Last updated: June 2026 | PRL-024 | Version 2.0
This privacy notice explains how Lead Technologies (Europe) Limited collects and uses personal data in connection with our website, partner services, and recruitment activity. It applies to prospective and existing partners, job applicants, and anyone who contacts us through lead-tech.co.uk.
lead-tech.co.uk is operated by Lead Technologies (Europe) Limited (referred to in this notice as Lead Tech, we, us or our). We are a lead generation business that connects consumers seeking financial advice with FCA-regulated adviser firms.
This notice covers four categories of people whose data we process in connection with our website and services. Please navigate to the section most relevant to you using the headings below.
Please read this notice carefully. A Glossary at the end explains key terms used throughout.
1. Who We Are
Full legal name: Lead Technologies (Europe) Limited
Registered address: Pool Business Park, Pool Road, Pool in Wharfedale, Otley, LS21 1FD
Data Protection Officer (DPO): [email protected]
FCA registration number: 947409
ICO registration number: Z2425986
If you have any questions about this notice or how we handle your data, please contact our Data Protection Officer (DPO) using the details above.
You also have the right to complain to the Information Commissioner's Office (ICO) at any time. We would appreciate the chance to address your concerns first, so please contact us before approaching the ICO. You can reach the ICO at www.ico.org.uk or on 0303 123 1113.
2. Who This Notice Applies To
This notice applies to the following categories of people whose personal data we process in connection with our website and services:
- Prospective partners and business enquiries: individuals who submit a contact or callback form on lead-tech.co.uk, or who contact us directly to enquire about our lead generation services.
- Existing partners and portal users: contacts at FCA-regulated adviser firms who have been onboarded as Lead Tech partners and who access lead data through our partner portal.
- Job applicants: individuals who apply for a role at Lead Tech through our website, including submitting an application form and uploading a CV.
- Website visitors: anyone who visits lead-tech.co.uk, from whom we collect technical and usage data automatically.
Each category is addressed in a dedicated section below.
3. Prospective Partners and Business Enquiries
Data we collect
We operate two forms on our website that may be used by prospective partners and general enquirers.
Request a callback form
When you submit a callback request, we collect the following:
- First and last name
- Company name
- Email address
- Phone number
- How you heard about us
- Areas of financial advice covered
This data is transferred to our CRM system where a member of our Sales team will make contact with you. Form submission data is deleted from our website after 14 days.
Contact form
Our contact form captures the following fields and routes your enquiry to the relevant person internally based on your reason for contact:
- Reason for enquiry (existing partner enquiry, general enquiry, or interested in purchasing leads)
- First and last name
- Email address
- Contact number
- How you heard about us
- Message
Contact form data is emailed to the relevant internal recipient and deleted from our website after 14 days.
How we use this data
| Purpose / Activity | Type of data | Lawful basis |
|---|---|---|
| To respond to your enquiry and provide information about our lead generation services | Contact and business data | Legitimate interests (to develop our business and respond to prospective partner enquiries) Performance of contract (where pre-contractual steps are being taken) |
| To match your enquiry to the most appropriate Lead Tech representative and schedule a call | Contact and business data | Legitimate interests (to ensure prospective partners are directed to the right point of contact) |
| To send you business communications relevant to our services, including partner newsletters and industry updates, where you have opted in to receive them | Contact and business data | Consent (for electronic marketing) Legitimate interests (for postal communications and telephone outreach to business contacts) |
| To analyse enquiry data to understand business development performance | Contact and business data Technical data |
Legitimate interests (to monitor and improve our business development activity) |
Retention
If your enquiry does not result in a partner relationship, we will retain your data for up to two years from the date of your enquiry. We also retain data where there is an ongoing complaint, dispute, or legal proceedings. Where data is no longer required for any of these purposes, we securely delete or anonymise it.
Call and meeting recordings with prospective partners are retained for up to seven years. This ensures we are able to respond to any complaints or disputes that may arise in connection with pre-contract discussions.
4. Existing Partners and Portal Users
Data we collect
As part of onboarding and managing our partner relationships, we collect and process the following personal data relating to contacts at your firm:
- Full name and job title
- Business email address and telephone number
- Business address
- Partner portal login credentials and activity
- Account management and performance data
Consumer lead data
Through the Lead Tech partner portal, your firm will access lead data relating to consumers who have submitted enquiries through our consumer websites and consented to be connected with an FCA-regulated adviser. This data is provided to you as an independent data controller. You are responsible for handling this data in accordance with your own data protection obligations, including obtaining any additional consents required for communications beyond the initial service enquiry.
Consumer leads supplied by Lead Tech do not carry marketing consent. If you intend to send marketing communications to a consumer beyond the scope of the initial advice enquiry, you must obtain your own PECR-compliant consent directly from that consumer.
