Effective date: 3 September 2026
This Privacy Policy explains how Blu Zetta Limited, trading as LeadPull (“LeadPull”, “we”, “us” or “our”), collects, uses, stores and shares personal information when you visit getleadpull.com, create an account, buy or use a plan, use LeadPull Browser and the dashboard, contact support, receive communications, or use extraction, enrichment, verification and managed campaign features (together, the “Service”). It also explains your privacy rights.
1) Who we are and how to contact us
Blu Zetta Limited is the controller of personal information used to operate customer accounts, billing, security, support, product administration and our own communications. We are registered in England and Wales under company number 10254031.
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
2) When we act for a customer
LeadPull customers choose their Google Maps searches, the businesses they collect, the enrichment or verification actions they run, and how they use or contact leads. For personal information in a customer’s saved lead records, the customer is normally the controller and LeadPull acts as its processor when we host or process that data on its behalf. If you are included in a customer’s lead list, contact that customer first where possible. You may also contact us, and we will help route or handle the request as data-protection law requires.
3) Information you give us
We may collect:
- account details, including your name, email address, organisation and password hash;
- order, subscription, licence, promotion, credit-balance and billing records;
- billing name, address and tax-related details entered at checkout;
- campaign settings, search terms, locations, saved leads, notes, selections, exports and other Customer Data you choose to sync;
- verification inputs and job selections;
- support requests, bug reports, feedback and communications; and
- marketing choices, survey answers or promotion responses.
You must not provide personal information that you do not have the right to use.
4) Information collected automatically
When you use the Service, we may collect IP address, approximate location derived from IP or campaign country, browser and operating-system type, device identifiers, app version, authorised-device status, session identifiers, login and activation timestamps, campaign and usage counts, feature events, error reports, security logs, request metadata and diagnostic information. We use this information to deliver the Service, enforce plan limits, diagnose problems, prevent fraud and protect users.
If you choose “remember password” on the dashboard or in LeadPull Browser, the credential may be kept locally using the browser or device’s protected credential storage. We do not store your readable account password in our database. You can remove locally remembered credentials through the application, browser or operating-system controls.
5) Lead and enrichment information
At your direction, LeadPull may collect public business information from Google Maps and business websites. This can include business name, category, address, location, rating, reviews, opening or claimed status, website, public phone numbers, public email addresses, WhatsApp numbers, social-profile links and Maps URLs. Website enrichment may also record additional contact values, department or person names shown publicly, source URL, page type, confidence, discovery date, evidence and structured website data.
Lead data may identify a sole trader, partner, employee or other individual and can therefore be personal information even when published for business purposes. Public availability does not remove data-protection or marketing obligations. Customers must provide any required privacy notice and establish their own lawful basis before using lead information.
6) Verification information
For email verification, LeadPull may process an email address, domain, DNS and MX information, provider response, SMTP negotiation result, catch-all signals, retry state, role or disposable-address classification, confidence and result history. For phone features, we may process the raw number, normalised number, country context, calling code, format, extension, structural validity and, when a customer requests a paid check, available carrier, line-type or activity signals. Verification is probabilistic and does not prove identity, ownership, consent or future deliverability.
7) Payment information
Stripe processes card payments and may collect your card details, billing details, device information and fraud-prevention signals under its own privacy policy. LeadPull receives transaction identifiers, payment status, card brand and limited card details such as the last four digits where supplied, but we do not receive or store your full card number or security code. Free Scout orders are recorded internally as zero-value orders and do not require card information.
8) How we use personal information and our lawful bases
We use personal information only where we have a lawful basis:
- Contract: to create and administer your account, take orders, provide licences and devices, save and export leads, perform requested enrichment or verification, deliver managed campaigns, provide support and enforce plan allowances;
- Legitimate interests: to secure the Service, prevent fraud and abuse, maintain audit logs, troubleshoot, improve reliability and usability, understand aggregate product use, administer promotions, recover debts and protect legal rights. Our interests are operating a safe, effective software business, and we balance them against your rights;
- Legal obligation: to keep tax and accounting records, respond to lawful requests, protect legal rights and meet data-protection, consumer and other regulatory duties; and
- Consent: where required for optional marketing, non-essential storage technologies or another clearly explained purpose. You may withdraw consent at any time.
Where we process Customer Data as a processor, the customer’s instructions and lawful basis govern that processing.
9) Product messages and marketing
We send essential service messages about orders, security, account access, devices, campaigns, material terms changes and support as part of our contract with you. We may send relevant product news or offers where you consent or where legitimate interests and electronic-marketing rules permit it. You can unsubscribe from marketing using the link in a message or by contacting us. Opting out of marketing does not stop essential service messages.
We do not sell personal information, sell customer lead lists or allow another business to use Customer Data for its own marketing.
