Automated Sales LTD (registered in England and Wales, company number 14730632, registered office 124-128 City Road, London, England, EC1V 2NX) and Automated Sales FZE LLC (a Free Zone Establishment in Sharjah Publishing City Free Zone, UAE, licence number 4311904.01) jointly operate LeadRouter, a lead-routing service for Pipedrive CRM (the "Service"), available at leadrouter.automated-sales.co. This Privacy Policy explains what personal data we collect, how we use it, and the rights available to individuals whose data we process.
Because we operate through both a UK entity and a UAE entity, this Policy addresses both the United Arab Emirates' Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and the UK General Data Protection Regulation ("UK GDPR") and Data Protection Act 2018. Where the two regimes impose different requirements, we apply whichever standard is higher.
2.1 As a data controller, we determine the purposes of processing for account and billing data — e.g. the email address and company name of the person who signs up for the Service, and payment details processed via Stripe.
2.2 As a data processor, we process data on behalf of our customers (data controllers) for the personal data contained in their connected Pipedrive account — such as their sales representatives' names and their leads' or contacts' names, emails, and deal information — solely to provide the routing functionality of the Service, and strictly on the customer's documented instructions. This relationship is further defined in our Data Processing Agreement, available on request.
We do not sell personal data, and we do not use Customer Data for our own marketing purposes.
Where UK GDPR applies to our processing, we rely on: performance of a contract; legitimate interests (service security, fraud prevention); and, where applicable, consent. Under the UAE PDPL, processing is carried out on the bases permitted under Article 4 of the Decree-Law, including performance of contract and compliance with legal obligation.
We share personal data with the following categories of service providers, each acting under contractual obligations consistent with this Policy:
A current list of sub-processors is available on request at dan@automated-sales.com.
Personal data may be processed in both the United Kingdom and the United Arab Emirates. Where personal data originating from the UK or EU is transferred to the UAE, we rely on an appropriate transfer mechanism as required by UK GDPR (such as Standard Contractual Clauses, the UK International Data Transfer Agreement, or an applicable adequacy finding).
We retain personal data for as long as necessary to provide the Service and for a reasonable period thereafter to comply with legal, accounting, or reporting obligations. Upon termination of a customer account, Customer Data is deleted or returned in accordance with the timeframe set out in the applicable Data Processing Agreement.
Depending on applicable law, individuals may have the right to access, correct, delete, restrict, or object to processing of their personal data, and the right to data portability. Where we act as a processor on behalf of a customer, requests should generally be directed to that customer (the data controller); we will assist our customers in responding to such requests. Where we act as controller, requests can be sent to dan@automated-sales.com.
We apply technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS/TLS), password hashing, and access controls. No system is completely secure, and we cannot guarantee absolute security of information transmitted to the Service.
The Service is not directed at children, and we do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app notice.
For questions about this Privacy Policy or to exercise a data protection right, contact dan@automated-sales.com.