Privacy Policy

Last updated: June 2026

1. Who We Are

The Lead Hunter ("we", "us", or "our") operates a lead generation platform for UK businesses. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service.

2. What Data We Collect

We collect the following categories of data:

  • Account data — your email address and authentication credentials when you register or sign in.
  • Search queries — the business types and locations you search for, used to deliver results and enforce plan limits.
  • Saved leads — business names, phone numbers, addresses, ratings, and lead scores you choose to save to your account.
  • Subscription data — your plan type, billing status, and Stripe customer ID (payment card details are handled entirely by Stripe and never stored on our servers).
  • Usage data — monthly search counts to enforce subscription limits.

3. How We Use Your Data

We use your data to:

  • Provide and operate the Lead Hunter platform.
  • Authenticate your account and manage your session.
  • Process subscription payments and manage your plan.
  • Enforce search limits according to your subscription tier.
  • Improve the service and fix technical issues.
  • Respond to support requests and legal obligations.

4. Data Storage — Supabase

Your account data, saved leads, search usage, and subscription records are stored securely in Supabase (PostgreSQL), hosted within the EU. Supabase acts as our data processor and maintains appropriate security measures including encryption at rest and in transit.

5. Payment Processing — Stripe

Subscription payments are processed by Stripe, Inc. When you subscribe to a paid plan, you are redirected to Stripe's secure checkout. Stripe collects and processes your payment card information under their own privacy policy. We receive only a Stripe customer ID and subscription status — we never see or store your full card details.

6. We Do Not Sell Your Data

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only with service providers necessary to operate the platform (Supabase, Stripe, Google Places API) and only to the extent required for those services to function.

7. GDPR Compliance (UK Users)

If you are located in the United Kingdom, you have rights under the UK GDPR and Data Protection Act 2018, including:

  • The right to access the personal data we hold about you.
  • The right to rectification of inaccurate data.
  • The right to erasure ("right to be forgotten").
  • The right to restrict or object to processing.
  • The right to data portability.

Our lawful bases for processing include contract performance (providing the service), legitimate interests (improving the platform and preventing abuse), and consent where applicable. To exercise your rights, contact us using the details below.

8. Data Retention

We retain your account data and saved leads for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.

9. Contact

For privacy-related enquiries or to exercise your data rights, contact us at keiran@theherd.agency.