10) Cookies, sessions and local storage
Our website and dashboard use strictly necessary cookies or similar storage for secure sign-in, session continuity, fraud prevention, checkout state, load handling and preferences. Checkout pages may use session storage to carry the email you entered to the success page. LeadPull Browser stores necessary app settings and lead data locally and may use protected operating-system credential storage when requested. If we introduce optional analytics, advertising or other non-essential technologies, we will provide information and request consent where required before using them. Blocking essential storage may prevent account or checkout features from working.
11) Who we share information with
We share only what is reasonably needed with:
- payment and fraud-prevention providers such as Stripe;
- hosting, database, content-delivery, security, logging, backup and infrastructure providers;
- managed connectivity and proxy providers when an eligible managed campaign is requested;
- DNS, email, telecommunications, enrichment or verification providers when you request the relevant feature;
- customer-support and business-communications providers;
- professional advisers, insurers, auditors and potential purchasers or investors under confidentiality obligations;
- regulators, courts, law enforcement or other parties where disclosure is required by law or necessary to protect rights and safety; and
- an organisation that owns or administers your account.
We may use aggregated or de-identified information that no longer reasonably identifies an individual for analytics, service planning and security.
12) Third-party platforms and websites
When LeadPull Browser opens Google Maps, a company website or another third-party page, that provider receives information directly from your device or managed session under its own privacy policy. Source pages and social links are outside our control. LeadPull is not responsible for their privacy practices. We encourage you to review their notices before using those services.
13) International transfers
We are based in the United Kingdom, but some service providers may process information in other countries. Where UK or EEA personal information is transferred to a country without an applicable adequacy decision, we use an approved safeguard where required, such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, EU Standard Contractual Clauses, or another lawful transfer mechanism, together with supplementary security measures where appropriate. Contact us to request further information about relevant safeguards.
14) How long we keep information
We keep information only for as long as reasonably needed for the purpose collected, including:
- account, licence, device and Customer Data while the account is active and for a limited period after closure to complete deletion, resolve disputes or allow ordinary backup rotation;
- saved leads and campaigns until you use an available deletion tool, close the account or ask us to delete them, subject to legal holds and backup cycles;
- order, payment, invoice and accounting records normally for up to six years after the relevant financial period or longer if law requires;
- support and complaint records for as long as needed to resolve the issue and ordinarily no longer than six years where they may evidence a contract or dispute;
- security, access and diagnostic logs for a shorter operational period unless needed to investigate abuse, an incident or a legal claim;
- marketing records until you opt out, plus a minimal suppression record so we can respect that choice; and
- verification evidence and usage records for as long as needed to deliver results, prevent duplicate charging, audit credits and improve reliability.
When a fixed period is not appropriate, we consider account status, sensitivity, volume, legal requirements, risk, customer instructions and whether the purpose can be achieved with de-identified data.
15) Security
We use technical and organisational measures designed to protect information, including encrypted transport, access controls, password hashing, restricted service credentials, account-scoped records, audit logging, rate limits, backups and security monitoring. Managed-provider credentials are kept server-side and are not sent to browser pages. No system is completely secure, so you must also protect your password, devices, exports and account access. Please report suspected security issues promptly through
LeadPull Support.
16) Automated processing
LeadPull automatically extracts, normalises, deduplicates, enriches and assigns technical confidence or verification categories to contact information. These results help customers organise research but are not designed to make decisions that produce legal or similarly significant effects about an individual. Customers must apply human review and must not use LeadPull as the sole basis for significant decisions such as employment, credit, insurance, housing or healthcare eligibility.
17) Your privacy rights
Depending on your location and our role, you may have the right to ask for access to your personal information, correction, deletion, restriction, portability, or an explanation of processing; to object to processing based on legitimate interests; and to withdraw consent without affecting earlier lawful processing. Rights are not absolute, and we may need to verify your identity or retain information where law permits.
Your right to object: you may object at any time to personal information being used for direct marketing, and we will stop. You may also object to processing based on legitimate interests; we will stop unless we have compelling lawful grounds or need the information for legal claims.
Send requests to
[email protected]. If LeadPull holds the information only for a customer, we may refer your request to that customer. We normally respond within one month where UK GDPR applies, although the law allows extensions for complex requests.
18) Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office at
ico.org.uk/make-a-complaint/, telephone 0303 123 1113, or to the data-protection authority where you live or work. Your right to complain is not affected by contacting us first.
19) Children
LeadPull is a business service and is not intended for anyone under 18. We do not knowingly create accounts for children or intentionally collect children’s personal information. Contact us if you believe a child has provided information to the Service.
20) Changes to this Policy
We may update this Policy when the Service, providers or law changes. The effective date above identifies the latest version. If a change materially affects how we use your information, we will give reasonable notice through the Service, account email or website where appropriate.
21) Contact us
Blu Zetta Limited (trading as LeadPull), company number 10254031
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
