Privacy policy

Who we are

VenueLeads provides London security and CCTV firms with daily, scored information about licensing applications. We are the data controller for the personal information described below.

Information we collect

• Early access requests: your name, company, email, phone number and the boroughs you cover, when you fill in the form on our home page.
• Customer accounts: your email address, password (stored securely by our authentication provider, never visible to us), saved settings such as boroughs and trade, and the statuses and notes you add to leads.
• Email digest subscribers: your email address, boroughs and whether you want security or CCTV leads.
• Technical data: a login cookie that keeps you signed in. We do not use advertising or tracking cookies.

Licensing data

Leads come from information that councils and newspapers publish under the Licensing Act 2003, such as premises licence applications and public notices. We collect business information: venue names, addresses, applicant names as published, proposed hours and activities, and licence conditions. Where an applicant is an individual, their name may appear as it was published. We do not collect personal details that councils redact, such as dates of birth or home addresses.

If you are named in a lead and want it corrected or removed, email venueleads@outlook.com and we will act within one month.

Why we use it (lawful basis)

• To provide the service you signed up for (contract).
• To reply to early access requests and send the weekly digest you asked for (legitimate interests).
• To compile licensing leads from public sources for businesses (legitimate interests, balanced against the fact that this information was published for public consultation).
• To keep accounts secure and meet legal obligations, such as tax records once payments start.

Who we share it with

We never sell personal information. We use trusted providers to run the service: Supabase (database and logins), Vercel (website hosting), Resend (email delivery) and GitHub (running our daily data job). When payments launch, Stripe will process card payments; we never see full card numbers. Some providers may process data outside the UK under approved safeguards such as the UK International Data Transfer Agreement.

How long we keep it

• Early access requests: up to 12 months unless you become a customer.
• Customer accounts and notes: while your account is active, then deleted within 90 days of closing it.
• Licensing leads: up to 12 months after the application date.
• Payment records: 6 years, as UK tax law requires.

Your rights

Under UK data protection law you can ask to access, correct or delete your information, object to how we use it, restrict it, or receive a copy. Email venueleads@outlook.com. You can unsubscribe from any email by replying STOP. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.