Privacy Policy

Last updated: 24 September 2026

This policy explains what personal data TheLeadsBox ("we", "us") collects when you visit theleadsbox.com, order from us or send us a brief, why we collect it, and what you can ask us to do with it. Questions: [email protected].

What we collect

  • Contact details you give us: name, email address, and phone number if you enter one.
  • Order details: what you bought, the amount, and the date. Card payments are handled by Stripe. We never see or store your full card number.
  • Your brief: your product or website link, product photos, logo, answers about your product and customers, and any notes you add.
  • Website usage data: pages visited, device and browser type, and events such as starting a checkout or completing a purchase, collected through cookies and similar tools (see "Cookies and the Meta Pixel" below).
  • Emails you send us and our replies.

Why we use it

  • To take your order, make your ads and deliver them (to perform our agreement with you).
  • To send you emails about your order: confirmations, delivery, questions about your brief, and follow-ups about how the ads worked. You can also get occasional emails about new packs or plans. Every one of those has an unsubscribe link (our legitimate interest in serving existing customers).
  • To measure and improve our own advertising (with your consent where the law requires it).
  • To keep records we are required to keep, for example for tax and accounting.

Who we share it with

We don't sell your data. We share it only with service providers that help us run the business:

  • HighLevel (LeadConnector): hosts our website, forms, customer records and emails.
  • Stripe: processes payments.
  • Meta Platforms: the Meta Pixel on our site measures our Facebook and Instagram ads.
  • AI image and video generation tools: to make your ads, we upload your product photos, logo and brief details to the third-party AI tools we produce them with. We only upload what is needed to make your ads.
  • Email providers: to receive and answer your emails.

Some of these providers are based outside the European Economic Area, including in the United States. Where that happens, the transfer relies on the safeguards those providers offer, such as the EU Standard Contractual Clauses.

Cookies and the Meta Pixel

Our site uses cookies and the Meta Pixel to see which ads bring visitors and customers. The pixel sends Meta events such as page views, checkout starts and purchases, together with technical data about your browser. You can block or delete cookies in your browser settings, and you can control ad personalisation in your Facebook and Instagram ad settings.

How long we keep it

We keep your contact details, briefs and order records while you are a customer and for up to 3 years after your last order, so you can reorder without starting over. Accounting records are kept as long as the law requires. You can ask us to delete your data sooner (see below).

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, or give you a copy. You can object to marketing emails at any time with the unsubscribe link or by replying "stop". Email [email protected] and we'll answer within 30 days. If you are in the EU or UK and aren't happy with our answer, you can complain to your local data protection authority.

Security

Access to customer data is limited to the people who make and deliver your ads. Our providers use encryption in transit. No system is perfectly secure, but we act quickly if something goes wrong and will tell you if your data is affected.

Children

Our services are for businesses. We don't knowingly collect data from anyone under 18.

Changes

If we change this policy, we'll update the date at the top. For important changes, we'll email existing customers.