Skip to content

Privacy policy

Last updated: 18 July 2026

LeadsSortedis a WhatsApp lead qualification service operated by LHMedia (“we”, “us”, “our”), a business registered in the United Kingdom. LeadsSortedhelps businesses (“our customers”) respond to and qualify sales leads over WhatsApp using automated, AI-assisted conversations.

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It applies to:

  • Leads: people who message a business that uses LeadsSorted on WhatsApp
  • Customers: businesses (and their staff) who use the LeadsSorted dashboard
  • Visitors: anyone browsing the LeadsSorted website

If you have any questions, contact us at louis@lh-media.co.uk.

1. Who is responsible for your data

For data about our website visitors and customers, LHMedia is the data controller.

For lead conversation data, our customer (the business you messaged on WhatsApp) is the data controller, and LHMedia acts as their data processor. We process that data on their instructions to provide theLeadsSorted service. If you are a lead and want to know how a specific business uses your data, you can also contact that business directly.

2. What data we collect

If you are a lead (you messaged a business on WhatsApp)

  • Your phone number and WhatsApp profile name, provided by WhatsApp when you message the business
  • Message content: the messages you send and receive in the conversation, including any details you choose to share such as your name, what you are looking for, budget, timeline, and location
  • Qualification data: structured information our system extracts from the conversation (for example “interested in kitchen renovation, budget £15k, timeline 3 months”) to help the business follow up with you
  • Conversation metadata: timestamps, delivery status, and conversation outcomes

We only receive this data because you chose to message the business on WhatsApp. We never message you first, and we never buy or scrape contact lists.

If you are a customer (you use the LeadsSorted dashboard)

  • Account details: name, business name, email address, phone number
  • WhatsApp Business Account details needed to connect your number toLeadsSorted
  • Billing information (handled by Stripe; we never see or store full card numbers)
  • Usage data: logins, settings, and actions taken in the dashboard

If you are a website visitor

  • Standard technical data: IP address, browser type, pages visited
  • Cookies for essential site functions and basic analytics

3. How we use the data

  • To run the conversation: receiving lead messages, generating replies, and delivering the conversation summary and qualification results to the business
  • AI-assisted replies: message text is processed by our AI provider, Anthropic, to understand the message and generate a suitable response. Anthropic processes this data on our behalf and does not use it to train their models
  • To operate accounts: signing customers in, providing the dashboard, sending service emails, and taking payment
  • To improve the service: we look at how conversations perform in aggregate, for example how many leads reply and how many reach a qualified score. This uses counts and scores, not the content of anyone’s messages
  • To meet legal obligations: keeping records we are required to keep and responding to lawful requests

Our legal bases under UK GDPR are: performance of a contract (providing the service to customers), legitimate interests (running and improving the service, securing our systems), and consent where required (for example non-essential cookies).

We do not sell personal data. We do not use lead data for advertising. We do not message leads for any purpose other than the conversation they started.

4. Who we share data with

We share data only with the service providers we need to runLeadsSorted:

ProviderWhat they doWhat they process
Meta (WhatsApp Business Platform)Delivers messages between leads and businessesPhone numbers, message content, delivery metadata
AnthropicAI processing to generate replies and extract qualification detailsMessage text during processing
VercelHosts the LeadsSorted applicationService data passing through the application
NeonDatabase where conversation and account data is storedAll service data, encrypted
ClerkSign-in and account security for the customer dashboardCustomer names, emails, login data
StripePayment processing for customer subscriptionsCustomer billing details

Each provider processes data only on our instructions and under a data processing agreement. WhatsApp messages are also subject to Meta’s own terms and privacy policy, which apply to your use of WhatsApp itself.

We may also share data if required by law, or with a buyer if our business is sold, in which case this policy continues to apply.

5. International transfers

Some of our providers process data outside the UK, including in the United States. Where they do, transfers are protected by recognised safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or an adequacy decision (including the UK-US Data Bridge where the provider is certified).

6. How long we keep data

Lead and conversation data is kept for as long as the business you messaged has an active LeadsSorted account. When a customer closes their account (or asks us to delete specific conversations), we delete the associated personal data within 30 days.

Deleted means deleted. We do not keep a redacted or partial copy of conversations after deletion. If we ever introduce anonymised retention for measuring how well the service works, we will update this policy and the date at the top before doing so.

Customer account data is kept while the account is active and deleted within 30 days of closure, except for billing records we must keep for up to 6 years under UK tax law.

7. Security

Data is encrypted in transit and at rest. Access to production data is limited to those who need it to run the service. Our providers are established platforms with their own certified security programmes. No system is perfectly secure, but if a breach ever affects your personal data we will notify you and the ICO as required by law.

8. Your rights

Under UK GDPR you can ask us to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data
  • Restrict or object to certain processing
  • Port your data to another service
  • Withdraw consent where processing is based on consent

To exercise any of these, email louis@lh-media.co.uk. If you are a lead, we may pass your request to the business you messaged, since they control that data, but we will make sure it is handled either way. We respond within one month.

If you are a lead and want to stop a WhatsApp conversation at any time, reply STOP and the conversation ends immediately.

If you connected WhatsApp to LeadsSorted through Facebook and want the information Facebook shared with us removed, you can request that through Facebook. See our data deletion page for what that covers.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

9. Children

LeadsSortedis a business service and is not directed at children under 16. We do not knowingly process children’s data.

10. Changes to this policy

If we make material changes, we will update this page and change the date at the top. Significant changes affecting customers will be announced by email.

11. Contact

LHMedia, United Kingdom
louis@lh-media.co.uk