Customer Privacy Policy

Enzo Sanchez, trading as PropLead, is the controller responsible for personal information collected and used by PropLead.

Email: enzosanchez1785@gmail.com with “Privacy” in the subject line

This policy explains how PropLead handles the personal information of people browsing, registering for or buying leads through the website, including deal sourcers, investors and people acting for a business customer. It covers your information as a customer or prospective customer. A separate privacy notice is needed for property owners and other people submitting enquiries that are sold as leads.

We use your customer information to operate your account, process purchases, give you access to the leads you buy, maintain your account balance and respond to questions or complaints.

We will not sell or resell the personal data of investors, deal sourcers or other lead-buying customers. This includes your name, email address, telephone number, account details and purchase history. We do not offer this information as leads or sell it to third parties for their own marketing.

People who submit property enquiries through PropLead are told that their enquiry and relevant contact details will be shared with an investor or deal sourcer who purchases the lead, so that the buyer can contact them about the stated property opportunity. We make clear that buyers pay for access to this information. We provide this explanation when collecting the enquiry and obtain any consent required for the intended sharing and contact.

Once a property lead has been purchased, PropLead will not resell that same lead to another customer. This concerns our distribution of the lead; the person who enquired remains free to deal with other parties. Telephone OTP verification confirms access to the number at the time of verification and is separate from any consent required to share information or send marketing.

The limited operational disclosures described in section 6, such as processing payments, hosting the service or handling a complaint, are not sales of customer data. We do not authorise those recipients to resell customer information or use it for unrelated marketing.

When you purchase a lead, you receive another person’s information for the relevant property enquiry. You are responsible for using it lawfully and securely. This customer privacy policy does not give you permission to contact that person for unrelated purposes or override their privacy choices.

Account and contact information: your name, email address, telephone number, business name and role, account identifier, authentication information and preferences you give us.

Purchase and billing information: the leads you buy, order dates, amounts paid, payment references, billing details, account balance and credit adjustments. A payment provider may collect payment-card details directly and process additional information under its own privacy notice. The precise information PropLead receives depends on the payment integration.

Support and dispute information: messages, complaints, requests for credit, relevant call logs or screenshots you send and our assessment of your request. Please provide only information needed to investigate the issue and avoid unnecessary third-party personal data.

Technical and usage information: information generated through website use, which may include IP address, device and browser details, access times, pages requested, account activity, errors and security logs. Optional analytics and advertising information depends on the technologies enabled and your choices.

If customer account verification is enabled, we may also process the number or email used, verification status and relevant attempt records. Verification of a property contact’s number is a separate process from handling your customer account.

We collect information directly from you, through your use of the service and from providers supporting payments, authentication, communications and security. If someone at your organisation supplies your details to manage a business account, we also receive information from that person. We will provide the required privacy information within the applicable timeframe, generally within one month and sooner if we first contact you or disclose your information before then.

Account management, orders, delivery of purchased leads, payments, account credits and customer support: performance of our contract with you or steps you request before entering a contract. If you act for a company that is the contracting customer, we rely on our legitimate interests in administering that business relationship.

Website security, prevention of fraud and account misuse, investigation of disputed purchases and handling legal claims: our legitimate interests in protecting the service, customers and property contacts, and resolving disputes. We consider the effect on individuals and do not rely on this basis where their rights override our interests.

Tax, accounting and other records or disclosures required by applicable law: compliance with a legal obligation.

Optional promotional emails or messages: consent where required. Where a particular form of business marketing is legally permitted without consent, we may rely on our legitimate interests in promoting the service, subject to applicable electronic marketing rules and your right to object.

Optional tracking that requires consent: your consent. Essential website functions and proportionate operational monitoring are supported by our legitimate interests in providing a functioning, secure service, subject to applicable cookie rules.

Information marked as necessary is needed for the relevant account, purchase or support process. Without it, we may be unable to provide that part of the service. Optional information is voluntary. Refusing unrelated marketing does not prevent you from buying leads.

We may send necessary messages about purchases, account credits, security, access problems, changes affecting your orders and support requests. These messages are part of running the service and are separate from optional promotions.

You can withdraw marketing consent or object to direct marketing at any time using the unsubscribe facility in a message or by emailing enzosanchez1785@gmail.com. We may retain a minimal suppression record so we do not contact you again for that purpose.

Accepting our terms, buying a lead or completing any account verification does not by itself mean you consent to optional marketing.

Service providers: organisations supporting website hosting, data storage, account authentication, communications, payments, customer support and security, where those functions are used. Providers acting on our instructions must be subject to appropriate contractual controls. Some providers, including payment providers for their own regulatory activities, may act as independent controllers.

Your organisation: if you use an account managed on behalf of a business, authorised account administrators may need access to relevant account and transaction information to manage that relationship. The access available depends on the account arrangements.

