QLEADS.
Legal

Privacy Policy

Last updated: 11 May 2026

This Privacy Policy explains how FLUXMA Limited (“we,” “us,” or “our”), trading as QLeads, collects, uses, stores, and protects personal data when you visit our website at qleads.co.uk, engage with our services, or otherwise interact with us.

We are committed to protecting your privacy and handling your personal data transparently and lawfully under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and the Data (Use and Access) Act 2025.

1. Who we are

FLUXMA Limited is a private limited company registered in England and Wales.

  • Company number: 16655882
  • Registered office: Hall Farm, Langley, Stratford-Upon-Avon, England, CV37 0HW
  • Trading style: QLeads

We are the data controller responsible for any personal data we process about you.

Data protection contact:
Harry Clifton, Director
Email: harry@fluxma.co.uk

If you have any questions about this Privacy Policy, want to exercise your data protection rights, or want to make a complaint about how we handle your personal data, please contact us using the details above.

2. What personal data we collect

We collect different categories of personal data depending on how you interact with us:

When you visit our website

  • IP address and approximate location (city / region level)
  • Browser type, operating system, and device information
  • Pages you visit, time spent on each page, and how you navigate the site
  • The website that referred you to us, if applicable
  • Cookie identifiers and similar tracking technologies (see Section 8)

When you submit an enquiry or use our funnel at quiz.qleads.co.uk

  • Your name
  • Email address
  • Phone number
  • Business name and role (where provided)
  • Information you choose to share about your business, vertical, and goals
  • Any other details you submit through the qualification questions

When you become a client

  • Billing and invoicing information
  • Contract details
  • Business correspondence and communications
  • Performance data relating to campaigns we run on your behalf

When you communicate with us

  • The content of emails, messages, and call recordings (where applicable)
  • Any personal data you choose to share with us in those communications

We do not deliberately collect special category data (such as health, ethnicity, political opinions, or biometric data). Please do not share such data with us unless we specifically request it for a documented lawful purpose.

3. How we collect your personal data

We collect personal data:

  • Directly from you when you visit our website, fill in a form, send us an email, book a call, or use our services
  • Automatically through cookies, analytics tools, and our conversion tracking pixel (see Section 8)
  • From third parties in limited circumstances, such as publicly available business directories (Companies House) for client verification purposes

4. Why we collect your personal data and our lawful basis

Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases for the activities below:

PurposeLawful basis
Responding to your enquiry through our funnel or contact channelsLegitimate interests (to provide the service you have asked about)
Delivering our lead generation, funnel, AI systems, and ad studio services to clientsContract (necessary to perform the contract you have with us)
Sending invoices, processing payments, and managing the client relationshipContract
Improving our website, services, and customer experienceLegitimate interests (running and improving our business)
Marketing communications to existing clients about our servicesLegitimate interests, subject to your right to opt out at any time
Marketing communications to prospects who have not yet engaged with usConsent (we will not send marketing emails to prospects without their explicit opt-in)
Complying with legal, tax, accounting, and regulatory obligationsLegal obligation
Defending or pursuing legal claimsLegitimate interests

You can withdraw consent at any time where consent is the basis. You can object to processing based on legitimate interests at any time — see Section 9.

5. Who we share your data with

We do not sell your personal data. We share it only with:

Sub-processors (service providers operating on our behalf)

We use the following third-party services to operate our business. Each has its own data protection terms and contractual safeguards in place with us:

  • Vercel Inc. — website hosting and content delivery
  • Supabase Inc. — database and backend infrastructure
  • Perspective — funnel and quiz platform
  • Meta Platforms, Inc. — advertising platform and conversion tracking (Meta Pixel)
  • Google LLC — search performance analytics (Google Search Console) and, in future, website analytics
  • Anthropic PBC — AI services used in some of our internal systems

Each sub-processor processes data only on our documented instructions and under appropriate data processing agreements.

Professional advisers

Our accountants, solicitors, and other professional advisers, where necessary and subject to confidentiality obligations.

Authorities

Tax authorities, regulators, courts, or law enforcement bodies where we are required by law to share information.

