Last Updated: 04 March 2026

1. Introduction

This Privacy Policy describes how FP Lead Gen Limited ("we", "us", or "our") collects, uses, and shares personal information when you use our website, fitproleadgen.com (the "Site"), and our paid advertising services (the "Services").

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or our practices with regards to your personal information, please contact us at [email protected].

2. Data Controller

FP Lead Gen Limited is the data controller responsible for your personal information. We are registered in Cardiff, Wales, UK, and our registered address is:

FP Lead Gen Limited, Nightingale House, Main Rd, Church Village, Pontypridd, CF38 1RN

3. Information We Collect

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and services, when you participate in activities on the Site or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us and the Site, the choices you make and the products and features you use. The personal information we collect may include the following:

• Personal Information You Disclose to Us: We collect your first and last name, email address, phone number, and other similar contact data.

• Business Information: We may collect information about your business, such as company name, job title, and other business-related details.

4. How We Use Your Information

We use the information we collect or receive:

• To provide and manage our Services: We may use your information to provide you with the services you have requested.

• To send you marketing and promotional communications: We and/or our third-party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt-out of our marketing emails at any time.

• To respond to your enquiries: We may use your information to respond to your enquiries and solve any potential issues you might have with the use of our Services.

• For other Business Purposes: We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Site, products, marketing and your experience.

• AI-Powered Services: Personal data (such as lead names, phone numbers, and messages) may be processed by our AI-powered tools, including the Dorothy AI Booking and Sales Bot, which communicates with leads via SMS, WhatsApp, Facebook Messenger, and other channels. We may also use AI tools to assist in the creation of advertising campaigns, ad copy, and creatives.

5. Artificial Intelligence and Automated Processing

As part of our Services, we use artificial intelligence ("AI") technology that may process personal data. This includes:

• Dorothy AI Booking and Sales Bot: Dorothy is an AI-powered system that interacts with leads on behalf of our clients via SMS, WhatsApp, Facebook Messenger, and other communication channels. In doing so, Dorothy processes personal data such as names, phone numbers, and message content.

• AI-Assisted Campaign Creation: We may use AI tools to help create advertising campaigns, ad copy, and creative materials. These tools may process business information and other data provided by our clients.

We do not use AI for solely automated decision-making that produces legal or similarly significant effects on individuals. Where AI is used, it is as a tool to assist in the delivery of our Services, and human oversight is maintained as part of our processes.

For more information about how AI is used within our Services, please refer to Section 6 of our Terms and Conditions.

6. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.

• Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.

• Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfil the terms of our contract.

• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

7. Data Sharing and Processors

We may share your data with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.

We use the following third-party service providers:

• LeadDec: For data storage.

• Stripe: For billing and payment processing.

8. Data Storage and Security

We have implemented appropriate technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information.

9. International Data Transfers

Our services are targeted at customers located in the UK and the European Union (EU). The information we collect may be stored and processed in any country where we and our service providers have facilities. We will ensure that any transfer of personal information from the UK or the EEA to countries outside of these areas will be protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, or the UK Information Commissioner's Office.

10. Your Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• The right to be informed: You have the right to be informed about the collection and use of your personal data.

• The right of access: You have the right to access your personal data.

• The right to rectification: You have the right to have inaccurate personal data rectified, or completed if it is incomplete.

• The right to erasure: You have the right to have personal data erased.

• The right to restrict processing: You have the right to request the restriction or suppression of your personal data.

• The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.

• The right to object: You have the right to object to the processing of your personal data in certain circumstances.

• Rights in relation to automated decision making and profiling: You have rights in relation to automated decision making and profiling.

If you wish to exercise any of these rights, please contact us at [email protected].

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

11. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. When deciding what the correct time is to keep the data, we look at its amount, nature, and sensitivity, the potential risk of harm from unauthorised use or disclosure, the processing purposes, and whether we can achieve those purposes through other means.

12. Cookies

We use cookies and similar tracking technologies to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

14. Contact Us

If you have questions or comments about this policy, you may email us at [email protected] or by post to:

FP Lead Gen Limited, Nightingale House, Main Rd, Church Village, Pontypridd, CF38 1RN, United Kingdom