Privacy Policy

Last updated: 11 November 2026

The short version

Lead Code is a lead generation company. We connect homeowners who ask for a quote or information about a home improvement project with one home improvement company that covers their area.
If you are a homeowner and you send us an enquiry, we pass your details to the single company named on the form you completed, so that it can contact you about your enquiry. We do not sell your details to anyone else.
If you are a business, we use your details to answer your enquiry, assess your application and supply our services to you.
You can ask us to stop using your information, to delete it, or to send you a copy at any time. Email [PRIVACY EMAIL ADDRESS].

1. Who we are

"Lead Code", "we", "us" and "our" mean [FULL LEGAL NAME, e.g. Lead Code Ltd], a company registered in [England and Wales] with company number [COMPANY NUMBER], whose registered office is at [REGISTERED OFFICE ADDRESS].

We are the controller of the personal information described in this policy. That means we decide how and why it is used, and we are responsible for it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER].

You can contact us about anything in this policy:

By email: [PRIVACY EMAIL ADDRESS]
By post: [POSTAL ADDRESS]
By phone: [PHONE NUMBER]

We are not required to appoint a Data Protection Officer. [NAME / JOB TITLE] is responsible for data protection at Lead Code.

2. Who this policy covers

This policy applies to three groups of people:

Homeowners who respond to one of our adverts, landing pages or enquiry forms to ask for a quote, a call back or an appointment for a home improvement product or service.
Business contacts: people at home improvement companies who contact us, apply to work with us through this website, or are our clients, and people at our suppliers.
Visitors to this website.

Our services are not aimed at children and we do not knowingly collect information from anyone under 18.

3. The information we collect

Homeowners

We collect this directly from you when you complete one of our enquiry forms (on a landing page, or inside an advert on a platform such as Facebook, Instagram or Google) or when you speak to us:

Your name, phone number and email address.
Your address or postcode.
Details of your enquiry: the product or service you are interested in, whether you own the property, and your answers to our qualifying questions (for example, property type, timescale or budget).
Your preferred appointment times, where you ask for an appointment.
A record of your consent: what you agreed to, the wording you saw, the company named, and the date, time and source of your enquiry (including the advert or campaign you came from and, where available, your IP address).
The result of the verification code we text to your mobile number, where we use SMS verification.
Notes and recordings of calls with us, where we call you to confirm your enquiry or book an appointment. We will tell you at the start of the call if it is being recorded.

You do not have to give us any of this, but without your contact details and enquiry details we cannot pass your enquiry on.

We do not ask for special category information (such as health information). Please do not include it in free-text answers.

Business contacts

Your name, business email address, phone number and business address, which you give us through the contact form or application form on this website, or by email or phone.
What you tell us about your business: whether you want leads or appointments, the volumes you need, your service area and capacity, and anything in your message.
If you become a client: contract, billing and payment records, and our correspondence with you.

We may also obtain basic business contact details from public sources such as Companies House, your company website and professional networking profiles.

Website visitors

Our hosting provider automatically records standard technical information when you visit, such as your IP address, browser type, the pages requested and the date and time. See section 11 for cookies.

4. How we use information and our lawful bases

The law requires us to have a "lawful basis" for each use of personal information. The table sets out ours.

What we do	Whose information	Lawful basis
Pass your enquiry to the home improvement company named on the form so that it can contact you by phone, email or text about your enquiry	Homeowners	Consent. You can withdraw it at any time (see section 12).
Verify your phone number by text, check your enquiry is genuine, and call or message you to confirm details or book the appointment you asked for	Homeowners	Legitimate interests: making sure enquiries are real, accurate and wanted, and delivering the service you asked for.
Keep a record of your consent and of any request to opt out, including a suppression list so we do not contact you again	Homeowners and business contacts	Legal obligation and legitimate interests: being able to show we comply with data protection and marketing law.
Reply to your message or application and discuss our services with you	Business contacts	Legitimate interests: responding to enquiries and winning new business. Where you are a sole trader or partner, also steps taken at your request before entering a contract.
Supply our services, deliver leads and appointments, invoice and manage the account	Business contacts (clients)	Contract (where the contract is with you personally) or legitimate interests (where it is with your company).
Send you information about our own services by email or phone	Business contacts	Legitimate interests: promoting our business to other businesses. Sole traders and partnerships are only emailed with consent or where the "soft opt-in" applies. You can opt out at any time.
Keep accounting and tax records	Business contacts	Legal obligation.
Measure and improve our adverts, forms and lead quality, using aggregated or pseudonymised information where we can	Homeowners and visitors	Legitimate interests: understanding what works and improving our service.
Keep our website and systems secure, prevent fraud and misuse, and deal with complaints, disputes and legal claims	Everyone	Legitimate interests: protecting our business and the people we deal with, and, where it applies, legal obligation.

Where we rely on legitimate interests, we have weighed them against your interests and rights. You have the right to object (see section 12).

Automated decisions. We match enquiries to a company using the postcode and the service requested. We do not make decisions about you by automated means that have a legal or similarly significant effect on you.

5. Homeowners: how your enquiry is shared

This is the most important part of this policy if you are a homeowner.

One company only. Your enquiry is passed to one home improvement company that covers your area and supplies the product or service you asked about. We do not resell your enquiry or share it with a list of companies.
You are told who. The company is named on the form before you submit it. [CONFIRM: every enquiry form and advert must name the receiving company next to the consent statement. If any form does not, either add the name or change this section.]
What we pass on. Your name, phone number, email address, address or postcode, the details of your enquiry and, where relevant, your appointment time.
What it will do. The company will contact you by phone, email or text message to discuss your enquiry, give you a quote or confirm your appointment.
It becomes responsible too. Once it receives your details, that company is a separate controller of them and will use them under its own privacy policy. Our contracts require it to use your details only to deal with your enquiry and to respect any request you make to stop.

