Privacy Policy

1. Who we are

Leads Cyprus (leadscy.com), powered by OrderPointCy, is the data controller for personal data processed through this website and platform. Contact: hturgut2010@gmail.com.

2. Data we collect

Account data: email, name, password (stored hashed), plan and billing status.

Usage data: searches, saved leads, notes, activity logs, language and theme preferences.

Business contact data: publicly available business information (name, address, phone, website, social profiles, ratings) gathered from public sources such as Google Maps and business websites.

Payment data is processed by Stripe and PayPal; we do not store full card details.

Connected Meta accounts: Page and Instagram identifiers and encrypted access tokens, only when you connect them.

3. Legal bases (GDPR Art. 6)

Contract performance — to provide your account and services.

Legitimate interests — B2B prospecting using public business information, security and service improvement.

Legal obligation — accounting and tax records.

Consent — where required, e.g. optional connections; you may withdraw consent at any time.

4. How we use data

To operate the platform, enrich and display business leads, process payments, provide support, prevent abuse and send service emails. We do not sell personal data.

5. Sharing and processors

We use trusted processors including cloud hosting, Stripe, PayPal, Meta (when connected), Google Maps and AI/search providers for enrichment. Some may process data outside the EU/EEA under Standard Contractual Clauses or equivalent safeguards.

6. Retention

Account data is kept while your account is active and deleted or anonymised within a reasonable period after closure, except records we must keep by law (e.g. invoices for up to 7 years).

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent. Businesses listed in our data may request removal at any time.

To exercise your rights, email hturgut2010@gmail.com. You may also complain to the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy).

8. Security

We use encryption in transit, encrypted storage for sensitive tokens, access controls and row-level data isolation between accounts and client portals.

9. Cookies and local storage

We use essential storage for sign-in sessions and preferences (language, theme). We do not use advertising cookies.

10. Changes

We may update this policy; material changes will be announced on the website.