Privacy Policy
How MyLeadBase handles business contact information, enquiries and information used to provide our services.
Last updated: 30 October 2026
1. Who is responsible
MYLEADBASE LTD, company number 16634282, registered office: 124 City Road, London, EC1V 2NX, United Kingdom is the controller for personal information used to manage our website enquiries, business relationships, customer administration and our own marketing. Email [email protected] about privacy or to exercise your rights. Where we handle a client’s customer information solely on that client’s instructions, the client normally determines the purposes and we act as its processor; that processing requires separate agreed terms.
2. Information we handle
Depending on your interaction with us, information may include your name, business name, job role, business email address, telephone number, enquiry, correspondence, account and service records, invoices and transaction references. Website providers may also process technical information such as IP addresses, browser/device details, requested pages and security or performance logs. Connected client services may involve product information, images, catalogue entries and business contacts within the agreed scope. Do not send sensitive personal information or full payment-card details in an ordinary enquiry.
3. Where it comes from
You provide information when you email us, request a demonstration or quotation, enter into a service relationship or give us information for agreed work. We may receive relevant business contact details from your colleagues, advisers, authorised integrations or publicly available business sources. We do not treat publicly visible personal information as unrestricted permission to use it for any purpose.
4. Why we use information and our lawful bases
We use enquiry and business-contact information to respond, prepare proposals and manage relationships, relying on our legitimate interests in operating a business and communicating with relevant contacts. Where a contract is with you personally, such as a sole trader, processing necessary to take requested steps or perform that contract may rely on contract. We process billing, accounting and other records to meet legal obligations. Service administration, support, security and the establishment or defence of legal claims may rely on legitimate interests or legal obligations as applicable. Where consent is required, including for particular marketing or optional tracking, we must obtain it and you can withdraw it. We do not rely on a business relationship as blanket permission for every form of marketing.
5. Marketing choices
We may contact relevant business contacts about our services where permitted by law. Marketing must identify us and provide a way to stop it. You can object to direct marketing at any time by emailing [email protected]; we may retain a minimal suppression record so the request continues to be respected. Administrative messages needed for an active service or legal obligation are distinct from optional marketing.
6. Service providers and sharing
We use HighLevel (GoHighLevel/LeadConnector) for website and business-platform functionality. Depending on the services used, information may also be handled by providers supporting hosting, email or messaging delivery, cloud infrastructure, AI processing, professional advice and payments. Authorised integrations such as Mailchimp, Meta or Google may receive relevant information where connected for agreed services. We limit sharing to the purposes and permissions of the relevant setup, legal requirements or legitimate professional advice. We do not sell personal information. If a provider acts independently, its own privacy information also applies.
7. International processing
Some providers operate internationally, so information may be processed outside the UK. A restricted transfer must have an applicable legal safeguard, such as an adequacy decision or approved contractual safeguards. The mechanism depends on the provider and service. HighLevel describes its arrangements in its Privacy Policy and Data Processing Agreement. Contact us for information about the providers and safeguards relevant to your service; this notice does not claim that all data stays in the UK.
8. How long information is kept
Retention depends on the purpose and legal requirements, rather than keeping every record indefinitely. Enquiries are reviewed against the date of the last meaningful contact, whether a quotation or issue is still open, expected follow-up and any objection to further contact. Customer administration records are kept during the relationship and afterwards only as needed for contractual matters, complaints, accounting or legal claims. Accounting records are ordinarily retained for six years from the end of the relevant financial year, or longer where the law or an active enquiry requires it. Client data held as a processor follows the agreed processing terms, return/deletion instructions and any justified backup cycle. Minimal suppression records may be retained to honour marketing objections. Contact us to ask how these criteria apply to a particular record.
9. Security and your responsibilities
We use access controls and appropriate technical and organisational measures suited to the information and service. No website, email system or internet transmission can be guaranteed completely secure. Use authorised access methods, protect your account credentials, and tell us promptly about suspected unauthorised access or a misdirected communication. Do not put confidential client data into illustrative demonstrations.
10. Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal information and object to certain processing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. These rights are subject to relevant legal conditions and exceptions. Email [email protected]; we may need proportionate information to confirm identity and locate the record. If we act as a processor for another business, we will direct or assist your request through that controller. You can also complain to the Information Commissioner's Office.
11. Children, AI and changes
Our services are designed for business use and are not directed at children. The public example conversations are scripted demonstrations, not a live enquiry or an automated decision about you. Where AI is used in a real service, its purpose and data access must be part of the agreed setup; see Data Processing & AI. We update this notice when relevant practices change and show the revised date above.
Questions? Contact [email protected].