This Privacy Policy explains how we collect, use, share, and protect your personal data. We are committed to transparency and user control. Depending on the specific service you use and your relationship with us, we may rely on different lawful basis for processing your data, including obtaining your explicit consent (‘Hard Opt-In’). We will always seek your explicit ‘Hard Opt-In’ consent for certain activities, particularly before sharing your data with partners for new quotes or conducting processing considered higher risk. Where ‘Hard Opt-In’ applies, this will be made explicitly clear at the point your data is collected. In other specific, limited circumstances permitted by law (such as marketing similar services to existing contacts), we may operate on an ‘opt-out’ basis, as detailed further in this policy.
We only collect and use Personal Data when the law allows us to. The lawful basis we rely on depends on the specific processing activity and your relationship with us. We will make the basis clear at the point of collection where appropriate. Our potential lawful bases include:
- Consent (Article 6(1)(a) GDPR): Where you have given us your clear, affirmative agreement (‘Hard Opt-In’) for processing for a specific purpose. This is our primary basis for:
- Sharing your data with clients/partners for quotes on additional products/services.
- Sending direct marketing to new contacts or where otherwise required.
- Using non-essential cookies and tracking technologies.
- Processing sensitive data (if ever applicable).
- Specific AI interactions (e.g., proactive AI calls).
- International data transfers (in combination with safeguards).
- Performance of a Contract (Article 6(1)(b) GDPR): Where processing is necessary to fulfil a service you have requested or to perform a contract we have entered into with you (or to take steps at your request before entering a contract).
- Legal Obligation (Article 6(1)(c) GDPR): Where processing is necessary for compliance with a legal duty to which we are subject (e.g., responding to legal authorities, tax obligations).
- Legitimate Interests (Article 6(1)(f) GDPR): Where processing is necessary for our legitimate interests (or those of a third party), provided these interests are not overridden by your fundamental rights and freedoms. We use this basis carefully and conduct assessments (LIAs) where appropriate. Examples include:
- Essential website security monitoring and fraud prevention.
- Basic server logging for diagnostics.
- Internal analysis of aggregated/anonymised data to improve services.
- Marketing similar products/services via email/SMS to existing contacts under the ‘Soft Opt-In’ exemption (PECR), where applicable and subject to your right to opt-out (see Section 2).
- Managing our relationship with business clients (e.g., CRM, service updates).
We do not rely on legitimate interests for sharing your data with third parties for their marketing, using non-essential tracking cookies, or processing sensitive data.
Depending on the specific service, www.quanti-lead.com may act as either a ‘Controller’ or a ‘Processor’ under GDPR.
- We act as a Controller for the Personal Data we collect directly from you via our website for our own purposes (like managing your requests or sending marketing you consented to).
- We may act as a Processor when we handle Personal Data strictly on behalf of and under the instruction of our business clients as part of a contracted service.
This policy primarily addresses our activities as a Controller, but the principles of data protection apply to all processing we undertake.
We collect Personal Data through various methods, depending on the context:
- Directly from you: When you actively provide it by filling in forms, interacting with consent mechanisms (opt-in boxes), contacting us, or using interactive features.
- Automatically: Essential technical data is collected when you browse our website. Non-essential data via cookies/trackers is only collected after your explicit opt-in via our consent banner.
- From Third Parties: We may receive data from:
- Third-party platforms and sources: We may receive data via platforms such as Facebook, LinkedIn, Instagram, advertising partners (e.g., PPC, SEO, Taboola, Criteo), or affiliates, but only if you have explicitly consented (either via the platform’s settings, directly on an advertisement form linked to us, or through other clear means) for your information to be shared with Lead Pronto for a specific purpose.
- Clients/Partners: (e.g., providing contact details for us to act as a Processor on their behalf, under contract).
- Publicly available sources: (rarely, and typically only for B2B contact verification, relying on Legitimate Interests where appropriate and compliant).
Your trust is paramount. We limit data sharing and are transparent about when it occurs.
- Sharing with Clients/Partners for Quotes (Requires Explicit Consent): As highlighted previously, if you request a quote or service for an additional product (e.g., at ‘Stage 2’), we will always ask for your explicit, granular opt-in consent for each specific product/service before sharing your necessary details with the relevant client(s) or partner(s) solely for that purpose. This type of sharing always requires your ‘Hard Opt-In’.
- Service Providers (Processors): We use trusted third-party service providers who process data on our behalf under strict contractual agreements (Data Processing Agreements) and only on our instructions. Examples include:
- IT support, Cloud Hosting providers, and providers of telecommunications equipment (e.g., secure cloud servers primarily located in the UK/EEA).
- CRM system providers (e.g., Customer Relationship Management systems).
- Email marketing/communication platforms (e.g., platforms to manage email communications you have consented to or based on soft opt-in where applicable).
- Analytics providers (e.g., Google Analytics – data collected only with your explicit consent via cookie banner).
- (e.g., payment processors if you make a purchase, identity verification services where necessary for security or legal reasons, recruitment service providers if you apply for a role with us).
These processors do not have permission to use your data for their own purposes.
- Marketing Service Providers: We only share data with third parties for their marketing purposes if you have explicitly opted-in to this specific sharing.
- Legal Requirements / Vital Interests: We may be required to disclose your Personal Data to comply with a legal obligation or, in rare circumstances, to protect vital interests.
- Controller Relationships: When we share your data with clients/partners based on your explicit consent, those partners typically become independent Controllers. Their handling of your data will be governed by their own privacy policy.