How we use partner contact data
| Purpose / Activity | Type of data | Lawful basis |
|---|---|---|
| To manage your partner account, including distributing leads, processing invoices, and providing account management support | Contact and business data Account data |
Performance of contract Legitimate interests (to manage our partner relationships effectively) |
| To provide access to the Lead Tech partner portal and manage portal user accounts | Contact and business data Portal login and activity data |
Performance of contract Legitimate interests (to operate and secure our partner portal) |
| To send partner communications including lead alerts, account updates, performance reviews, and invoicing | Contact and business data | Performance of contract Legitimate interests (to fulfil our obligations under the partner agreement) |
| To record and retain calls and meetings with partners for compliance, quality assurance, dispute resolution and training purposes | Partner contact data Call and meeting recordings |
Legal obligation Legitimate interests (to maintain service quality, resolve disputes, and fulfil our obligations as an FCA appointed representative) |
| To send partner newsletters and industry updates | Contact and business data | Consent (for electronic marketing to individual contacts) Legitimate interests (for communications to business addresses) |
| To analyse partner performance data for business reporting and service improvement | Account and performance data | Legitimate interests (to monitor service quality and improve our lead generation offering) |
| To comply with our legal and regulatory obligations as an FCA appointed representative | Contact and business data Account data |
Legal obligation |
Retention
We retain partner contact data for the duration of the partner relationship and for five years from the date the relationship ends, in line with FCA guidelines for firms operating within the financial services sector.
Call and meeting recordings with onboarded partners are retained for up to seven years. This reflects best practice for firms operating within the financial services sector and ensures we are able to respond to any complaints or disputes that may arise in connection with our partner relationships.
We also retain data where there is an ongoing complaint, dispute, or legal proceedings. Financial records are retained for six years in line with HMRC requirements. Where data is no longer required for any of these purposes, we securely delete or anonymise it.
5. Job Applicants
Data we collect
You can apply for a role at Lead Tech either through our dedicated careers form or by selecting career opportunities via our contact form. Both routes are handled by the same internal recipient. We collect the following:
- First and last name
- Email address
- Phone number
- CV (uploaded via the careers form)
- Supporting message or covering information
Form submission data is deleted from our website after 14 days, after which your data will reside with the relevant internal recipient for the duration of the recruitment process.
How we use this data
| Purpose / Activity | Type of data | Lawful basis |
|---|---|---|
| To assess your application and determine your suitability for the role | Application data CV and supporting documents |
Legitimate interests (to recruit suitable candidates for our roles) Performance of contract (pre-contractual steps) |
| To communicate with you throughout the recruitment process | Contact details Application data |
Legitimate interests (to manage the recruitment process efficiently) |
Retention
If your application is unsuccessful, your data is deleted and not retained.
If your application is successful, your data will be retained as part of your employment record in accordance with our internal HR data retention policy.
6. Website Visitors
When you visit lead-tech.co.uk, we automatically collect the following data:
Technical data: IP address, browser type and version, time zone, operating system, and device information.
Usage data: pages visited, time spent on the site, and how you navigate through our content.
This data is collected using cookies and similar technologies. Please see our Cookie Policy for further details. We use analytics tools to understand how visitors use our site and to improve its performance and content. PECR-compliant consent is required before any non-essential cookies are set.
We do not use advertising cookies to track your behaviour outside of lead-tech.co.uk.
7. Data Sharing
We share personal data only where necessary and with appropriate safeguards in place.
Technology and service providers
We use trusted third-party technology and service providers who process data on our behalf, including providers of CRM, accounting, telephony, email communications, and SMS services. Where any of these providers are based outside the UK or process data on servers outside the UK, we ensure appropriate safeguards are in place. A full list of our data processors is available on request by contacting [email protected].
Partner firms
Consumer lead data is shared with partner adviser firms through our partner portal, as described in Section 4. Partner firms become independent data controllers for that data at the point of access.
Professional advisers and regulators
We may share data with our lawyers, auditors, and insurers where necessary, and with the FCA, ICO, HMRC, or other public bodies where required by law.
Business transfers
In the event of a sale, merger, or transfer of our business, personal data may be transferred to the new owner, who will be required to handle it in accordance with applicable data protection law.
8. International Transfers
Some of our service providers operate outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place to maintain a level of protection equivalent to UK law. The mechanisms we rely on include:
- The UK Extension to the EU-US Data Privacy Framework, where a provider is certified under that framework.
- The EU Standard Contractual Clauses with the UK Addendum to the EU SCCs, which bind the recipient to protect your data to UK standards.
- The UK International Data Transfer Agreement (IDTA), where applicable.
You can request further information about the safeguards in place for any specific transfer by contacting us at [email protected].
