Privacy policy
Last updated: 18 July 2026
LeadsSortedis a WhatsApp lead qualification service operated by LHMedia (“we”, “us”, “our”), a business registered in the United Kingdom. LeadsSortedhelps businesses (“our customers”) respond to and qualify sales leads over WhatsApp using automated, AI-assisted conversations.
This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It applies to:
- Leads: people who message a business that uses LeadsSorted on WhatsApp
- Customers: businesses (and their staff) who use the LeadsSorted dashboard
- Visitors: anyone browsing the LeadsSorted website
If you have any questions, contact us at louis@lh-media.co.uk.
1. Who is responsible for your data
For data about our website visitors and customers, LHMedia is the data controller.
For lead conversation data, our customer (the business you messaged on WhatsApp) is the data controller, and LHMedia acts as their data processor. We process that data on their instructions to provide theLeadsSorted service. If you are a lead and want to know how a specific business uses your data, you can also contact that business directly.
2. What data we collect
If you are a lead (you messaged a business on WhatsApp)
- Your phone number and WhatsApp profile name, provided by WhatsApp when you message the business
- Message content: the messages you send and receive in the conversation, including any details you choose to share such as your name, what you are looking for, budget, timeline, and location
- Qualification data: structured information our system extracts from the conversation (for example “interested in kitchen renovation, budget £15k, timeline 3 months”) to help the business follow up with you
- Conversation metadata: timestamps, delivery status, and conversation outcomes
We only receive this data because you chose to message the business on WhatsApp. We never message you first, and we never buy or scrape contact lists.
If you are a customer (you use the LeadsSorted dashboard)
- Account details: name, business name, email address, phone number
- WhatsApp Business Account details needed to connect your number toLeadsSorted
- Billing information (handled by Stripe; we never see or store full card numbers)
- Usage data: logins, settings, and actions taken in the dashboard
If you are a website visitor
- Standard technical data: IP address, browser type, pages visited
- Cookies for essential site functions and basic analytics
3. How we use the data
- To run the conversation: receiving lead messages, generating replies, and delivering the conversation summary and qualification results to the business
- AI-assisted replies: message text is processed by our AI provider, Anthropic, to understand the message and generate a suitable response. Anthropic processes this data on our behalf and does not use it to train their models
- To operate accounts: signing customers in, providing the dashboard, sending service emails, and taking payment
- To improve the service: we look at how conversations perform in aggregate, for example how many leads reply and how many reach a qualified score. This uses counts and scores, not the content of anyone’s messages
- To meet legal obligations: keeping records we are required to keep and responding to lawful requests
Our legal bases under UK GDPR are: performance of a contract (providing the service to customers), legitimate interests (running and improving the service, securing our systems), and consent where required (for example non-essential cookies).
We do not sell personal data. We do not use lead data for advertising. We do not message leads for any purpose other than the conversation they started.
4. Who we share data with
We share data only with the service providers we need to runLeadsSorted:
| Provider | What they do | What they process |
|---|---|---|
| Meta (WhatsApp Business Platform) | Delivers messages between leads and businesses | Phone numbers, message content, delivery metadata |
| Anthropic | AI processing to generate replies and extract qualification details | Message text during processing |
| Vercel | Hosts the LeadsSorted application | Service data passing through the application |
| Neon | Database where conversation and account data is stored | All service data, encrypted |
| Clerk | Sign-in and account security for the customer dashboard | Customer names, emails, login data |
| Stripe | Payment processing for customer subscriptions | Customer billing details |
Each provider processes data only on our instructions and under a data processing agreement. WhatsApp messages are also subject to Meta’s own terms and privacy policy, which apply to your use of WhatsApp itself.
We may also share data if required by law, or with a buyer if our business is sold, in which case this policy continues to apply.
5. International transfers
Some of our providers process data outside the UK, including in the United States. Where they do, transfers are protected by recognised safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or an adequacy decision (including the UK-US Data Bridge where the provider is certified).
6. How long we keep data
Lead and conversation data is kept for as long as the business you messaged has an active LeadsSorted account. When a customer closes their account (or asks us to delete specific conversations), we delete the associated personal data within 30 days.
Deleted means deleted. We do not keep a redacted or partial copy of conversations after deletion. If we ever introduce anonymised retention for measuring how well the service works, we will update this policy and the date at the top before doing so.
Customer account data is kept while the account is active and deleted within 30 days of closure, except for billing records we must keep for up to 6 years under UK tax law.
7. Security
Data is encrypted in transit and at rest. Access to production data is limited to those who need it to run the service. Our providers are established platforms with their own certified security programmes. No system is perfectly secure, but if a breach ever affects your personal data we will notify you and the ICO as required by law.
8. Your rights
Under UK GDPR you can ask us to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Restrict or object to certain processing
- Port your data to another service
- Withdraw consent where processing is based on consent
To exercise any of these, email louis@lh-media.co.uk. If you are a lead, we may pass your request to the business you messaged, since they control that data, but we will make sure it is handled either way. We respond within one month.
If you are a lead and want to stop a WhatsApp conversation at any time, reply STOP and the conversation ends immediately.
If you connected WhatsApp to LeadsSorted through Facebook and want the information Facebook shared with us removed, you can request that through Facebook. See our data deletion page for what that covers.
You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
9. Children
LeadsSortedis a business service and is not directed at children under 16. We do not knowingly process children’s data.
10. Changes to this policy
If we make material changes, we will update this page and change the date at the top. Significant changes affecting customers will be announced by email.
11. Contact
LHMedia, United Kingdom
louis@lh-media.co.uk