Data Processing Terms

Roles and scope

Your business is the controller of personal information in its customer enquiries. MIILEAD LTD acts as processor when it collects, organises, stores and presents those enquiries for your business through MiiLead. This arrangement lasts while those services are provided and during the agreed return or removal process.

People concerned are prospective customers and people acting for them. Information includes names, contact details, enquiry answers, messages and relevant campaign identifiers. Do not instruct us to collect sensitive or criminal-offence information without a separately agreed lawful arrangement.

MiiLead acts as a controller for its own account administration, billing, security and legal records, as explained in the Privacy Policy. Meta and payment providers may have their own controller roles under their terms.

Instructions and customer responsibilities

Your agreed campaign settings, use of the service and written requests provide our instructions. We will process enquiry data only on those documented instructions, including for transfers, unless law requires otherwise. We will tell you about a legal requirement unless prohibited, and alert you if we consider an instruction unlawful.

You must have a lawful basis, give people appropriate privacy information and use enquiries only for legitimate, disclosed purposes. You must not instruct unlawful marketing or collect more information than needed.

Protection and assistance

We will restrict access to authorised people bound by confidentiality, apply security measures appropriate to the risk, and maintain procedures for access control, secure transmission, recovery and handling incidents. No system can guarantee absolute security.

We will notify you without undue delay after becoming aware of a personal-data breach affecting your enquiry data, provide available relevant information and cooperate with your response. We will reasonably assist with rights requests, security obligations, impact assessments and regulatory consultations, taking account of the processing and information available to us.

We will provide information needed to demonstrate compliance and allow reasonable audits, including inspections by you or an appointed auditor, subject to arrangements protecting other customers and confidential systems. These arrangements will not prevent an audit required by law.

Service providers and transfers

You authorise necessary subprocessors for the agreed service. Google Firebase/Google Cloud supplies the database and backend used for enquiries; Vercel hosts the website. Suppliers used solely for our own billing or account administration are not automatically subprocessors for your enquiry data.

Where device notifications are enabled for the enquiry service, delivery also uses Expo and the relevant Apple or Google notification service, processing device tokens and routing information. Contact support for information about the suppliers and arrangements applicable to your service.

Before entrusting enquiry data to a subprocessor, we will impose equivalent relevant data-protection obligations and remain responsible for its performance. We will notify you before adding or replacing such a subprocessor and allow a reasonable opportunity to raise a data-protection objection. If we cannot resolve it, we will discuss an alternative or ending the affected processing.

Transfers outside the UK must have a lawful transfer mechanism, such as applicable adequacy regulations or approved contractual safeguards with any necessary additional protections. Contact support for the arrangements relevant to your data.

Return and deletion

When the processing service ends, you may request return or deletion of enquiry data. Contact support before account removal if you need a copy. We will delete remaining copies unless applicable law requires retention; protected backups are isolated from ordinary use and handled under the retention arrangements in our Privacy Policy, including its recovery periods and qualifications for safety checks, interrupted jobs and historical archives.

Financial, reconciliation and deletion-control records retained for MiiLead's own lawful purposes are distinct from keeping your enquiries for continued use. Cancelling renewal alone does not submit a deletion request, and we will not use retained records to restart advertising.

Retention arrangements

Account and data deletion

Questions and precedence

Send instructions, rights requests and data-protection concerns to support@miilead.com. These terms take precedence over conflicting general service wording for processing we perform on your behalf. They do not reduce either party's obligations under applicable data-protection law.