9. Data Security
We have appropriate technical and organisational security measures in place to protect personal data against loss, unauthorised access, alteration, or disclosure. These include encryption of data in transit and at rest, access controls, multi-factor authentication, and regular security reviews.
Access to personal data is restricted to those with a legitimate need. All staff and processors handling personal data are subject to confidentiality obligations and act only on our instructions.
We have procedures in place to respond to any suspected data breach and will notify affected individuals and the ICO where we are legally required to do so.
10. Use of Artificial Intelligence
We use AI-assisted tools within our business to support operational and service delivery activities. All use of AI tools is subject to our internal governance framework and data protection controls. We do not make fully automated decisions about individuals without human oversight, and we do not share personal data with AI tools operated by unauthorised third parties.
Before introducing any new AI tool or automated system that processes personal data, we conduct a Data Protection Impact Assessment (DPIA) to identify and mitigate any privacy risks. If you have any questions about our use of AI, please contact our DPO at [email protected].
11. Your Rights
Under UK data protection law, you have the following rights. You will not normally be charged to exercise them, although we reserve the right to charge a reasonable fee or refuse a request where it is manifestly unfounded or excessive. We will respond within one calendar month of receiving a valid request and may extend this by a further two months for complex or multiple requests, notifying you if this is the case.
We may need to verify your identity before acting on a request. Any verification we ask for will be proportionate and not onerous.
Right of access (Subject Access Request)
You have the right to request a copy of the personal data we hold about you. To submit a request (DSAR), please contact us at [email protected], including your full name, contact details, and a description of the information you are seeking. We will acknowledge your request promptly and aim to provide our full response within one calendar month of receipt, in line with our obligations under UK GDPR.
Right to rectification
You have the right to ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure
You have the right to ask us to delete your personal data where there is no legitimate reason for us to continue processing it. Note that certain legal and regulatory obligations may mean we are unable to comply in full.
Right to object
You have the right to object to processing based on legitimate interests, where you feel it impacts your fundamental rights and freedoms. You also have the absolute right to object to processing for direct marketing purposes at any time.
Right to restriction
You have the right to ask us to pause processing of your personal data in certain circumstances, for example where you contest its accuracy or have raised an objection.
Right to portability
Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request its transfer to another organisation.
Right to withdraw consent
Where we rely on consent, you may withdraw it at any time by contacting us at [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to human review
Where we make solely automated decisions that produce legal or similarly significant effects on you, you have the right to request human involvement, express your point of view, and contest the decision.
12. Complaints
If you have concerns about how we handle your personal data, you have the right to raise a formal complaint directly with us. This right is provided under Section 164A of the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.
Please contact our Data Protection Officer with your name, contact details, and a clear description of your concern. You can raise a complaint on behalf of someone else, provided you have their authority to do so.
- Email: [email protected]
- Phone: 01943 462551
- Post: Data Protection Officer (DPO), Lead Technologies (Europe) Limited, Pool Business Park, Pool Road, Pool in Wharfedale, Otley, LS21 1FD
We will acknowledge your complaint within 30 calendar days of receiving it. We will then investigate without undue delay and keep you informed of our progress. If our investigation is likely to take longer than expected, we will explain why and when you can expect our response.
If you are not satisfied with our response, or believe your data is being processed unlawfully, you have the right to escalate your complaint to the Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Telephone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
13. Glossary
Lawful bases for processing
Performance of contract: processing necessary to take steps at your request before entering into a contract, or to fulfil a contract.
Legitimate interests: our interest in conducting and growing our business in a way that delivers the best service and experience, where that interest is not overridden by your rights and freedoms. We carry out a legitimate interests assessment before relying on this basis.
Legal obligation: processing required to comply with a law or regulation we are subject to.
Consent: processing based on your clear, specific, and informed agreement. For electronic marketing (email and SMS) we require PECR-compliant consent.
Key terms
Data controller: the organisation that decides why and how personal data is processed. Lead Technologies (Europe) Limited is the data controller for personal data collected through this website and in connection with our partner and recruitment activities.
Data processor: a third party that processes personal data on behalf of a controller, under the controller's instructions.
Independent data controller: where a partner adviser firm receives consumer lead data from Lead Tech, they become an independent data controller for that data and are responsible for their own data protection compliance.
ICO: the Information Commissioner's Office, the independent body responsible for upholding data protection rights in the UK.
FCA: the Financial Conduct Authority, the UK regulator for financial services.
PECR: the Privacy and Electronic Communications Regulations, which govern electronic marketing including email and SMS.
UK GDPR: the UK General Data Protection Regulation, the primary data protection legislation in the United Kingdom.
UK IDTA: the UK International Data Transfer Agreement, a mechanism used to protect personal data transferred outside the UK.