1. Who we are and when this notice applies

“Missed Lead Rescue”, “we”, “us” and “our” refer to the business operating missedleadrescue.co.uk. We are responsible for deciding how personal information is used for our own website, enquiries, client relationships, administration, security and marketing.

When a business client uses us to handle or assist with its callers, leads or customers, that client will normally be the controller and we will act as its processor. In that situation we use the information only on the client’s documented instructions and under a data-processing agreement. Callers should also read the privacy notice of the business they contacted.

2. Information we may collect

• Identity and contact details: name, business name, job title, email address, telephone number and contact preferences.
• Enquiry and service details: information you send by email, form, telephone, text or messaging service; details of your current enquiry handling; appointment or callback preferences; and support history.
• Call and message information: date, time, number, routing data, message content, transcripts, summaries and recordings where recording has been enabled and appropriate notice has been given.
• Business and prospect information: business sector, public contact details and information available from business websites, Companies House, professional profiles and reputable business directories.
• Account, contract and payment records: services ordered, contracts, invoices, payment status and related correspondence. We do not intend to store full payment-card details.
• Technical and usage information: IP address, browser and device information, pages requested, timestamps, security logs and cookie choices.
• Marketing information: subscriptions, consent records, campaign engagement where enabled, objections and unsubscribe records.

Please do not send sensitive or special-category information unless it is genuinely necessary and we have agreed an appropriate way to handle it. If a caller or client supplies such information during a service interaction, we limit its use to the relevant purpose and apply additional safeguards where required.

3. Where information comes from

We obtain information directly from you; from a business client for whom we provide services; automatically from website and service systems; from referrals; and, for proportionate business-to-business prospecting, from publicly available business sources. Where we obtain personal information from elsewhere, we provide privacy information within the period required by law, normally no later than our first communication and within one month.

4. Why we use information and our lawful bases

Where we rely on legitimate interests, we consider whether the use is necessary and balance our interests against the person’s rights, expectations and potential impact. You may object to processing based on legitimate interests.

5. Email, text and business marketing

A message needed to deliver a teardown you requested, respond to your enquiry or administer a service is a service communication, not permission for unrelated marketing.

For electronic marketing to individuals, sole traders and certain partnerships, we obtain consent unless a valid legal exception applies. Marketing consent is optional, specific and separate from requesting a service. You can withdraw it at any time using the unsubscribe facility or by emailing us.

For relevant marketing to corporate subscribers, we may contact business addresses on the basis of legitimate interests where PECR permits this. We identify ourselves, keep the message relevant to the recipient’s professional role and provide an easy opt-out. We maintain a suppression record so that we can respect objections. We do not disguise the sender or require payment to opt out.

6. Cookies and similar technologies

Our website uses cookies or similar storage that are strictly necessary for security, administration, load management and core operation. Non-essential analytics, advertising or personalisation technologies will not be activated for a visitor unless the required consent mechanism is in place. If we introduce them, we will update the cookie information and provide controls that make refusal as easy as acceptance.

Browser settings can block or delete cookies, but doing so may affect essential website functions. Logged-in website administrators receive additional WordPress cookies that are not used for public marketing.

7. AI-assisted services and automated decisions

We may use AI-assisted tools to transcribe, summarise, categorise or draft responses to enquiries, and to help route leads or identify an appropriate next action. We set instructions, access controls, retention limits and human escalation points appropriate to the service.

We do not use solely automated decision-making that produces legal or similarly significant effects about website visitors, callers or prospects. A person remains responsible for quotes, contractual commitments, sensitive exceptions and material decisions. Where a client controls the underlying caller data, the client decides the purpose and essential means of that processing.

8. Who we share information with

We disclose information only where reasonably necessary to:

• website hosting, security, content-delivery and WordPress service providers;
• email, productivity and file-storage providers;
• telephony, SMS, CRM, calendar, automation and customer-support providers used for an agreed service;
• email-marketing services such as Sender, when used;
• AI and workflow providers such as Marblism and its authorised service providers, when enabled for the relevant workflow;
• payment, accounting, professional-adviser and insurance providers;
• a client business where we captured the enquiry on that client’s behalf; and
• regulators, courts, law enforcement or other parties where disclosure is required by law or necessary to protect legal rights.

Providers acting for us must use information only for agreed purposes, protect it and meet applicable data-protection requirements. We do not share information with third parties for their independent consumer marketing.

9. International transfers

Some technology providers or their sub-processors may process information outside the UK. Before making a restricted transfer, we use an available UK adequacy regulation or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, and carry out any required transfer risk assessment. You may ask for further information about relevant safeguards.

10. How long we keep information

We keep personal information only as long as needed for the stated purpose, including legal, accounting, security and dispute requirements. Our working retention periods are:

• general enquiries and teardown requests: up to 12 months after the last meaningful contact;
• active client and service records: for the relationship and ordinarily up to six years afterwards where needed for tax, contract or legal claims;
• call recordings, transcripts and message content processed for a client: normally up to 90 days after resolution, unless the client contract requires a shorter or justified longer period;
• website and security logs: normally up to 12 months;
• marketing records: while marketing remains appropriate or until you opt out, with inactive records reviewed after 24 months; and
• suppression records: a minimal record may be retained for as long as necessary to ensure we continue to respect an opt-out.

We may retain information longer where a legal hold, unresolved complaint or legal obligation applies. We securely delete or anonymise information when it is no longer required.

11. Security

We use proportionate technical and organisational measures designed to protect personal information, including access controls, account security, limited permissions, supplier review, secure transmission where supported, backups, updates and incident-handling procedures. No internet or storage system can be guaranteed completely secure.

12. Your data-protection rights

Depending on the circumstances, you may have rights to be informed; obtain a copy of your personal information; correct inaccurate or incomplete information; request deletion; restrict processing; receive certain information in a portable format; object to processing; withdraw consent; and obtain safeguards relating to qualifying automated decisions.

The right to object to direct marketing is absolute. Other rights may have legal limits. We may need enough information to confirm identity and locate the relevant records. We normally respond within one month.

To exercise a right or raise a data-protection concern, email hello@missedleadrescue.co.uk. There is normally no charge.

13. Complaints

Please contact us first so we can investigate. You also have the right to complain to the Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113.

14. Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly use children’s personal information for marketing.

15. Changes to this notice

We review this notice when our services, suppliers or legal duties change. We will post the updated version here and change the date at the top. If a change materially affects how we use information already collected, we will take appropriate steps to bring it to the attention of affected people before the new use begins.

Version 1.0 · Last updated 14 September 2026