1.0 Introduction: Our Commitment to Your Privacy Choices

We, Lead Pronto, take the protection of your personal data very seriously. We adhere strictly to data protection laws, including the General Data Protection Regulation (GDPR-EU and GDPR-UK), and operate on a strict opt-in basis. This means we will only collect and process your personal data after you have given your explicit, affirmative consent for specific purposes outlined in this policy.

This privacy notice gives you clear information on how we request, collect (with your permission), and process your personal data when you interact with our site or services.

If you have any questions about this privacy notice or wish to exercise your legal rights, please contact us using the details in section 15.0 Right to Complain.

2.0 Why We Might Request Your Personal Information (With Your Consent)

We will only seek to collect and process your personal data if you provide your explicit consent for one or more of the following specific purposes:

  • To manage communications initiated by you.
  • To perform a contract we have entered into with your prior agreement.
  • To provide you with information you have specifically requested.
  • To ensure the safe operation and monitor the performance of our website (using essential cookies only, unless you opt-in to others – see Section 11.0 Cookies).
  • For marketing and advertising purposes (Requires Specific Opt-In): This includes email, SMS, telephone, and postal marketing about Home Improvement and related services. We will only contact you for these purposes if you explicitly opt-in to receive such communications via your preferred channel(s). You can withdraw this specific consent at any time without affecting other services.
  • For data analysis and system integration directly necessary to provide a service you’ve requested and consented to.
  • For sharing data with specific clients (Requires Specific Opt-In): We will only share your data with relevant clients to fulfil a request you have made if you explicitly consent to this specific sharing for each instance or type of request.

3.0 Lawful Basis Of Processing: Consent First

Our primary lawful basis for collecting and using your personal information is your explicit consent, freely given for specific, defined purposes.

In limited circumstances, other lawful bases may apply after consent has been established for the initial engagement:

  • Performance of a Contract: If processing is necessary to fulfil a contract you have consented to enter into with us.
  • Legal Obligation: If processing is necessary for compliance with a legal obligation to which we are subject (e.g., a court order).
  • Legitimate Interest: We rely minimally on legitimate interest and only where processing is strictly necessary for purposes that do not override your fundamental rights and freedoms, and where seeking explicit consent is not feasible or appropriate for that specific, necessary task (e.g., essential website security monitoring). We conduct a thorough assessment (Purpose, Necessity, Balancing tests) in such rare cases and do not rely on legitimate interest for marketing or non-essential data sharing.

4.0 What Information We Collect (Only With Your Explicit Consent) and Where From

We will only collect the following categories of personal information after you have given your explicit consent for us to do so, typically when you actively choose to register, request information, make an enquiry, or use specific services:

  • Name
  • Address
  • Telephone number
  • Email address
  • Homeowner’s income (only if relevant to a service you explicitly request and consent to provide this for)

This information is collected directly from you when you choose to provide it.

4.1 Special Category Data (Not Currently Collected)

We do not currently collect special category data (e.g., health, ethnicity). If we ever need to collect such data in the future, we will only do so with your explicit consent under Article 9 GDPR conditions, for a clearly stated purpose.

4.2 Third-Party Platforms and Your Consent

We may interact with you or receive information via third-party platforms (e.g., Facebook, PPC/SEO forms, Taboola, LinkedIn, Criteo, Affiliates, Instagram). We will only collect personal data originating from these sources if you have explicitly consented to share that information with us, either through the platform’s settings or directly via our forms/interactions linked from those platforms. We do not collect data from these platforms without your direct action and consent.

5.0 How Long We Keep Information For (Based on Your Consent)

We retain your personal data only for as long as necessary to fulfil the specific purpose(s) for which you provided consent, or as required by specific laws or regulations. Retention periods are defined in our internal policy. If you withdraw your consent, we will delete your data unless there is a compelling legal obligation to retain it for a limited period. Please contact us (Section 16.0 Additional Information) for details on specific retention periods relevant to your data.

6.0 Security of Your Personal Information

We take protecting your privacy seriously and implement robust technical and organisational measures to secure your personal data against unauthorised access, alteration, disclosure, or destruction, in line with Data Protection laws. Access is strictly limited to personnel who need it for their job function, acting only on our instructions. We have procedures for handling data breaches and will notify you and relevant regulators if legally required.

7.0 Children’s Information

Our services are not directed at children, and we do not knowingly collect personal information from individuals under the age of 16. If you believe we have inadvertently collected information about a child, please contact us immediately (Section 15.0 Right to Complain) so we can remove it.

8.0 Your Individual Rights Under GDPR

You have several rights regarding your personal data under GDPR:

  • Right to be Informed: To receive clear information about how your data is processed (as provided in this notice).
  • Right of Access: To request a copy of the personal data we hold about you.
  • Right to Rectification: To have inaccurate or incomplete data corrected.
  • Right to Erasure (‘Right to be Forgotten’): To request deletion of your data where there is no compelling reason for us to keep processing it (e.g., after withdrawing consent).
  • Right to Restrict Processing: To temporarily limit how we process your data under certain circumstances.
  • Right to Data Portability: To receive your data in a machine-readable format and transfer it to another controller (where processing is based on consent and automated).
  • Right to Object: To object to processing based on legitimate interests or for direct marketing (you can always object to direct marketing).
  • Right to Withdraw Consent: (See Section 9.0 Your Consent).
  • Rights related to Automated Decision Making & Profiling: (See Section 12.0 Automated Decision Making).

To exercise any of these rights, please contact us (Sections 15.0 Right to Complain or 16.0 Additional Information). Some rights are complex; refer to ICO guidance for full details.

