Privacy Policy

Last updated: 11 November 2026

LeadCentre ("we", "us") is a lead management platform. Businesses and agencies use it to bring their leads into one place, reply to them, follow them up and track each job, at dashboard.leadcentre.com and in the LeadCentre app. This policy explains what personal information we handle on www.leadcentre.com, in the dashboard and in the app, how we use it, and the rights you have over it. What happens to the leads a business or agency puts into LeadCentre is covered in section 2, the app in section 9, connecting a Facebook or Instagram lead form in section 10, connecting LinkedIn Lead Gen Forms in section 11, connecting Google Ads in section 12, and the Respond add-on (business texting, calls and AI replies) in section 13.

1. Who we are

LeadCentre is operated by iLeads Ltd (United Kingdom). For anything in this policy, including any request to see, correct or delete the information we hold about you, email [email protected].

2. Leads you put into LeadCentre

A business brings its own leads in through its Connections: webhooks from its website forms, Email-to-Lead, Facebook and Instagram lead forms, LinkedIn Lead Gen Forms, CSV imports, missed calls and texts through Respond, and leads added by hand. An agency can do the same for each client account it manages.

The business is responsible for its leads. For these leads the business (or the agency, for the client accounts it runs) is the controller: it decides why and how the details are used, and it is responsible for having a lawful basis to collect them and for telling people how they will be used. We are its processor. We store and process the leads only to provide LeadCentre, on its instructions and under our terms with it.

What we do with them.We keep each lead in the account it came into, show it only to the people that account gives access to, and carry out what the account sets up, such as instant replies, automations and Respond texts. An agency sees the leads in the client accounts it manages; one client never sees another's. We never use leads for our own marketing, never pass them to anyone the account hasn't chosen, and never sell them.

If your details are in a lead. Please contact the business you gave your details to about how they are used, including any request to see, correct or delete them. You can also email [email protected], and we will pass your request to the business and help it respond.

How long they are kept. Leads are kept while the account is open, or for less time if the account chooses. When an account is deleted, its leads are deleted with it.

3. Information we collect

If you have a LeadCentre account (as a business, an agency, or a member of their team):

  • Account details: company name, contact name, email, phone numbers, VAT number and notification preferences, and the name and email of each person on the account.
  • Billing information: your plan, Respond credits, invoices and payment history. Card details are collected and held by our payment provider, Stripe - we never see your full card number.
  • Records of how the account is used, such as sign-ins and changes to settings, kept to run and secure the service.

If you visit www.leadcentre.com, sign up or contact us: the details you give us in a form, plus technical information such as your IP address and browser type, used for spam and fraud prevention.

4. How we use it

  • To provide LeadCentre: running your account, sending you alerts about new leads as you choose in your settings, and billing your plan and add-ons.
  • To send instant replies: where a business switches this on, we email a new lead on the business's behalf when the enquiry arrives, using the email address they gave, to acknowledge it. Replies go to the business.
  • To keep the service safe: preventing spam, misuse and fraud.
  • To support you and respond to enquiries you send us.

Our lawful bases are: performance of a contract (accounts, the service and billing), legitimate interests (keeping the service secure and answering enquiries) and consent (analytics and marketing cookies on www.leadcentre.com, and app notifications). For leads, we act on the account's instructions, as in section 2.

5. Who we share it with

  • Service providers who process data for us: Supabase (database and hosting), DigitalOcean (hosting), Stripe (payments), Twilio (calls and texts), Resend (email, including Email-to-Lead), Google (Google Tag Manager and the analytics tags loaded through it, used with your consent) and, for the LeadCentre app, Expo, Apple and Google, which deliver app notifications and updates, and Anthropic, whose AI suggests how a connected form or webhook's field names match our own (see section 10), reads a lead's enquiry for an AI Intent step when a business adds one to an automation, and, for businesses using Respond with AI switched on, drafts and summarises text replies (see section 13). Each processes data only on our instructions.
  • Authorities where we are legally required to.

We do not sell personal information to anyone.

6. How long we keep it

Account details are kept while the account is open. Invoices and payment records are kept for as long as tax and accounting law requires. Leads are kept as described in section 2, and Respond messages as described in section 13.

7. Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal information; ask us to restrict or object to processing; and withdraw consent at any time. If your details are in a business's leads, see section 2. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

8. Cookies

dashboard.leadcentre.com uses necessary cookies only, to keep you signed in. There is no analytics or advertising tracking there, so there is nothing to consent to and no banner.

www.leadcentre.com also uses, with your consent, analytics cookies through Google Tag Manager to understand how the site is used, and advertising technologies such as the Meta (Facebook) Pixel to measure our advertising. A banner asks for your choice on your first visit, these only run if you accept them, and you can change or withdraw your choice at any time using the "Cookie settings" option on the site.

9. The LeadCentre app

The LeadCentre app is for businesses using LeadCentre and their team members. It lets you see your business's leads, contact them and track each job. It uses the same account as dashboard.leadcentre.com, and accounts are created on www.leadcentre.com, not in the app.

The LeadCentre app. If you use our mobile app we process your sign-in details, the name and photo you add to your profile, your business contact numbers, and what you record about your leads (status, folders and job values). To send notifications we store a push token for each device you sign in on; signing out removes it. We use this only to run the app and the LeadCentre service, never for advertising, and we do not share it with third parties other than the providers that host the service and deliver notifications (Supabase, Expo, Apple and Google).

What the app collects and why:

  • Your sign-in. Your email address and password. Your password is checked by our authentication service and never stored in readable form. The app keeps you signed in by storing a session key in your phone's secure storage (the iOS Keychain or Android Keystore).
  • Your profile. Your name and, if you choose one, a profile photo. The app opens your photo library only when you tap to change your photo and uploads only the image you pick. Account admins can also update the business name and the mobile and WhatsApp numbers used for lead alerts.
  • What you record about your leads. Each lead's status (for example Contacted, Quoted or Won), the folders you create, which leads you have viewed or archived, and the job value you enter when you mark a lead Won. This is shared with the other people on your business's account.
  • Notifications. If you allow notifications, we store your phone's push notification token, whether it is an iPhone or Android phone, and its model name (for example "iPhone 15"), so we can alert you to new leads on the right device. You can turn alerts off in the app's Settings or in your phone's settings at any time, and signing out removes the token.
  • Your settings. Appearance (light or dark) and region, used to show job values in your currency.

Customer details you see in the app. The app shows your business's leads, including the customer's name, phone number, email address, postcode and job details. When you tap Call, Text, WhatsApp or Email, the app opens your phone's own app with those details filled in, and what happens next is handled by that app and its provider. A business may use a customer's details only to deal with their enquiry and in line with data protection law.

What the app does not do. It has no advertising, analytics or tracking tools and does not track you across other companies' apps or websites. It does not access your location, contacts, camera or microphone. It takes no payments: billing stays on dashboard.leadcentre.com. We do not sell any of this information.

Who handles it. App data is stored by Supabase, as in section 5. Notifications and app updates are delivered by Expo, with Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging) delivering notifications to your phone. All data between the app and our servers is encrypted in transit. Some of these providers may process data outside the UK; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or adequacy regulations.

Lawful basis and retention. We use this information to provide the service in our contract with you, and with your consent for notifications and photo access, which you can withdraw in your phone's settings. App data is kept while your account is open; push tokens are removed when you sign out.

Deleting your account. To delete your LeadCentre account and the personal information linked to it, email [email protected] from the address you sign in with, with the subject "Delete my account". We will confirm the request and delete your sign-in, profile, photo and push tokens within 30 days. Records we must keep by law, such as the invoices and payment records described in section 6, are kept for the required period. Uninstalling the app does not delete your account. The app is for businesses and is not intended for anyone under 18.

10. Connecting Facebook and Instagram lead forms

Businesses using LeadCentre can connect a Meta account (Facebook and Instagram) so that leads from their own Instant Forms arrive in their LeadCentre inbox. This is optional, and only an admin on the account can do it. It is separate from anything Meta does with your information under its own policy.

What we receive when you connect a Meta account:

  • Your Meta user ID and name, and access tokens that let us act on your behalf.
  • The names and IDs of the Facebook Pages you choose to share.
  • The names, status and questions of the Instant Forms on those Pages.
  • For forms you add in the portal only, the answers each person gives on that form. We do not fetch or keep leads from forms you have not added.

We do not access your posts, messages, friends, ad accounts or ad spend through this connection, and we do not ask Meta for them.

How we use it. Only to deliver leads from your chosen forms to your inbox, to let you match form questions to your lead fields, and to tell you if the connection needs attention. We never use it for advertising, and we do not sell it or share it with other businesses. A Page can be connected to one LeadCentre account at a time.

