Last Updated: October 15, 2025

Introduction

This Privacy Policy explains how Kiwi Leads Limited ("Kiwi Leads," "we," "us," or "our") collects, uses, protects, and shares information when you use our CRM platform, automation services, and related offerings (collectively, the "Services"). By creating an account or using our Services, you consent to the practices described in this Privacy Policy.

1. Who We Are

Kiwi Leads Limited is a business automation and CRM services provider. We offer:

• CRM Platform Access: Self-service platform usage for DIY users
• Automation Agency Services: Custom automation builds and ongoing management for clients
• Content & Marketing Services: Newsletter distribution, educational content, and affiliate partnerships
• Consultation Services: Strategy, implementation support, and technical guidance

2. Information We Collect

2.1 Account Information

When you sign up for our Services, we collect:

• Full legal name
• Business or company name
• Email address (primary contact method)
• Phone number
• Billing address
• Password (encrypted and secured)

2.2 Payment Information

We use third-party payment processors (Stripe and PayPal) to handle all financial transactions. We do not store complete credit card numbers on our servers. We may retain the last four digits of your card for reference and billing history purposes.

2.3 Your Content and Customer Data

When you use our CRM platform and Services, you will create, upload, store, and manage data including:

• Contact Information: Names, email addresses, phone numbers, and other details of your customers or contacts
• Communication Records: Emails, SMS messages, call logs, and chat transcripts
• Forms and Submissions: Data collected through forms, surveys, and landing pages
• Files and Media: Documents, images, videos, logos, and other uploaded content
• Custom Fields: Any additional data fields you create to track information specific to your business
• Automation and Workflow Data: Triggers, actions, sequences, and campaign configurations

2.4 Usage and Analytics Information

We automatically collect information about how you use our Services:

• IP address and device information
• Browser type and version
• Pages visited and features used
• Time spent on pages
• Click patterns and navigation paths
• Referring websites
• Date and time of access

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

• Keep you logged into your account
• Remember your preferences and settings
• Analyze how you use our Services
• Improve platform performance and user experience
• Deliver personalized content and recommendations
• Track affiliate referrals and commissions

You can control cookie preferences through your browser settings. Note that disabling cookies may affect your ability to use certain features of our Services.

2.6 Communications and Support

When you contact our support team or communicate with us, we collect:

• Email correspondence and support tickets
• Chat transcripts and call recordings (when applicable)
• Feedback, suggestions, and survey responses
• Screenshots or diagnostic information you provide

2.7 Information from Third-Party Integrations

When you connect third-party services to your account, we may receive information from those services in accordance with their authorization and privacy policies. This may include data from:

• Social media platforms (Facebook, Instagram, LinkedIn, TikTok)
• Email service providers
• Payment processors
• Calendar and scheduling tools
• AI and automation services
• Analytics platforms
• Communication tools (phone, SMS, messaging)

3. How We Use Your Information

3.1 To Provide and Improve Services

• Create and maintain your account
• Process your transactions and manage billing
• Deliver the CRM platform and automation features
• Store and process your customer data as instructed by you
• Provide technical support and troubleshooting
• Develop new features and improve existing functionality
• Monitor platform performance and security

3.2 For Communications

• Send important service updates and announcements
• Respond to your inquiries and support requests
• Deliver newsletters and educational content (with your consent)
• Share product updates, tips, and best practices
• Request feedback and conduct surveys

3.3 For Marketing and Promotion

• Send promotional content about our Services (with your consent)
• Display your business name and logo as a customer testimonial (with permission)
• Create case studies showcasing customer success (with explicit consent)
• Track affiliate referrals and commissions
• Analyze marketing campaign effectiveness

3.4 For Legal and Security Purposes

• Enforce our Terms of Service and other policies
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and respond to legal requests
• Protect the rights, property, and safety of Kiwi Leads, our users, and the public
• Resolve disputes and investigate complaints

3.5 For Analytics and Research

• Understand how users interact with our Services
• Generate aggregated, anonymized statistics about platform usage
• Conduct research to improve user experience
• Test new features and optimize performance

4. How We Share Your Information

4.1 We DO NOT Sell Your Personal Information

Kiwi Leads does not sell, rent, or trade your personal information or customer data to third parties for their marketing purposes.

4.2 Service Providers and Business Partners

We share information with trusted third-party service providers who help us operate our Services, including:

• Cloud Infrastructure Providers: For hosting and data storage
• Payment Processors: Stripe and PayPal for billing and payments
• Email Service Providers: For transactional and marketing emails
• Analytics Services: Google Analytics and similar tools
• Communication Services: Phone, SMS, and messaging providers
• AI and Automation Tools: For processing and enhancing functionality
• Support and Help Desk Software: For customer service
• Marketing and Advertising Platforms: For promotional activities

These service providers are bound by contractual obligations to protect your information and use it only for the purposes we specify.

