Privacy policy

Last updated: 29 September 2026

Who we are

Lead Magnet Group Ltd runs UK lead generation websites and passes the enquiries they receive to vetted installers and other trades who can carry out the work. We are the data controller for the personal data described here.

• Registered in England and Wales, company number 17435391
• Registered office: 20 Wenlock Road, London N1 7GU
• Registered with the Information Commissioner’s Office (ICO), registration ZC240800
• Email: sales@leadmagnetgroup.co.uk

This policy covers two groups of people. Section 2 is for homeowners and tenants who asked for quotes or a grant check on one of our websites. Section 3 is for businesses that buy leads from us or ask about doing so. Section 4 covers everyone who visits this website.

1. In short

• We only hold details about your home enquiry because you filled in a form on a website we run and ticked a box agreeing to be contacted.
• We pass your enquiry to one business of the kind you agreed to hear from.
• We do not sell your details to data brokers, add you to marketing lists or contact you about anything other than the enquiry you made.
• You can withdraw your consent, ask what we hold, or ask us to delete it at any time by emailing sales@leadmagnetgroup.co.uk.

2. If you asked for quotes on one of our websites

Where your details come from

Every enquiry we hold was typed into a form on a lead generation website we operate ourselves or that is operated for us by Home Energy Quotes Ltd (ICO registration ZC240812), such as homeenergyquotes.co.uk. Each form has its own consent statement naming the kind of business that will contact you. We keep a record of the exact wording you saw, the version of the form, and the date and time you ticked it. We do not buy lists, scrape websites or take data from brokers.

What we hold

• Your name, phone number, email address, postcode and, where you gave it, your address
• The answers you gave about your home and the work you want, such as property type, heating system, roof type, number of windows, timeframe or budget, and whether you own or rent
• Which website and form the enquiry came from, the page you were on, and the campaign or advert that brought you there
• The consent statement you agreed to, its version, and when you agreed
• Technical details such as your IP address and browser, used for fraud and duplicate checks
• The results of our validation checks and the quality score we give the enquiry (see automated checks below)
• Which business received your enquiry, when, and any feedback that business gave us about it, such as “could not reach” or “already has quotes”

What we do with it, and the legal basis

• Passing your enquiry to a business that can quote for the work. This is the purpose you asked us to fulfil. Legal basis: your consent, given on the form. You can withdraw it at any time.
• Checking the enquiry is genuine and deliverable: confirming the phone number is a real UK number, the email address can receive mail, the postcode exists and the enquiry is not a duplicate of one we already hold. Legal basis: our legitimate interest in sending businesses enquiries they can act on, and yours in not being contacted twice.
• Deciding which business receives it: matching your postcode and the type of work to a business that covers your area and has asked for that kind of enquiry. Legal basis: your consent to be contacted, and our legitimate interest in running the service.
• Handling returns and complaints: if a business tells us your details were wrong or you did not want to be contacted, we record that so the enquiry is not resold and so we can improve our forms. Legal basis: legitimate interest.
• Keeping records of consent and of what was sent to whom. Legal basis: our legal obligation to be able to demonstrate consent under UK GDPR and PECR.
• Accounting and invoicing between us and the businesses that buy enquiries. Your name does not appear on invoices; a reference number does. Legal basis: legal obligation.

We never use your enquiry to send you marketing of our own, and we do not pass it to anyone other than the businesses described here and the service providers listed in section 5.

Who receives your enquiry

The businesses that receive enquiries are installers and other trades who have signed our terms of supply. Those terms require each of them to:

• contact you only about the enquiry you made
• comply with UK GDPR and the Privacy and Electronic Communications Regulations when they call, text or email you
• keep your details secure and not pass them to anyone else or sell them on
• delete your details if you ask them to, and tell us if you complain

Each enquiry is sent to one business only. Once a business receives your enquiry it is responsible for how it uses your details, and its own privacy notice applies to that use. If you cannot tell which business received your enquiry, email us and we will tell you.

