Privacy Policy

1. Who we are

MyLeadGenerations (myleadgenerations.com) is operated by PIXIA MEDIA LTD, a company registered in England & Wales (company number 17320683, registered office: 66 Paul Street, London, EC2A 4NA). PIXIA MEDIA LTD is the data controller for the personal data described in this policy.

2. What data we hold

We hold two broad categories of personal data:

a) Your account data

When you sign up, we collect your name, email address, and payment details (handled by Stripe — see section 4). We also store any team members you add, and the notes, statuses and contact details you enter against your leads.

b) Companies House register data

When you search and save companies as leads, we store the information Companies House publishes about those companies: company name, number, status, type, incorporation date, registered address, SIC codes, and the names and limited details of directors, other officers, and persons with significant control (PSCs). Directors’ and PSCs’ names are personal data under UK GDPR, even though the source is a public register. We do not receive email addresses or phone numbers for officers or PSCs from Companies House — any contact details you add against a lead are entered by you.

3. Why we process this data, and our legal basis

• Providing the service (account data, contract performance): to create your account, run your subscription, and let you use the lead pipeline.
• Companies House data (legitimate interests): re-publishing public register data to you, our customer, so you can use it for legitimate business-to-business prospecting. We rely on legitimate interests — ours in operating the service, and yours in finding prospective customers — balanced against the limited privacy impact of republishing already-public register data.
• Payments (contract performance / legal obligation): to charge your subscription and keep the records UK tax law requires.
• Transactional email (legitimate interests / contract performance): to send account, billing and product emails.

4. Who we share data with

We use a small number of service providers (“subprocessors”) to run MyLeadGenerations. We don’t sell your data, and we don’t share it with anyone for their own marketing purposes.

• Companies House — the source of the public register data described above (companieshouse.gov.uk).
• Stripe — processes your subscription payments. We do not store your card details ourselves.
• Resend — sends transactional emails (for example, sign-up confirmation and billing notices) on our behalf.
• Vercel — hosts the application.
• Neon — hosts our PostgreSQL database.

Some of these providers may process data outside the UK/EEA. Where that happens, we rely on the safeguards those providers offer (such as Standard Contractual Clauses) to keep your data protected.

5. Cookies

MyLeadGenerations uses one strictly necessary session cookie to keep you signed in. We do not use analytics, advertising or tracking cookies. Because this cookie is strictly necessary for the service to work, no cookie consent banner is shown, in line with UK PECR guidance.

6. How long we keep data

We keep your account data and saved leads for as long as your account is active, plus a reasonable period afterwards to meet legal and accounting requirements. You can ask us to delete your account and associated data at any time (see section 8).

7. Security

We use industry-standard measures to protect data, including encrypted connections (HTTPS), hashed passwords, and access controls on our database and hosting providers. No system is completely secure, but we take reasonable steps to protect the data we hold.

8. Your rights

Under UK GDPR, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. This applies both to your own account data and, in appropriate circumstances, to data about you that appears in a lead saved by one of our customers (for example, if you are a director whose details were imported from Companies House). To exercise these rights, contact us at [email protected]. If you’re unhappy with our response, you can complain to the Information Commissioner’s Office (ico.org.uk).

9. Your responsibilities as a user

The Companies House data available through MyLeadGenerations is public register information, but using it to contact people — by email, phone, or post — is your responsibility. You must comply with UK GDPR and the Privacy and Electronic Communications Regulations (PECR) when you carry out outreach, including honouring opt-out and unsubscribe requests and keeping your own records accurate.

10. Changes to this policy

We may update this policy from time to time. We’ll update the “last updated” date above when we do.

11. Contact us

PIXIA MEDIA LTD, 66 Paul Street, London, EC2A 4NA. Email: [email protected].