iTrackLEADS app privacy policy

Who we are

The iTrackLEADS app (the "app") is made by MAD DEVS Ltd ("we", "us"), registered in England, company no. 11736413, registered address 20-22 Wenlock Road, London N1 7GU. Our information security management system is certified to ISO 27001. For anything in this policy, email support at itrackleads.co.uk.

This policy covers the app only. Our website privacy policy covers maddevs.co.uk and enquiries to us, and the app terms of service cover how the app may be used.

Who the app is for

The app is for sales staff at dealerships that subscribe to iTrackLEADS. You cannot sign up in the app: your dealership creates your account. The app is not intended for children.

Who is responsible for the data

Leads and customer details belong to your dealership. The dealership is the data controller for that information and we process it on its behalf, under our contract with the dealership. We are the controller for the small amount of data we need to run the app itself, such as crash reports.

What the app collects

Your account. Your name, work email address, dealership and the access your dealership has given you. The app keeps a sign-in token on your phone so you stay signed in.

Leads and customer details. The enquiries your dealership receives, including the customer's name, phone number, email address, the vehicle they asked about and their message, plus the notes, calls and outcomes you record against each lead.

A notification token. To send you new leads, the app registers your phone with Apple's push notification service (iPhone) or Google's Firebase Cloud Messaging (Android). This gives us a token that identifies the app on your phone. It contains no personal details.

Crash reports. If the app crashes or hits an error, it sends a report to Raygun, our crash reporting service. The report contains the error details, the app version, your phone model and operating system version, your dealership, and your name and email address so we can follow up with you.

Face ID and fingerprint. You can choose to unlock the app with Face ID or your fingerprint. Your phone checks this itself and only tells the app whether it matched. We never receive your biometric data.

The app does not collect your location, contacts, photos or advertising ID. It does not track you across other apps or websites, and it shows no adverts.

How we use it

We use this data to sign you in, deliver your dealership's leads to you, notify you when a new lead arrives, record what you did with each lead, and find and fix faults. We do not use it for marketing and we do not sell it.

Who we share it with

Lead and activity data is visible to your dealership, in line with the access it has set up. We also use these service providers, who process data for us and only on our instructions:

• Amazon Web Services, which hosts iTrackLEADS and stores its data;
• Apple and Google, which deliver notifications to your phone;
• Raygun, which receives crash reports.

We disclose data where the law requires it. If our business is sold or restructured, data may transfer to the new owner under the same protections.

Where it is stored

iTrackLEADS data is stored in the Amazon Web Services region for your dealership's country: London for the UK, Ireland for Ireland, Cape Town for South Africa and Sydney for Australia. Crash reports and notification delivery are handled by Raygun, Apple and Google, who may process data outside your country under their own safeguards.

Security

All traffic between the app and our servers is encrypted with HTTPS. Access to data is limited to the people who need it, at your dealership and at MAD DEVS, and is governed by our ISO 27001 certified information security management system.

How long it is kept

We keep personal data only for as long as we need it for legal, regulatory and contractual obligations and legitimate business purposes, under our Data Protection Policy. Each dealership can also set its own retention periods in iTrackLEADS, and data that is no longer needed is securely deleted. Deleting the app removes its data from your phone.

Your rights and deleting your data

Your account belongs to your dealership's iTrackLEADS setup, so the quickest way to have it closed or your details removed is to ask your dealership's iTrackLEADS administrator. You can also email support at itrackleads.co.uk and we will work with your dealership to deal with it.

You can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, and receive it in a portable format. These rights come from the data protection law that applies to you: UK GDPR in the UK, the GDPR in Ireland, POPIA in South Africa and the Privacy Act 1988 in Australia. If you are a dealership's customer, please send requests about your data to the dealership.

If you are unhappy with how we have handled your data, you can complain to your data protection regulator. In the UK that is the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, the new version will appear on this page with a new date. If the change is significant, we will tell your dealership before it takes effect.