Privacy Policy

1. Who we are

PlanLeads is a lead generation service for construction firms operating in the UK. References to "we", "us", or "our" in this policy refer to PlanLeads. You can contact us at hello@planningleads.uk.

2. Data we collect

When you sign up, we collect:

• Full name and company name
• Email address
• Base postcode and working radius preference
• Job type preferences
• Subscription plan and payment details (processed by Stripe — we never see or store your card details)

We also collect usage data such as which leads you have viewed and any notes or status updates you add in your account dashboard.

We use planning application data from local council planning registers — public information under the Open Government Licence v3.0. We store only: address, project type, application status, and submission date. We do not store names, emails, or phone numbers of planning applicants.

3. How we use your data

• To deliver your monthly lead digest by email
• To match planning applications to your preferences and serve your account dashboard
• To manage your subscription and process payments via Stripe
• To send transactional account emails (welcome, account changes, deletion confirmation)
• To geocode your base postcode for radius matching (via Postcodes.io — postcode only, no personal data)

4. Legal basis (UK GDPR)

We process your personal data under Article 6(1)(b) — performance of a contract (to deliver the service you subscribed to) — and Article 6(1)(f) — legitimate interests — of UK GDPR. Planning application data is reused under the Open Government Licence v3.0.

5. Third-party processors

We use the following sub-processors to operate the service. Each is covered by a Data Processing Agreement (DPA):

• Supabase — database and authentication (EU region)
• Stripe — subscription billing and payment processing
• Resend — transactional and digest email delivery
• Vercel — website hosting and serverless functions
• Postcodes.io — postcode geocoding (open-source API; no personal data transmitted beyond postcode)

6. Data retention

We retain your account data for as long as your subscription is active, and for up to 12 months after cancellation for legal and accounting purposes. After 12 months, your data is permanently deleted. You may request deletion at any time (see Section 7).

7. Your rights

Under UK GDPR you have the following rights:

• Access — request a copy of the data we hold about you
• Portability — download your account data as JSON from Account Settings
• Erasure — permanently delete your account and all associated data from Account Settings, or by emailing us
• Rectification — request correction of inaccurate data
• Objection — object to processing based on legitimate interests

To exercise any right not available in your account dashboard, contact us at hello@planningleads.uk. We will respond within 30 days.

8. Cookies

We use essential cookies only — required for authentication and to keep you logged in. We do not use advertising or tracking cookies.

9. Contact & complaints

For privacy-related enquiries, email hello@planningleads.uk. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).