Property contacts: if necessary to investigate a disputed lead or complaint, we may share limited information about the enquiry or contact attempt with the relevant person. We minimise what is disclosed and rely on our legitimate interests in resolving the issue, subject to your rights. We do not provide them with your payment credentials.

Professional and legal recipients: advisers, insurers, courts, regulators, law enforcement or other parties where disclosure is necessary and lawful to meet obligations, address fraud or establish, exercise or defend legal claims.

Changes to the business: where a restructuring or change of ownership requires customer records to be transferred to continue the service, any transfer must have a valid legal basis, appropriate confidentiality safeguards and the required notice to customers. Customer records must not be sold as a standalone database or transferred for unrelated marketing.

The website may use cookies or similar storage for functions such as keeping you signed in, remembering essential choices and protecting the service.

If we enable analytics, advertising pixels or other technologies that require consent, they must remain inactive until you consent. You must be able to reject optional technologies and change your choice as easily as you gave it.

The website's cookie information and controls should identify the technologies actually in use, their providers, purposes and durations. You can also manage cookies through your browser, although blocking essential storage may affect functionality. This policy does not itself give consent to tracking.

Whether your information is processed outside the UK depends on the providers and recipients used. Before a restricted international transfer takes place, we must ensure an appropriate legal route is available, such as applicable UK adequacy regulations or approved contractual safeguards, with any required assessment and additional protections.

You can contact us for information about relevant overseas processing and a copy or explanation of the applicable safeguards, subject to lawful redactions. The final published policy must reflect the actual destinations and arrangements used; this draft does not assert that any particular provider or transfer safeguard is already in place.

We keep customer information only for as long as needed for the relevant purpose. We consider active services, the type of record, legal recordkeeping requirements and reasonably anticipated disputes when deciding the retention period.

Account information is kept while needed to manage the account, deliver purchases and handle closure or outstanding issues. Information no longer needed is deleted or anonymised following review.

Order, payment and account-credit records are retained for applicable tax and accounting requirements and, where justified, the relevant period for bringing or defending contractual claims. Closing an account does not necessarily require immediate deletion of these records.

Support messages and evidence of a faulty lead are kept while needed to resolve the issue and any reasonably anticipated related dispute. Security and verification logs are kept only while needed for their security or verification purpose.

Marketing permission and suppression records are retained as necessary to demonstrate and respect your choices. Records subject to a legal preservation requirement may be retained longer for that purpose. Backup copies are removed through the applicable backup lifecycle and are not used to restart withdrawn marketing.

We are responsible for putting appropriate technical and organisational safeguards in place, restricting access to those who need it and requiring suitable protection from providers. The exact safeguards must match the systems we operate. No online service can guarantee absolute security.

Protect your account credentials and notify us promptly if you suspect misuse. If a personal data breach occurs, we will assess it and notify the ICO and affected individuals where required by law.

We have not identified any solely automated decision with legal or similarly significant effects in the service described for this draft. If such processing is introduced, we must explain the relevant logic, consequences, legal basis and applicable rights before it occurs. Routine OTP checks do not establish a person's identity or investment suitability.

Depending on the processing and applicable exemptions, you may ask to access your personal information, correct inaccurate data, erase it, restrict its use or receive eligible information in a portable format.

Your right to object: you may object to processing based on legitimate interests. You have an absolute right to object to direct marketing, including profiling connected with that marketing. Email enzosanchez1785@gmail.com to exercise this right.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. You can use the relevant preference control or contact us. Withdrawal must be as easy as giving consent.

You can ask us to close your account or delete your customer information. We will assess the request and explain any information we need to retain for legal obligations, outstanding orders or legal claims. Where required, we will inform recipients about relevant correction, erasure or restriction requests.

We may request proportionate information to verify your identity. Requests are normally free and answered without undue delay, usually within one month, subject to lawful extensions, pauses and exceptions. We will explain any applicable delay or restriction.

The one-business-day deadline for reporting faulty leads under our account-credit policy does not apply to privacy requests. Exercising a privacy right does not itself determine whether a refund or account credit is due.

Please send privacy complaints to enzosanchez1785@gmail.com. We will acknowledge and investigate your complaint and tell you the outcome.

You can also complain to the Information Commissioner's Office, the UK's data protection regulator, at https://ico.org.uk/make-a-complaint/ or call 0303 123 1113. You do not have to give up any other legal remedy to raise a complaint.

The service is intended for adults aged 18 or over. If you believe a child has provided personal information, tell us so that we can investigate and take appropriate action.

We may update this policy to reflect changes to the service or the law. We will show the revised date and bring material changes to your attention where appropriate. Publishing a new policy does not create consent for a new use of your information.