Privacy Policy
Last updated: 6 September 2026
This policy explains what personal data we collect through this website, why we collect it, who it is shared with, how long we keep it, and the rights you have over it. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.
01Who we are
Advisor Lead Engine is a trading name of Obsidian Software Ltd, a limited company registered in the United Kingdom. We build lead generation systems for mortgage and protection advisory firms.
For the personal data described in this policy, we are the data controller - we decide why and how it is used. You can reach us about anything in this policy at [email protected], and we aim to reply within five working days.
02What we collect
We only collect what you type into the callback form on this site. That is:
- Your name - so we know who we are speaking to.
- Your phone number - so we can call you back.
- How you currently get most of your clients (referrals, bought leads, own marketing, or a mix) - so the call is useful rather than generic.
All three fields are required to submit the form. There is no legal obligation to give us any of it, but without a name and number we cannot return your call.
Our form host also records the date and time of your submission and the IP address it came from, as an automatic anti-spam measure. We do not use that information for anything else.
We do not ask for, and you should not send us, financial details, client data, health information, or any other special category data through this site.
03Why we use it, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Call you back and discuss whether we can help your firm | Legitimate interests (Article 6(1)(f)) - responding to a business enquiry you asked us to respond to. We have considered your rights and, because you requested the contact yourself, we do not believe this overrides them. |
| Take any steps you ask for before entering into a contract with us | Contract (Article 6(1)(b)) - steps taken at your request prior to entering a contract. |
| Keep a record of enquiries, and protect the form against spam and abuse | Legitimate interests (Article 6(1)(f)) - running our business securely and keeping accurate records. |
| Comply with tax, accounting and other legal duties, where a relationship follows | Legal obligation (Article 6(1)(c)). |
You can object to any processing we carry out on the basis of legitimate interests. See your rights below.
04How we will and won't contact you
We call you because you asked us to. We do not add you to a marketing list, we do not sell or rent your details, and we do not pass them to anyone else for their own marketing.
If you would rather we stopped contacting you, tell us on the call or email [email protected] and we will stop immediately. We keep a minimal suppression record - normally just your phone number - so that we do not contact you again by mistake.
Any marketing email we send you will always include a one-click unsubscribe link.
05Who we share it with
We never sell your data. We share it only with the service providers we need to run the site and reply to you. Each acts as our processor, under contract, and may only use the data on our instructions:
- Netlify - hosts this website and receives the callback form submissions.
- Google Fonts - serves the typefaces used on this site. Your browser requests those font files directly from Google, which means Google receives your IP address and basic request information. No form data is sent to Google.
- Our email and business software providers - the mailbox and tools we use to store your enquiry and follow it up.
We may also disclose personal data where we are legally required to - for example to a regulator, or to a court - or where it is necessary to establish, exercise or defend legal claims.
06Where your data is stored
Some of the providers above are based in, or store data in, countries outside the UK, including the United States. Where personal data is transferred outside the UK, we rely on one of the safeguards permitted by data protection law - an adequacy decision (including the UK Extension to the EU–US Data Privacy Framework), the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses - so that your data keeps an equivalent level of protection.
You can ask us for details of the safeguards used for any particular transfer by emailing [email protected].
07How long we keep it
- Enquiries that don't lead anywhere: deleted within 12 months of your last contact with us.
- Enquiries that become a client relationship: kept for the length of the relationship and then for six years, to meet tax, accounting and limitation-period requirements.
- Suppression records (a note not to contact you): kept indefinitely, because deleting them would defeat their purpose.
We delete data sooner if you ask us to and there is no legal reason to keep it.
08Cookies and tracking
This site sets no cookies. It runs no analytics, no advertising pixels, and no third-party tracking scripts, and it does not store anything in your browser. That is why you are not shown a cookie banner.
The only third-party request your browser makes is to Google Fonts, described in section 5.
09Automated decision-making
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects. A person reads every enquiry and a person makes every call.
10How we protect it
This site is served over HTTPS, so what you submit is encrypted in transit. Access to enquiries is limited to the people who need it, protected by strong, unique passwords and multi-factor authentication where the provider supports it. No system is perfectly secure, but if a breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours and tell you directly where the law requires it.
11Your rights
Under UK data protection law you have the right to:
- Be informed about how your data is used - which is what this policy is for.
- Access a copy of the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Erase your data where there is no good reason for us to keep it.
- Restrict how we use your data while a concern is being resolved.
- Object to processing based on legitimate interests, and to object to direct marketing at any time - an objection to direct marketing is always honoured, with no balancing test.
- Portability - receive the data you gave us in a structured, commonly used, machine-readable format.
- Withdraw consent at any time, where we have relied on consent.
To use any of these rights, email [email protected]. It is free, and we will respond within one month. If a request is especially complex we may extend that by up to two further months, and we will tell you within the first month if we do. We may ask you to confirm your identity before we act.
12Complaints
If you are unhappy with how we have handled your data, please tell us first - we would rather put it right. You also have the right to complain to the UK's data protection regulator at any time:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint
13Children
This site and our services are aimed at professionals in the mortgage and protection industry. We do not knowingly collect data from anyone under 18. If you believe a child has submitted details to us, email [email protected] and we will delete them.
14Links to other sites
Where this site links elsewhere, those sites have their own privacy policies and we are not responsible for their content or their handling of your data.
15Changes to this policy
If we change how we handle personal data, we will update this page and change the date at the top. Where a change materially affects you, we will make reasonable efforts to tell you directly. Please check this page from time to time.
16Contact us
Questions, requests, or complaints about this policy or your data:
Obsidian Software Ltd (trading as Advisor Lead Engine)
[email protected]