This Privacy Policy explains how Leadlinka Ltd ("LeadLinka", "we", "us", "our"), a company registered in England and Wales, collects, uses, and protects your personal data when you use leadlinka.co.uk and related services (the "Service").
We comply with the UK Data Protection Act 2018, UK GDPR, and the Privacy and Electronic Communications Regulations 2003 (PECR).
Leadlinka Ltd is the data controller for all personal data collected through the Service.
Registered in England and Wales · Company No. 17145936
ICO Registration No: C1948713
Privacy contact: privacy@leadlinka.co.uk
| Data | When collected | Why |
|---|---|---|
| Email address | Account creation, alert sign-up, newsletter | Account access, alerts, optional marketing |
| Name (optional) | Profile setup | Personalising your account |
| Job role / company type | Profile setup | Personalising your lead feed |
| Planning application references & addresses you track | When you subscribe to an alert | Delivering status-change notifications |
| Payment information | Subscription checkout | Processed entirely by Stripe — we never see card details |
| IP address & access logs | Every page visit | Security, fraud prevention |
| Usage data (pages, searches, saves) | While using the Service | Personalisation, analytics |
| Cookie & analytics data | After consent is given | Google Analytics & Microsoft Clarity (see Section 12) |
| Processing activity | Lawful basis |
|---|---|
| Providing your account and delivering the Service | Contract — Art. 6(1)(b) UK GDPR |
| Sending planning alert emails you have requested | Contract — Art. 6(1)(b) |
| Sending account emails (password resets, billing receipts) | Contract — Art. 6(1)(b) |
| Processing payments via Stripe | Contract — Art. 6(1)(b) |
| Sending optional marketing & newsletter emails | Consent — Art. 6(1)(a) — you can withdraw at any time |
| Analytics, security monitoring, fraud prevention | Legitimate interests — Art. 6(1)(f) |
| Keeping financial/billing records | Legal obligation — Art. 6(1)(c) |
Legitimate interests: We have assessed that our legitimate interests in operating a secure, improving platform are not overridden by your rights. You can object to any processing based on legitimate interests by emailing privacy@leadlinka.co.uk.
LeadLinka displays planning application information — including addresses, descriptions of proposed works, application references, decision status, and applicant/agent details — sourced from publicly available records published by UK local planning authorities and the Greater London Authority Planning Data API, under the Open Government Licence v3.0.
We do not create, alter, or enrich this data. We reproduce it as published by local authorities. If you believe data about you that originates from a public planning record should be corrected or removed, please contact us and we will assess your request. Please note that corrections to the underlying planning record must be directed to the relevant local authority.
We clearly separate our email communications into three distinct categories.
Email verification, password resets, billing confirmations, and security notifications. These are sent whenever necessary to operate your account. No consent required — they are part of the service you signed up for. You cannot opt out of these while your account is active.
When you subscribe to track a specific planning application, we will email you when its status changes. This is a service communication directly in response to your request — it is not marketing. You can cancel any alert at any time from within your account or by emailing us. Cancelling an alert does not delete your account or affect marketing preferences.
News, planning intelligence insights, new feature announcements, industry reports, and information about LeadLinka products and services (including future products such as development opportunity alerts, construction market reports, AI planning tools, and infrastructure intelligence). We will only send these if you have explicitly opted in by ticking the marketing checkbox on our sign-up form or account settings. You can withdraw consent and unsubscribe at any time by clicking the "Unsubscribe" link in any email or emailing privacy@leadlinka.co.uk.
Signing up for a planning alert does not add you to our marketing list. These are separate consents.
We do not sell, rent, or trade your personal data. We share it only with the following sub-processors to deliver the Service:
| Processor | Purpose | Location |
|---|---|---|
| Supabase | User authentication & data storage | EU (Germany) |
| Stripe | Payment processing | US (UK IDTA / adequacy) |
| Resend | Transactional email delivery (alerts & account emails) | US (UK IDTA / adequacy) |
| Google LLC | Analytics (GA4) — only after cookie consent | US (UK adequacy) |
| Microsoft (Clarity) | Session recordings & heatmaps — only after cookie consent | US (UK adequacy) |
| Render | Application hosting & backend | US (UK IDTA) |
We may also disclose data if required by law, court order, or regulatory authority, or to protect the rights, safety, or property of LeadLinka or its users. In the event of a corporate transaction (merger, acquisition), you will be notified in advance.
Some processors operate outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements (UK IDTA), UK adequacy regulations, or Standard Contractual Clauses approved by the ICO. We maintain Data Processing Agreements with each sub-processor.
| Data | Retention period | Reason |
|---|---|---|
| Account & profile data | Until account deletion + 30 days | Contract / winding-down period |
| Planning alerts | Until alert cancelled + 30 days | Contract |
| Billing & payment records | 7 years | HMRC legal obligation |
| Marketing consent records | 3 years from last interaction | Evidence of consent |
| Analytics data | 26 months (then auto-deleted) | GA4 default — pseudonymised |
| Security / access logs | 12 months | Legitimate interests |
| Support correspondence | 3 years | Legitimate interests |
When an account is deleted, personal data is purged within 30 days. Residual copies in encrypted backups are overwritten within 90 days.
You have the following rights. To exercise any of them, email privacy@leadlinka.co.uk with the subject line "Data Rights Request". We will respond within one calendar month.
| Right | What it means |
|---|---|
| Access | Request a copy of all personal data we hold about you (Subject Access Request). Free of charge. |
| Rectification | Ask us to correct inaccurate or incomplete data. Most profile data can be updated directly in your account settings. |
| Erasure | Ask us to delete your personal data ("right to be forgotten"). We will comply unless we are required to retain data by law. |
| Restriction | Ask us to pause processing your data while a dispute is being resolved. |
| Portability | Receive your data in a structured, machine-readable format (JSON or CSV). |
| Object | Object to processing based on legitimate interests. You have an absolute right to object to direct marketing. |
| Withdraw consent | Withdraw consent for marketing at any time. Does not affect the lawfulness of processing before withdrawal. |
| Automated decisions | Not to be subject to solely automated decisions with significant effects on you. We do not currently do this. |
We apply industry-standard technical and organisational measures to protect your data, including TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. Passwords are never stored in plain text. In the event of a personal data breach that poses a risk to individuals, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.
The Service is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.
Please see our full Cookie Policy for details. In summary:
| Cookie / Technology | Type | Purpose | Duration |
|---|---|---|---|
| Supabase auth token | Essential | Keeps you logged in | Session |
| ll_cookie_consent | Essential | Remembers your cookie preference | Persistent (localStorage) |
| Google Analytics (_ga, _ga_*) | Analytics — consent required | Anonymised usage tracking | 2 years |
| Microsoft Clarity (_clarity) | Analytics — consent required | Session recordings & heatmaps | 1 year |
| Stripe (__stripe_mid) | Functional | Fraud prevention at checkout | 1 year |
Analytics cookies are not loaded until you click "Accept all" on the cookie banner. You can change your preference at any time using the Cookie Settings link in the footer.
We may update this policy from time to time. For material changes, we will give at least 14 days' notice via email or a prominent notice on the Service. The date at the top of this page reflects the current version.
Leadlinka Ltd
Registered in England and Wales
Email: privacy@leadlinka.co.uk
General: hello@leadlinka.co.uk
We aim to respond to all privacy requests within one calendar month. For complex requests we may extend this by a further two months — we will tell you if we need to.