Data Sharing Agreement

1. Roles

Each party acts as an independent data controller in respect of the personal data it processes. AceLeads is an introducer; it is not the Buyer's processor and does not control how the Buyer uses lead data once reserved.

2. Permitted purpose

The Buyer may use lead data solely to contact the individual about the specific product or service they enquired about. Any other use, including marketing unrelated products, resale, or sharing with third parties, is prohibited.

3. Buyer obligations

• Comply with UK GDPR, PECR and all applicable law, including maintaining a lawful basis for contact.
• Honour opt-outs, do-not-contact and erasure requests promptly.
• Keep lead data secure and confidential, with appropriate technical and organisational measures.
• Retain lead data only as long as necessary for the permitted purpose, then delete it.
• Notify AceLeads without undue delay of any personal data breach involving lead data.

4. Consent & provenance

AceLeads provides leads that were captured first-party with consent for onward introduction. The Buyer remains responsible for confirming its own lawful basis for its processing.

5. Liability & indemnity

AceLeads is not liable for the Buyer's use or misuse of lead data. The Buyer indemnifies AceLeads against claims, losses, fines and penalties arising from the Buyer's breach of this agreement or of data-protection law.

6. Regulated leads

Certain leads (including claims-related leads) may only be supplied to appropriately authorised firms. AceLeads may require verification before releasing such leads.