Business transfers

If FLUXMA Limited is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. We will notify you in advance of any such transfer affecting your data.

6. International data transfers

We operate primarily in the United Kingdom and serve UK-based clients. However, some of our sub-processors (notably Vercel, Supabase, Meta, Google, and Anthropic) are based in the United States or process data in countries outside the UK.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

  • The UK government's adequacy regulations (where applicable)
  • The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses
  • The UK Extension to the EU-US Data Privacy Framework, where the sub-processor is certified

You can request a copy of the relevant safeguards by contacting harry@fluxma.co.uk.

7. How long we keep your personal data

We retain personal data only for as long as necessary for the purposes for which it was collected, in line with the UK GDPR's storage limitation principle.

Type of dataRetention period
Prospect enquiries (where no business relationship begins)Up to 24 months from last contact, then deleted or anonymised
Client records and communicationsDuration of the contract plus 7 years afterwards (for tax, accounting, and contractual purposes)
Marketing preferences and opt-out recordsIndefinitely, to honour your preferences
Website analytics dataUp to 26 months
Email correspondenceUp to 7 years

You can request deletion of your personal data at any time (see Section 9). We will comply unless we have an overriding legal obligation to retain it.

8. Cookies and tracking technologies

Our website uses cookies and similar technologies to function properly, understand how visitors use the site, and measure the effectiveness of our marketing.

Categories of cookies we use

Strictly necessary cookies
Required for the website to function. These cannot be switched off. Examples: session management, security, and routing.

Analytics cookies
Help us understand how visitors interact with the site so we can improve it. Examples include cookies set by Google Search Console performance tracking. We may add Google Analytics or similar in future, which we will disclose here when introduced.

Marketing and advertising cookies
Used to measure ad performance and deliver more relevant advertising. The Meta Pixel is currently installed on our website for this purpose.

For details on each cookie we set, its purpose, and its duration, please see our Cookie Policy.

Managing cookies

You can manage cookies through your browser settings. Blocking cookies may affect website functionality. We will be introducing a cookie consent banner shortly that allows you to accept or reject non-essential cookies directly.

9. Your rights under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to erasure: You can ask us to delete your personal data in certain circumstances (“right to be forgotten”).
  • Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
  • Right to data portability: You can request your data in a structured, machine-readable format.
  • Right to object: You can object to our processing based on legitimate interests, including direct marketing.
  • Rights relating to automated decision-making: You have rights in relation to decisions made solely by automated means that produce legal or similarly significant effects. We do not currently make such decisions about you.
  • Right to withdraw consent: Where we rely on consent, you can withdraw it at any time.
  • Right to complain to our organisation: Under the Data (Use and Access) Act 2025, you have the right to complain directly to us about how we handle your personal data. We will acknowledge your complaint within 30 days and respond in full as soon as reasonably possible.

To exercise any of these rights, email harry@fluxma.co.uk. We will respond within one month. There is no charge for exercising these rights, except in the case of manifestly unfounded or excessive requests.

If you are not satisfied with how we have handled your data or a complaint, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the chance to address your concerns before you approach the ICO, so please contact us first if possible.

10. How we protect your personal data

We take the security of personal data seriously and use appropriate technical and organisational measures, including:

  • Encryption in transit (TLS) and at rest where supported by our sub-processors
  • Access controls and least-privilege principles for our team and systems
  • Regular review of our security practices and sub-processor contracts
  • Secure password management and authentication
  • Logging and monitoring of access to systems containing personal data

While we take every reasonable step to protect personal data, no transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

11. Children's data

Our services are not directed at children. We do not knowingly collect personal data from anyone under 18. If you become aware that a child has provided personal data to us, please contact harry@fluxma.co.uk and we will take steps to delete that information.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted on our website. We encourage you to review this policy periodically.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Harry Clifton, Director
FLUXMA Limited (trading as QLeads)
Hall Farm, Langley, Stratford-Upon-Avon, England, CV37 0HW
Email: harry@fluxma.co.uk

FLUXMA Limited is a company registered in England and Wales under company number 16655882.