GDPR: Lead Recorder

If some of your website visitors are in the EU or UK, you need to know how Lead Recorder handles their data. Short answer: we act as your data processor, we don't use cookies, and we don't sell or share what we collect. The full legal detail lives in our Privacy Policy; this page is the plain-English version.

Controller and processor

You decide to run the Lead Recorder tracking script on your site, so you're the data controllerfor the visitor and lead data it captures, you're responsible for having a lawful basis and appropriate disclosure to your own visitors. Lead Recorder is your data processor: we only handle that data to run the service, on your instructions. For your own Lead Recorder account (login, billing), we're the controller.

No cookies

The tracking script doesn't set cookies. Session data lives in the visitor's browser via localStorage and isn't shared with third parties, which sidesteps most cookie-consent-banner territory for the tracking itself. See our Cookie Policy for what this site itself uses.

Sub-processors and international transfers

We run on a small set of sub-processors: Google Cloud Platform / Firebase (hosting and database), Vercel (application hosting), and Stripe (payment processing). Data currently sits in US-region infrastructure, so if you're in the EU or UK this involves an international transfer. Our sub-processors handle that under their own GDPR transfer mechanisms (Standard Contractual Clauses). We're a small team and don't currently maintain an EU/UK-based representative under Article 27; if that's a blocker for your own compliance sign-off, email us and we'll talk it through.

Data Processing Agreement

We don't have a self-serve DPA template published yet. If you need one for your own records, email hello@leadrecorder.com and we'll get one sorted with you directly.

Data retention and deletion

Lead data is retained for as long as your account is active. Deleting your account deletes it. If a visitor to your site asks you to delete data captured about them, contact us and we'll action it on the underlying record.

Exercising data subject rights

If you're a Lead Recorder customer, you can access, correct, export, or delete your own account data at any time, email us and we'll action it. If you're a visitor to one of our customers' sites and want to exercise a right over data captured about you, contact that site directly since they control it; we'll help them fulfil the request. You can also reach us directly at hello@leadrecorder.com and we'll help route it.

GDPR