Smart Match and AI. To suggest how a form's questions match your lead fields we may send the question names and wording to Anthropic, our AI provider, but not a customer's answers. You check each suggestion before saving. A customer's answers reach Anthropic only if your account switches on an AI feature that reads leads: an AI Intent step in an automation, which reads the enquiry to choose the next step, or AI replies in Respond (see section 13). Anthropic processes them only to provide that feature and does not use them to train its models.

If you filled in one of these forms. The business whose form you completed decides how your details are used and is responsible for them, and we process them on its behalf. Please contact that business first about your details. You can also email [email protected].

How long we keep it. Tokens are stored encrypted and, with your Pages, forms and our record of each lead received, are kept until the connection is removed. Leads already delivered to an inbox are the business's customer records and are kept as described in section 2, and removing a connection does not delete them.

Removing the connection and deleting your data. There are three ways:

  • In the portal, under Settings, Connections, choose Disconnect.
  • On Facebook, remove LeadCentre from your connected business integrations or apps, or ask Meta to send us a deletion request. We delete your connection when Meta tells us, and a deletion request gives you a code and a page confirming it.
  • Email [email protected] and we will delete it within 30 days.

Each of these deletes your Meta user ID and name, tokens, connected Pages and forms, and any leads waiting to be delivered.

11. Connecting LinkedIn Lead Gen Forms

Businesses using LeadCentre can connect a LinkedIn login so that leads from their own Lead Gen Forms arrive in their LeadCentre inbox. This is optional, and only an admin on the account can do it. It is separate from anything LinkedIn does with your information under its own policy.

What we receive when you connect a LinkedIn login:

  • Your LinkedIn member ID, and access tokens that let us read your ad accounts and their leads on your behalf.
  • The names, numbers and status of the ad accounts your login can see, and your role on each.
  • For ad accounts you add, the names, status and questions of their Lead Gen Forms.
  • For forms you add only, the answers each person gives on that form. We do not fetch or keep leads from forms you have not added. Test leads sent from Campaign Manager arrive as leads labelled "LinkedIn test lead".

We do not access your LinkedIn profile, connections, messages, posts or ad spend through this connection, and we do not ask LinkedIn for them.

How we use it.Only to deliver leads from your chosen forms to your inbox, to let you match form questions to your lead fields, to check once a day that the login still works and that no lead was missed, and to tell you if the connection needs attention. We never use it for advertising, and we do not sell it or share it with other businesses. An ad account can feed one LeadCentre account at a time. If an agency connects its own LinkedIn login inside a client's account, the client's own people see only the ad accounts feeding their account.

What we send back to LinkedIn. Only if you switch it on, under Settings, Conversions, LinkedIn: when a lead from one of your Lead Gen Forms reaches a stage you chose (Contacted, Quoted, Booked or Won), we send that stage to your own LinkedIn ad account as a conversion, with when it happened, the job value for a win (or the estimate for Quoted and Booked) if one was recorded, and the form response LinkedIn gave the lead, so LinkedIn can match it. We do not send the lead's name, email address, phone number or any other details. If you ask us to, we create conversions in your ad account for these, such as "LeadCentre: Won lead", linked to its campaigns.

Smart Match. For LinkedIn forms, suggestions for how a form's questions match your lead fields are worked out on our own servers. Nothing from LinkedIn is sent to an AI provider. You check each suggestion before saving.

If you filled in one of these forms.The business whose form you completed decides how your details are used and is responsible for them, and we process them on its behalf. If you delete your lead on LinkedIn, anything we are still holding for it is deleted and never added later; a lead already in the business's inbox is its own customer record. Please contact that business first about your details. You can also email [email protected].

How long we keep it. Tokens are stored encrypted and kept until the login is disconnected. Leads already delivered to an inbox are the business's customer records and are kept as described in section 2, and disconnecting does not delete them.

Disconnecting and deleting your data. There are three ways:

  • In the portal, under Settings, Connections, LinkedIn, choose Disconnect. LinkedIn stops sending new leads, and your member ID, tokens and any leads waiting to be delivered are deleted. Your ad accounts, forms and field matching are kept so that connecting again picks up where you left off.
  • On LinkedIn, remove LeadCentre from the services you have allowed in your LinkedIn settings. New leads stop reaching LeadCentre.
  • Email [email protected] and we will delete the connection, its ad accounts, forms and field matching within 30 days.

A business can connect its Google Ads account so that, when a lead that came from one of its Google ads is marked Won, LeadCentre tells Google, with what the job was worth. Google Ads can then learn which enquiries turn into paid work. A business that runs Google Local Services Ads can also have its new Local Services leads brought into LeadCentre. Both are optional, and only an admin on the account can switch them on. It is separate from anything Google does with your information under its own policy.

