Privacy Policy

Last updated: 4 March 2025

1. Who We Are

LeadRescue ("we", "us", "our") provides a missed-call text-back service for UK trades and local service businesses. This privacy policy explains how we collect, use, store and protect your personal data when you use our website and services.

2. What Data We Collect

We collect the following information:

• Account information: business name, email address, phone number and password when you sign up.
• Call and SMS data: caller phone numbers, call timestamps, call status (answered/missed), and SMS delivery records. This data is processed through our telephony provider, Twilio.
• Payment information: billing details processed securely through Stripe. We do not store your full card details on our servers.
• Usage data: dashboard access logs and service configuration settings.

3. How We Use Your Data

We use your data to:

• Provide and operate the LeadRescue service, including detecting missed calls and sending automated SMS replies.
• Process payments and manage your subscription.
• Display call and SMS history on your dashboard.
• Communicate with you about your account, service updates or support queries.
• Improve our service and fix technical issues.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contract: processing necessary to provide the service you signed up for.
• Legitimate interest: improving our service and preventing fraud.
• Consent: where you have given specific consent, such as for marketing communications.

5. Third-Party Services

We share data with the following third parties, solely to provide our service:

• Twilio: processes phone calls and SMS messages on our behalf. See Twilio's Privacy Policy.
• Stripe: processes payments securely. See Stripe's Privacy Policy.

We do not sell your data to any third party.

6. Data Retention

We retain your account data for as long as your account is active. Call and SMS logs are retained for up to 12 months. If you cancel your account, we will delete your personal data within 30 days, unless we are legally required to retain it.

7. Data Security

We take reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS), secure password hashing, and restricted access to production systems.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Request a portable copy of your data.
• Withdraw consent at any time (where consent is the basis for processing).

To exercise any of these rights, contact us at the email address below.

9. Cookies

Our website uses only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through a notice on our website.

11. Contact Us

If you have any questions about this privacy policy or your personal data, please contact us at:

Email: leadrescueuk@gmail.com