Last updated: August 2025

Prospect Generator Limited (“Prospect Generator”, “we”, “us”, “our”), a company registered in England and Wales (company number 14289338) with registered office at 1 Grosvenor House, Melton Road, Oakham, Rutland, LE15 6AX, is the controller of personal data collected via www.prospectgenerator.co.uk

How we treat your data securely

Your trust matters to us. We take looking after your information very seriously. That means:

1) Collecting only what we need – we don’t ask for unnecessary personal details.
2) Keeping it safe – we use strong security measures, including encryption, secure servers, access controls, and staff training, to prevent unauthorised access, loss, or misuse.
3) Being transparent – we explain clearly how and why we use your personal data, and we never sell your information to anyone.
4) Respecting your rights – you stay in control of your data. We provide easy ways to manage your preferences, opt out of marketing, or exercise your rights.
5) Working with trusted partners – when we use suppliers or service providers, we check they meet our security and compliance standards.

Table of Contents

1. How do we process your personal data?
2. What are the legal bases for processing your data?
3. How long do we keep your personal data?
4. How do we use your personal data to communicate with you?
5. Who has access to your data and where is it stored?
6. Our role as Controller and Processor
7. Cookies and tracking
8. International data transfers
9. Your rights under data protection legislation
10. How to submit a query or complaint
11. Changes to this notice

1. How do we process your personal data?

We collect and use personal data when you interact with us, including:

Website visitors: IP address, browser type/version, operating system, device information, referring website, pages visited, time on site.
Business enquiries: name, company, role, work email, work telephone, and the content of your enquiry.
Clients and prospective clients: contact details, correspondence history, and commercial information (such as notes in our CRM).
Recruitment applicants (if applicable): CVs, application forms, interview notes.

We do not collect consumer mortgage, salary, or deposit information via this website.

2. What are the legal bases for processing your data?

We process personal data under the following lawful bases:

Legitimate interests – running our website, responding to enquiries, B2B marketing to corporate subscribers (with opt-out), ensuring network and information security.
Consent – non-essential cookies; marketing where required by law.
Contract – to perform our obligations when you engage our services.
Legal obligations – record-keeping, tax, fraud prevention, compliance with regulators.

We do not rely on FCA financial promotions compliance for this site.

3. How long do we keep your personal data?

4. How do we use your personal data to communicate with you?

Non-marketing communications – responding to enquiries, providing information you requested, contract fulfilment.
Marketing communications – we may send business-related updates or service information to business contacts under legitimate interests, with an easy opt-out.
You can unsubscribe from marketing at any time by clicking the unsubscribe link in our emails or contacting us.

5. Who has access to your data and where is it stored?

We only share data where necessary. Categories of recipients may include:

– IT service providers & hosting (e.g. Opalstack, Microsoft, Google)
– Email delivery providers (e.g. Sendgrid, Gmail)
– CRM and analytics providers
– Professional advisers (accountants, solicitors)
– Regulators and authorities (where legally required)

We do not sell or rent your data to third parties.

6. Our role as Controller and Processor

– Controller – Prospect Generator acts as a controller for data collected via our website and direct business interactions.
– Processor – When our tools are deployed on a housebuilder’s website, we act as a processor for that housebuilder. They are the controller of the data, and you should contact them directly for rights requests. We will support them as required.

7. Cookies and tracking

Our website uses cookies and similar technologies:

– Strictly necessary cookies – required for basic site functionality.
– Analytics cookies – help us understand usage and improve our services (only with consent).
– Marketing cookies – allow us to deliver relevant adverts (only with consent).

You can manage or withdraw your cookie preferences at any time through our Cookie Consent Management Platform [insert live link]. For full details see our Cookie Policy [insert live link].

8. International data transfers

Where data is transferred outside the UK:

– We rely on UK adequacy regulations where applicable, or
– We implement the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, plus technical and organisational safeguards.

9. Your rights under data protection legislation

You have rights under the UK General Data Protection Regulation (UK GDPR) that give you control over your personal data. Here’s what each right means in plain English:

Right of access: You can ask us what personal data we hold about you and request a copy. This helps you check we are using your data lawfully and transparently.

Right to rectification: If you spot something wrong or incomplete in the data we hold about you, you can ask us to correct it.

Right to erasure (“right to be forgotten”): In certain situations, you can ask us to delete your personal data. This isn’t an absolute right — we may need to keep records for legal reasons — but if there’s no good reason for us to hold your data, we will erase it.

Right to restrict processing: You can ask us to temporarily stop using your data, for example, if you’re checking its accuracy or if you’ve objected to us using it.

Right to data portability: You can ask us to send you (or another organisation) a copy of your personal data in a format that is easy to move, copy, or share.

Right to object: You can object to us using your data if you feel it affects your rights and freedoms. You can always object to marketing, and we will stop.

Rights related to automated decision-making and profiling: You have the right not to be subject to a decision made entirely by automated means if it has a significant effect on you. We do not currently make such decisions.

How to exercise your rights: To use any of these rights, email us at [email protected] or write to us at our Oakham office. We will respond within one month. If the request is complex, we may extend to two months but will inform you within the first month.

10. How to submit a query or complaint

Queries: please contact our Data Protection Manager at [email protected].

Complaints: you may raise concerns with us, or directly with the Information Commissioner’s Office (ICO) via https://ico.org.uk/make-a-complaint or by calling 0303 123 1113.

11. Changes to this notice

We keep this notice under regular review and will update it when necessary. The most recent version will always be available at www.prospectgenerator.co.uk/privacy-policy.