Automated checks and scoring

When an enquiry arrives, software checks it automatically and gives it a quality score from 0 to 100 based on things like whether the phone number is valid, whether the email address accepts mail, how complete the answers are and whether we have seen the same details recently. The score and your postcode decide which business is offered the enquiry. This is automated, but it does not produce a legal effect on you or anything similarly significant: it only affects which trader we ask to call you. If you think an enquiry was wrongly rejected as invalid or duplicate, email us and a person will look at it.

How long we keep it

• Your enquiry, including your contact details and answers, is kept for 24 months from the date you made it, then anonymised. After that we can still see that an enquiry was made and sold, but not who made it.
• Records of consent, and the financial records that show which business was invoiced for which enquiry, are kept for six years because tax and company law require it. These records identify the enquiry by number and date, not by name once the enquiry has been anonymised.
• If you withdraw consent or ask us to delete your details, we stop passing on the enquiry immediately, tell any business that already received it to delete it, and anonymise our copy, keeping only what we must to show we complied.

3. If you buy leads from us, or ask about doing so

When you fill in the pricing form on this website, open an account, or use the buyer portal, we hold:

• Your name, company, work email, phone number, the leads you want, the postcodes you cover and the volume you asked for
• Your account details, the delivery settings you choose, the rules and caps you set, and a log of what your team does in the portal
• Every enquiry we send you, the price, whether you accepted or returned it and why, and the notes your team adds
• Invoices, payments and the billing details you give us

We use this to supply and invoice the service, to keep the portal secure, to investigate returns and disputes, and to contact you about your account. The legal basis is the contract between us, and our legitimate interest in running and improving the service. When you enquire about pricing, we contact you only about lead supply, as the form says, and we do not pass your details on.

We keep account and delivery records for the life of your account and for six years afterwards, because tax and company law require it.

4. Visitors to this website

We use cookies and similar technology only with your consent, apart from the strictly necessary ones that make the site work. Our cookie policy lists what we use and lets you change your choice at any time. Our web server keeps standard access logs, including IP addresses, for security and to diagnose faults; these are deleted on a rolling basis.

5. Our service providers

We use a small number of companies to run the service. Each acts on our instructions under a written contract.

• Web hosting and development: Soap Media, who host this website and our lead management system on servers in the United Kingdom.
• Google Tag Manager and Google Analytics: to measure how the website is used, only after you accept analytics cookies.
• Email delivery for account emails, invoices and enquiry notifications.
• Internal notification tools (such as Slack) for alerts to our own team. Enquiry details are not sent through them.

6. Where your data is stored

Your data is stored in the United Kingdom. Some of our providers, including Google, may process data in the United States. Where that happens we rely on the UK’s adequacy regulations or on the UK International Data Transfer Agreement or Addendum, so your data has protection equivalent to UK law.

7. Security

Access to enquiries is limited to the people who need it, behind individual logins. Only the one business your enquiry is sent to receives your contact details, and every export of enquiries from our system is logged. Data is encrypted in transit and backed up daily. If we ever suffer a breach that puts you at risk, we will tell you and the ICO as the law requires.

8. Your rights

You have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct anything that is wrong
• ask us to delete your data, or to stop using it, in most circumstances
• withdraw your consent at any time, without affecting anything done before you withdrew it
• object to processing based on our legitimate interests
• receive the data you gave us in a machine-readable form
• complain to the ICO

To use any of these rights, email sales@leadmagnetgroup.co.uk or write to our registered office. We will reply within one month. We may ask you to confirm your identity first, so that we do not give your details to someone else.

9. Complaints

If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

10. Children

Our websites are for adults arranging work on a home. We do not knowingly collect details from anyone under 18. If you think a child has given us their details, email us and we will delete them.

11. Changes to this policy

We will post any changes here and update the date at the top. If a change affects how we use enquiries you have already made, we will contact you about it.