What we receive when you connect Google Ads:

  • The email address of the Google account you sign in with, and a token that lets us act on your behalf.
  • The IDs, names and currencies of the Google Ads accounts that login can reach.
  • For the ad account you choose, the names of its conversion actions that accept imported clicks.
  • If you switch on Local Services Ads leads: for each new lead, the customer's name and phone number where Google shares them, the job type, the time, and the customer's message or the length of their call. These become leads in your account, and are covered by section 2.

We do not read your campaigns, ads, keywords, budgets, spend or billing, and we do not change them.

What we send to Google.For each lead that arrived with a Google click ID and is marked Won after you set this up, or reaches Contacted, Quoted or Booked if you switch those stages on: the click ID, which stage it reached and when, the job value and currency for a win (or the estimate for Quoted and Booked) if one was recorded, and a LeadCentre reference for the lead so it is never counted twice. We do not send the lead's name, email address, phone number or any other details. If you ask us to, we create conversion actions in your account for these, such as "LeadCentre: Won lead".

How we use it. Only to list your ad accounts and conversion actions so you can choose them, to send your won jobs to the action you chose, to bring in your Local Services Ads leads if you switch that on, and to tell you if the connection needs attention. We never use it for advertising, we do not sell it or share it with other businesses, and we do not send it to an AI provider. Our staff do not read it unless you ask us for help, or for security or legal reasons.

Google API Services User Data Policy.LeadCentre's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it.The token is stored encrypted and kept until the connection is removed. Our record of which won jobs were sent, and whether Google accepted them, is kept with the account's other records.

  • In the portal, under Settings, Connections, Google Ads, choose Disconnect. We stop sending won jobs, tell Google to cancel the token, and delete it with your Google email address and account choices. Won jobs already sent stay in your Google Ads account.
  • In your Google account, remove LeadCentre from the third-party apps with access (myaccount.google.com/permissions). We stop sending won jobs.
  • Email [email protected] and we will delete the connection and its records within 30 days.

13. Respond: business texting, calls and AI replies

Respond is an optional paid add-on for businesses using LeadCentre. It gives the business its own UK phone number for texting its customers and enquirers, forwards calls to that number on to the business, texts back callers it couldn't answer and, if the business chooses, uses AI to help reply. Calls and texts are carried by Twilio, our communications provider.

If you text or call a business that uses Respond. The business decides how your details are used and is responsible for them, and we process them on its behalf. We handle:

  • Your phone number, and your name if the business has it.
  • The texts you and the business send each other, with the time and delivery status of each one.
  • For calls: your number, the time, how long the call lasted and whether it was answered. Calls through Respond are not recorded.
  • Whether you have asked not to be texted. Reply STOP to any text from a Respond number and no more texts are sent to you from it.

AI replies.A business can switch on AI, provided by Anthropic. When it does, the recent messages in your conversation, the details of your enquiry (your name, the service you asked about, your postcode and your message) and the business's own description of its services are sent to Anthropic to draft a reply, or a short summary for the business. Depending on the business's setting, a team member checks a drafted reply before it is sent, or it is sent automatically. The AI cannot book, confirm or agree prices on the business's behalf, and a person takes over whenever it can't answer reliably. Anthropic processes this content only to provide the service to us and does not use it to train its models.

If you are a business using Respond.Your number is registered under LeadCentre's own approved registration with Twilio, as UK rules for business phone numbers require, so your business details aren't passed to Twilio for it. We keep the number you forward calls to, and how many texts, call minutes and AI conversations you use each month, for your allowance and billing.

Where it's processed. Twilio and Anthropic are based in the United States. Transfers to them are covered by data processing terms that include the safeguards UK data protection law requires for transfers outside the UK.

How long we keep it.The wording of messages is kept for two years by default, and a business can choose anything from 30 days to 10 years in its settings. After that the wording is removed, while the record that a message or call took place is kept for the business's history and billing, and an opt-out is kept so that nobody who said stop is texted again. If a business cancels Respond, its number is kept for 30 days in case it changes its mind, and then released; after that, calls and texts to the number no longer reach the business.

Your rights. To stop texts, reply STOP. For anything else about your details, contact the business you were talking to first, or email [email protected].

14. Changes

If we make material changes to this policy we will update this page and the date at the top. Any questions, email [email protected].