secure storage (the iOS Keychain or Android Keystore).
• Your profile. Your name and, if you choose one, a profile photo. The app opens your photo library only when you tap to change your photo and uploads only the image you pick. Account admins can also update the business name and the mobile and WhatsApp numbers used for lead alerts.
• What you record about your leads. Each lead's status (for example Contacted, Quoted or Won), the folders you create, which leads you have viewed or archived, and the job value you enter when you mark a lead Won. This is shared with the other people on your partner account.
• Notifications. If you allow notifications, we store your phone's push notification token, whether it is an iPhone or Android phone, and its model name (for example "iPhone 15"), so we can alert you to new leads on the right device. You can turn alerts off in the app's Settings or in your phone's settings at any time, and signing out removes the token.
• Your settings. Appearance (light or dark) and region, used to show job values in your currency.

Customer details you see in the app. The app shows the leads delivered to your business, including the customer's name, phone number, email address, postcode and job details. When you tap Call, Text, WhatsApp or Email, the app opens your phone's own app with those details filled in, and what happens next is handled by that app and its provider. A partner may use a customer's details only to deal with their enquiry and in line with data protection law.

What the app does not do. It has no advertising, analytics or tracking tools and does not track you across other companies' apps or websites. It does not access your location, contacts, camera or microphone. It takes no payments: ordering and billing stay on my.leadcentre.com. We do not sell any of this information.

Who handles it. App data is stored by Supabase, as in section 4. Notifications and app updates are delivered by Expo, with Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging) delivering notifications to your phone. All data between the app and our servers is encrypted in transit. Some of these providers may process data outside the UK; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or adequacy regulations.

Lawful basis and retention. We use this information to provide the service in our contract with you, and with your consent for notifications and photo access, which you can withdraw in your phone's settings. App data is kept while your account is open; push tokens are removed when you sign out.

Deleting your account. To delete your LeadCentre account and the personal information linked to it, email [email protected] from the address you sign in with, with the subject "Delete my account". We will confirm the request and delete your sign-in, profile, photo and push tokens within 30 days. Records we must keep by law, such as invoices and the lead and transaction records described in section 5, are kept for the required period. Uninstalling the app does not delete your account. The app is for businesses and is not intended for anyone under 18.

9. Connecting Facebook and Instagram lead forms

Partners using our new portal can connect a Meta account (Facebook and Instagram) so that leads from their own Instant Forms arrive in their LeadCentre inbox. This is optional, and only an admin on the partner account can do it. It is separate from anything Meta does with your information under its own policy.

What we receive when you connect a Meta account:

• Your Meta user ID and name, and access tokens that let us act on your behalf.
• The names and IDs of the Facebook Pages you choose to share.
• The names, status and questions of the Instant Forms on those Pages.
• For forms you add in the portal only, the answers each person gives on that form. We do not fetch or keep leads from forms you have not added.

We do not access your posts, messages, friends, ad accounts or ad spend through this connection, and we do not ask Meta for them.

How we use it. Only to deliver leads from your chosen forms to your inbox, to let you match form questions to your lead fields, and to tell you if the connection needs attention. We never use it for advertising, and we do not sell it or share it with other partners. A Page can be connected to one LeadCentre account at a time.

Smart Match. To suggest how a form's questions match your lead fields we may send the question names and wording to Anthropic, our AI provider. We never send a customer's answers. You check each suggestion before saving.

If you filled in one of these forms. The business whose form you completed decides how your details are used and is responsible for them, and we process them on its behalf. Please contact that business first about your details. You can also email [email protected].

How long we keep it. Tokens are stored encrypted and, with your Pages, forms and our record of each lead received, are kept until the connection is removed. Leads already delivered to an inbox are the partner's customer records and are kept as described in section 5, and removing a connection does not delete them.

Removing the connection and deleting your data. There are three ways:

• In the portal, under Settings, Connections, choose Disconnect.
• On Facebook, remove LeadCentre from your connected business integrations or apps, or ask Meta to send us a deletion request. We delete your connection when Meta tells us, and a deletion request gives you a code and a page confirming it.
• Email [email protected] and we will delete it within 30 days.

Each of these deletes your Meta user ID and name, tokens, connected Pages and forms, and any leads waiting to be delivered.

10. Changes

If we make material changes to this policy we will update this page and the date at the top. Any questions, email [email protected].