Privacy, with a clear view.

1. Who this notice is for

This notice covers the Leadvera website, product enquiries and the Leadvera CRM service. Leadvera Ltd (trading as Leadvera), with its registered office in London, United Kingdom, is the controller of the personal information collected through this website and of the account details of the people who use the service. You can reach us about privacy at privacy@unisticgroup.com.

An organisation using Leadvera to manage its own customer relationships is the controller of the records it keeps in its workspace, and Leadvera Ltd processes them on its behalf under the data processing agreement. That organisation’s own privacy notice explains its choices about lead collection, contact permissions, campaigns and retention.

2. How the service handles information

Workspace records (leads, contacts, conversations, notes, tasks, appointments, documents and settings) are stored on Leadvera’s servers, hosted on Cloudflare: records in Cloudflare D1 and files in Cloudflare R2, encrypted at rest by the platform. Only signed-in members of a workspace can see its records, according to their role.

When you send a form on this website (an enquiry, demo request, support request, newsletter sign-up, status-update subscription, accessibility report or data rights request), it is sent to Leadvera, stored with a reference number and passed to the team who handles it.

Cloudflare processes connection and security data to deliver the service, under its own terms and privacy notice.

3. Information used by the service

Each customer organisation decides which data is necessary for its use of the CRM. The categories are listed below; what is actually collected depends on the connected services and enabled features.

4. Where information comes from

Information may be supplied by a person, entered by an authorised team member, imported from an approved file or received through a connected website, email, calling or social service. Record the original source and purpose so the receiving team understands why the person is in the CRM.

Public availability of contact information does not automatically authorise every form of outreach. Each organisation must assess its own collection and contact obligations before importing or contacting a person.

5. Purposes and permitted use

We use information to operate the workspace, receive and follow up enquiries, assign work, manage sales activity, support customers and protect the service. Product updates are sent only to people who ask for them, and AI is used only where a workspace has enabled it.

We rely on the performance of our contract with customers for running the service, our legitimate interests for answering enquiries and keeping the service secure, and consent for product updates. A checkbox is never treated as permission for unrelated processing.

6. Access, providers and international transfers

Access follows authorised roles and workspace membership, enforced by the service for every request. Connected service providers receive only the information needed to deliver a selected function, subject to the contract and configuration.

The subprocessor register lists the providers that process data to run Leadvera, what they do and when they are used. International-transfer safeguards are set out in the data processing agreement.

7. Optional AI assistance

AI is off by default. You can use manual qualification, human assignment, follow-up and sales progression without it. When a workspace administrator switches AI on and an AI provider is configured, the lead or conversation details needed for the task are sent to the provider (Anthropic) to produce a draft, summary or suggestion.

AI output is shown for review; AI never closes, deletes or merges records on its own. Lead prioritisation must not be used as an unchecked substitute for decisions about eligibility for housing, credit or other consequential services.

8. Keeping and removing information

Workspace records are kept while the workspace is active, until a workspace member with permission deletes them. Audit records are kept so that changes remain accountable. Website form submissions are kept for 12 months and then deleted.

When a customer’s subscription ends, its workspace records are returned or deleted as described in the data processing agreement.

9. Your choices and requests

Depending on the applicable law, you may have the right to request access, correction, deletion, restriction, portability or an objection to certain uses. Where we rely on consent, you can withdraw it at any time; this does not affect earlier lawful processing. You can also complain to your data protection authority; in the United Kingdom that is the Information Commissioner’s Office.

Use the data rights request page to ask for access, correction, deletion, a portable copy or a restriction. Your request is sent to Leadvera with a reference number. We may ask you to confirm your identity in a proportionate way, and if your information belongs to one of our customers’ workspaces we pass the request to that customer.

10. Changes and contact details

We tell workspace owners about material changes before they take effect, and each version of this notice shows its effective date.

Questions about this notice or how we handle personal information: write to privacy@unisticgroup.com. For anything else, contact support@unisticgroup.com.