9.0 Your Consent: You Are in Control (Opt-In Required)

We operate on an explicit opt-in basis. We will not process your personal data for purposes like marketing, non-essential analysis, or sharing with third-party clients unless you have actively and affirmatively agreed by ticking a box, clicking a specific consent button, or taking similar unambiguous action for each specific purpose.

You have the absolute right to withdraw your consent at any time. Withdrawing consent is as easy as giving it. This will not affect the lawfulness of any processing carried out before you withdrew your consent. Upon withdrawal, we will cease the specific processing activity your consent related to, unless another lawful basis (like a legal obligation) strictly requires us to continue for a limited purpose.

10.0 Consequences of Not Providing Consent or Information

You are not required to provide consent or personal data to us. However, if you choose not to opt-in or provide specific data requested for a particular service, we may be unable to:

  • Provide the service or information you have requested (if the data is essential for it).
  • Fulfil a contract (if consent to process necessary data is withheld).
  • Provide you with marketing or promotional offers (if you do not opt-in).

We will inform you at the point of collection if providing certain information or consent is necessary for a specific service. Choosing not to consent simply means the related activity will not occur.

11.0 Cookies (Requires Your Opt-In)

Our website uses cookies. We only use strictly necessary cookies for basic website function by default. For all other cookies (e.g., analytics, marketing, third-party), we require your explicit opt-in consent via our cookie banner/management tool before they are placed on your device. Please see our separate Cookie Policy for full details and to manage your preferences.

12.0 Automated Decision Making (Not Currently Used)

We do not currently use your personal data for automated decision-making (decisions made solely by automated means without human involvement) or profiling that produces legal or similarly significant effects. Should this change, we would only do so with your explicit prior consent and provide mechanisms for you to request human intervention or contest decisions. (See Section 13.0 Transfers To Third Parties regarding AI bots for communication assistance).

13.0 Transfers To Third Parties (Only With Your Explicit Consent)

We will only share or disclose your personal data (listed in section 4.0 What Information We Collect) with third parties if you have given your explicit, specific consent for us to do so, and only for the purposes you have agreed to.

Potential categories of recipients we might ask for your consent to share data with include:

  • Third parties supporting service delivery (e.g., IT support, specific software providers needed for a service you requested).
  • Marketing service providers (only if you opt-in to specific marketing campaigns involving them).
  • Payment service providers (if you make a purchase).
  • Recruitment service providers (if you apply for a job).

All third parties we use are contractually bound to protect data shared with them based on your consent.

Use of Artificial Intelligence (AI) in Lead Generation and Communications (Requires Opt-In)

We may offer the use of AI technologies (e.g., AI chatbots, AI voice interactions) to enhance communication efficiency.

  • AI-Powered Communication & Chatbots: Use of AI bots for web chat, WhatsApp, SMS etc., to provide responses or qualify inquiries requires your prior interaction and consent. You initiate the chat or agree to the interaction.
  • AI-Driven Analysis: Analysis of interaction data to improve services is done in aggregate or anonymised form where possible. Analysis linked to your personal data requires your consent.
  • Automated Decision-Making: AI might assist in initial qualification, but significant decisions involve human oversight. Interaction with these systems implies initial consent for that interaction.
  • AI-Powered Calling & AI Voice Bots: We will only use AI-powered calling or voice bots to contact you or handle interactions if you have explicitly consented to this method of communication for confirmations, qualifications, or follow-ups. You can opt-out of AI calls/bots at any time. Calls may be recorded for quality/training (subject to consent/notification).
  • WhatsApp Messaging & AI Chatbots: Providing your number and initiating or agreeing to WhatsApp communication constitutes consent for that channel. AI chatbots may assist; you can stop messages by replying “STOP”.

Your Rights Regarding AI Communications:

  • You have the right not to consent or to opt-out of AI-powered calling, specific AI bot interactions, or WhatsApp messaging at any time.
  • You can request human intervention in AI-driven processes.
  • You retain all your data rights (access, rectification, erasure) concerning data processed by AI.
  • Withdrawal of consent for AI communication will not affect other services (unless the AI interaction is integral to that specific service and no alternative is feasible).

Contact us at [email protected] if you have questions or wish to manage your AI interaction consents.

14.0 Transfers Outside Of The EEA (Requires Consent and Safeguards)

We will only transfer your personal data outside the European Economic Area (EEA) if you have explicitly consented to the processing activity that necessitates such a transfer, and appropriate safeguards are in place. These safeguards could include:

  • Standard Contractual Clauses (SCCs) approved by relevant authorities.
  • Binding Corporate Rules (BCRs).
  • Transferring to countries deemed adequate by the relevant authorities.
  • Specific exceptions under Article 49 GDPR (e.g., explicit consent for the specific transfer after being informed of the risks).

Any transfer will be made securely and only on our instructions. Contact us (Section 16.0 Additional Information) for more information.

15.0 Right to Complain

We take concerns about data processing seriously. If you believe our collection or use of your information is unfair, misleading, inappropriate, or if you have any other concerns, please contact us first:

You also have the right to lodge a complaint directly with the UK’s Information Commissioner’s Office (ICO):

  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  • Website: www.ico.org.uk (Visit for specific complaint procedures)
  • Phone: 0303 123 1113

16.0 Additional Information

Your trust is vital. If you have questions not answered here or need more detail, please contact our DPO and Compliance Team:

17.0 Policy Review and Amendments

We regularly review and update this Policy to reflect changes in law and our practices. This Policy was last updated on 7th April 2025. (See summary at the beginning for key changes in this version).

We reserve the right to update this notice. Substantial updates will be communicated directly where feasible. We encourage you to review this policy periodically.