Privacy Policy

1. Introduction

Lead Garrison ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you use the Lead Garrison platform, why we collect it and how we handle it.

Lead Garrison is registered in England and Wales. Our registered office is at Suite RA01, 195-197 Wood Street, London, E17 3NU. CEO: Kieren Roberts.

2. Our Role

For your account and business information, Lead Garrison is the data controller.

For information about the people who engage with your Instagram account — the commenters you contact and qualify — Lead Garrison acts as a data processor on your behalf, and you are the data controller. You are responsible for ensuring you have a lawful basis to contact those individuals.

3. Information We Collect

Account and business information

• Your name, business name, email address and account credentials
• Account settings, including the qualification questions and scoring rules you configure
• Subscription status, plan and billing identifiers

Instagram account connection

• The Instagram professional account you connect, and the access tokens required to operate it
• Comments on the posts you select for a campaign
• The Instagram private message conversations the platform starts and the responses to your qualification questions

Lead information collected during qualification

When someone engages with your campaign, we store the information needed to qualify and present that lead:

• Their Instagram username and profile information made available through the Instagram API
• Their comment and the keyword they used
• Their answers to your qualification questions
• Their calculated score, category and progress status

Payment information

Payments are processed by Stripe. We receive limited billing information such as your subscription status, plan and a customer/billing identifier. Full payment card details are handled by Stripe and are not stored by Lead Garrison.

Usage information

• Basic platform usage and error data
• Device and browser information, and IP address
• Cookies and similar technologies used to operate the platform

4. How We Use Information

• To provide and operate the service, including running your campaigns and qualification flows
• To calculate lead scores and display leads in your dashboard
• To manage your account, subscription and free trial
• To send service messages, such as trial reminders or billing notifications
• To maintain security, prevent misuse and fix problems
• To comply with our legal and accounting obligations

5. Legal Basis for Processing (UK GDPR)

• Contract: to provide the service you have subscribed to
• Legitimate interests: to secure and improve the service and prevent misuse
• Legal obligation: to meet UK legal, tax and accounting requirements
• Consent: where we ask for it for a specific purpose

6. Sharing

We do not sell personal data. We share it only as needed to run the service:

• Meta / Instagram: to connect your account and operate messaging features
• Stripe: to process subscription payments and manage the billing portal
• Infrastructure and email providers: who host the platform and deliver service emails
• Authorities: where we are legally required to do so

7. Data Retention

We keep account and lead data for as long as your account is active. After your subscription ends, data may be retained for a limited period for legal, accounting and backup purposes, and then deleted or anonymised.

You can export your leads as CSV at any time before your access ends. Submissions made through our previous application form, which is no longer in use, are retained for our own records.

8. Your Rights (UK GDPR)

You have the right to:

• Access a copy of your personal data
• Rectify inaccurate or incomplete data
• Erase your data, subject to legal retention requirements
• Restrict how we use your data
• Port your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at Hello@leadgarrison.com. If you are an individual who was contacted through a Lead Garrison campaign and want your information removed, please contact the business you were speaking to, as they control that data.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption of data in transit, access controls on our systems and restricting access to those who need it to operate the service.

10. International Transfers

Some of our service providers process data outside the UK, including in the United States. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Addendum to the Standard Contractual Clauses or an adequacy determination.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the service. The "Last updated" date shows when it was last revised.