If you change your mind, tell us and we will stop and will tell the company that received your enquiry. You can also tell that company directly.

If we received your details from someone other than you (for example, an advertising platform's lead form or a marketing partner working for us), the source was [NAME THE SOURCES, e.g. Meta lead adverts (Facebook and Instagram), Google lead form adverts], and the categories of information are those listed in section 3.

6. Marketing calls, emails and texts

We only arrange for a company to call, email or text a homeowner where that homeowner has asked to be contacted about their enquiry and agreed to it on our form.
We do not make unsolicited marketing calls to homeowners, and we do not buy in marketing lists.
Before making any marketing call that the person has not specifically asked for, we screen numbers against the Telephone Preference Service (TPS), the Corporate TPS and our own do-not-call list.
Every marketing email or text we send says who it is from and includes a simple way to opt out.

You can opt out of direct marketing at any time, free of charge, and we will always act on it. Email [PRIVACY EMAIL ADDRESS], use the unsubscribe link in any email, or reply STOP to any text.

We share personal information only with:

The home improvement company named on your form (homeowners only), as described in section 5.
Service providers who work for us under contract and on our instructions: website hosting, customer relationship management (CRM) and lead delivery software, email, calendar and booking tools, SMS verification and telephony, and accounting software. [LIST THE PROVIDERS YOU ACTUALLY USE, e.g. hosting provider, CRM, SMS provider, email provider]
Advertising platforms such as Meta (Facebook and Instagram) and Google, where you complete a form inside an advert on their platform. Those platforms also process your information for their own purposes under their own privacy policies.
Professional advisers such as our accountants, lawyers and insurers, where they need it.
Regulators, courts and law enforcement, such as the ICO or HMRC, where the law requires it or to establish or defend legal claims.
A buyer or successor, if we sell, merge or reorganise our business. The information would stay protected by this policy.

We do not sell personal information to data brokers or list sellers.

8. Transfers outside the UK

Some of our service providers and the advertising platforms we use are based, or store information, outside the UK, including in the European Economic Area and the United States. When information is transferred outside the UK we make sure one of these protections applies:

the destination is covered by UK adequacy regulations (for example, the EEA, or US organisations certified under the UK Extension to the EU-US Data Privacy Framework); or
the recipient has signed the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

9. How long we keep information

Information	How long we keep it
Homeowner enquiries	[12 months] from the date of the enquiry, then deleted or anonymised
Records of consent given by homeowners	[3 years] from the date of the enquiry, so that we can show the consent was valid if it is questioned
Opt-outs and our suppression list	Indefinitely, limited to the minimum needed (such as a phone number or email address) to make sure you are not contacted again
Call recordings	[6 months]
Business enquiries and applications that do not lead to a contract	[24 months] from our last contact with you
Client contracts, invoices and account records	6 years after the end of the contract, plus the current tax year, to meet tax and accounting rules and to deal with any legal claims
Website server logs	[Up to 12 months]

We may keep information for longer where we need it for a complaint, dispute or legal claim that is still open.

10. How we protect information

We use appropriate technical and organisational measures to protect personal information, including encryption in transit, access controls limited to staff who need the information, strong authentication on the systems that hold lead data, and contracts with our providers and clients that require them to keep it secure.

No system is completely secure. If a breach is likely to result in a high risk to you, we will tell you without undue delay, and we will report breaches to the ICO where the law requires.

11. Cookies and similar technologies

This website does not currently set any advertising or analytics cookies. [CONFIRM BEFORE PUBLISHING. If you add Google Analytics, the Meta Pixel, Google Ads tags or similar, this section must be rewritten and a cookie consent banner added first, because advertising and tracking technologies need consent before they are set.]

The website loads its typeface from Google Fonts. To deliver the font files, Google receives your IP address and basic browser information. Google says it does not use this to profile you or to target advertising.

If we start using cookies or similar technologies that are not strictly necessary, we will ask for your consent first, where the law requires it, and explain here what each one does.

12. Your rights

You have the following rights over your personal information. They are free to use.

Access: to ask for a copy of the information we hold about you.
Rectification: to have inaccurate or incomplete information corrected.
Erasure: to have your information deleted in certain circumstances.
Restriction: to ask us to limit how we use your information in certain circumstances.
Portability: to receive information you gave us in a commonly used electronic format, or have it sent to another organisation, where we use it on the basis of consent or contract.
Withdraw consent: where we rely on your consent, you can withdraw it at any time. It is as easy to withdraw as it was to give: just email us. Withdrawing does not affect what was done lawfully before.

Your right to object. You have the right to object at any time to our use of your information for direct marketing. If you do, we will stop. There are no exceptions. You also have the right to object to any use that is based on our legitimate interests; we will stop unless we have compelling grounds to continue or need the information for legal claims.

To use any of these rights, email [PRIVACY EMAIL ADDRESS] or write to us at the address in section 1. We may need to ask for proof of identity. We will respond within one month; in complex cases the law lets us extend this by up to two more months, and we will tell you if we need to.

If your enquiry has already been passed to a home improvement company, we will tell that company about your request. As a separate controller it is also responsible for answering requests about its own use of your information.

13. Complaints

If you are unhappy with how we have used your information, please tell us first so we can put it right. You can complain by email to [PRIVACY EMAIL ADDRESS] [OR LINK TO AN ONLINE COMPLAINT FORM] or by post.

We will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint

The ICO will usually expect you to have complained to us first.

14. Changes to this policy

We will update this policy when what we do with personal information changes or the law changes. The date at the top shows when it was last revised. If a change significantly affects how we use information we already hold about you, we will tell you directly where we can.