Privacy Policy

RG-Leads ("we", "us", "our") is a service operated by TD Holding, part of the RocketGrow.pl group. The data controller for personal data processed via rg-leads.com is TD Holding.

Contact for privacy matters: matt@rg-leads.com.

When you submit our funnel form, we collect:

• Full name
• Company name
• Email address
• Phone country code and phone number
• Company website (optional)
• Industry, budget range and buying preference
• Technical metadata: language, referrer URL, browser user-agent, timestamp

We also use a minimal cookie banner to record your cookie consent choice.

• To contact you about lead-generation services you requested — legal basis: performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR).
• To send service-related transactional emails (e.g. confirming your submission) — legitimate interest (Art. 6(1)(f) GDPR).
• To prevent abuse and secure the service — legitimate interest (Art. 6(1)(f) GDPR).
• To comply with legal obligations (accounting, tax) — Art. 6(1)(c) GDPR.

We share the minimum data necessary with the following processors, each bound by a data processing agreement:

• Lovable Cloud — database & authentication hosting (EU region).
• Cloudflare — application hosting, CDN and DDoS protection.
• Resend — transactional email delivery (notifications to our team).
• Google — Search Console (aggregated, no PII).
• Lovable — platform on which the app is built and deployed.

We do not sell personal data and we do not share leads with third parties outside of the service we deliver to you.

Some processors (e.g. Cloudflare, Resend, Google) may process data outside the EEA. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent adequacy mechanism.

• Lead submissions: up to 24 months after the last interaction, then deleted or anonymised.
• Accounting records: retained for the period required by applicable tax law (typically 5 years).
• Cookie consent: stored locally in your browser for up to 12 months.

Under GDPR you have the right to:

• Access your data and receive a copy of it
• Rectify inaccurate or incomplete data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your supervisory authority (in Poland: Prezes UODO)

To exercise any of these rights, email matt@rg-leads.com. We respond within 30 days.

We use only essential cookies and a consent record. We do not run third-party advertising or cross-site tracking cookies on this site.

Data is transmitted over HTTPS (TLS). Access to the lead database is restricted to authenticated administrators via role-based access control. We follow industry-standard practices to protect your data, but no system on the internet can be guaranteed 100% secure.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.