4.3 With Your Consent

With your explicit permission, we may:

• Feature your business name and logo on our website
• Create and publish case studies about your success
• Record and share video testimonials
• Share your story in marketing materials

4.4 For Legal Compliance and Protection

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Investigate fraud, security breaches, or illegal activities
• Protect the rights, property, or safety of Kiwi Leads, our users, or the public

4.5 Business Transfers

If Kiwi Leads is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and provide information about your choices regarding your data.

4.6 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you, such as:

• Usage statistics and trends
• Industry benchmarks and insights
• Platform performance metrics

5. Data Security and Protection

5.1 Security Measures

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication and password requirements
• Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• Monitoring for suspicious activity and unauthorized access
• Regular backups and disaster recovery procedures

5.2 Your Responsibility

You are responsible for:

• Maintaining the confidentiality of your account password
• Restricting access to your account and devices
• Notifying us immediately of any unauthorized access
• Ensuring you have proper consent to collect and process your customer data
• Complying with applicable data protection laws

5.3 No Guarantee

While we take reasonable measures to protect your information, no system is completely secure. We cannot guarantee absolute security of your data and are not liable for unauthorized access that occurs despite our security measures.

6. Data Retention

6.1 Active Accounts

We retain your account information and customer data for as long as your account remains active and as necessary to provide you the Services.

6.2 Account Deletion

When you delete your account:

• Your account and associated customer data will be marked for deletion
• Data will be permanently deleted within 90 days unless we are legally required to retain it
• Some information may be retained in backup systems for a limited additional period
• Anonymized or aggregated data may be retained indefinitely

6.3 Legal and Compliance Retention

We may retain certain information longer when required by law or for legitimate business purposes, such as:

• Tax and accounting records
• Dispute resolution and legal proceedings
• Fraud prevention and security investigations
• Regulatory compliance

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access your personal information and customer data at any time through your account
• Request a copy of your data in a portable format
• Export your customer data and content from the platform

7.2 Correction and Updates

You can update your account information and customer data directly through the platform at any time. If you need assistance, contact our support team.

7.3 Deletion

You have the right to:

• Delete your account and associated data at any time
• Request deletion of specific information (subject to legal retention requirements)
• Remove customer contacts and data from the platform

7.4 Marketing Communications

You can opt out of marketing emails by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting your communication preferences in your account settings
• Contacting our support team

Note: You cannot opt out of essential service communications (e.g., billing notifications, security alerts).

7.5 Cookie Preferences

You can manage cookie preferences through your browser settings. Note that blocking certain cookies may impact your ability to use some features.

7.6 GDPR Rights (European Users)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under GDPR, including:

• Right to object to data processing
• Right to restrict processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and other locations where our service providers operate. These countries may have different data protection laws than your jurisdiction.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions by the European Commission (where applicable)
• Certifications and compliance frameworks

9. Children's Privacy

Our Services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are under 16, do not use our Services or provide any information to us.

If we learn we have collected information from a child under 16 without verified parental consent, we will delete that information promptly. If you believe we have collected information from a child under 16, please contact us immediately.

10. Third-Party Links and Integrations

Our Services may contain links to third-party websites, applications, or services that we do not control. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

When you integrate third-party services with your account, those services may have access to certain information as necessary to provide their functionality. Review their privacy policies to understand how they handle your data.

11. Australian Privacy Rights

Kiwi Leads Limited is committed to complying with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). If you are an Australian resident or your personal information is collected in Australia, the following applies:

11.1 Australian Privacy Principles

We handle your personal information in accordance with the 13 Australian Privacy Principles, which govern:

• Open and transparent management: We manage personal information in an open and transparent way
• Anonymity and pseudonymity: Where practicable, you have the option to deal with us anonymously or using a pseudonym
• Collection: We only collect personal information that is reasonably necessary for our functions and activities
• Dealing with unsolicited information: If we receive unsolicited personal information, we determine whether we could have collected it and destroy or de-identify it if not
• Notification of collection: We notify you of certain matters when collecting personal information, including why we collect it and who we might share it with
• Use and disclosure: We only use or disclose personal information for the primary purpose of collection, or a related secondary purpose that you would reasonably expect
• Direct marketing: We only use or disclose personal information for direct marketing with your consent, and provide simple opt-out mechanisms
• Cross-border disclosure: We take reasonable steps to ensure overseas recipients comply with Australian privacy obligations
• Adoption, use or disclosure of government identifiers: We do not adopt government identifiers as our own identifiers
• Quality of personal information: We take reasonable steps to ensure personal information we collect, use or disclose is accurate, up-to-date, complete and relevant
• Security: We take reasonable steps to protect personal information from misuse, interference, loss, unauthorized access, modification or disclosure
• Access: You can request access to personal information we hold about you
• Correction: You can request correction of personal information we hold about you

11.2 Your Rights Under Australian Privacy Law

As an Australian resident, you have the right to:

• Access your personal information: You can request access to the personal information we hold about you
• Correct your information: You can request correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information
• Complain about privacy breaches: You can lodge a complaint with us if you believe we have mishandled your personal information
• Complain to the regulator: If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC)

11.3 Notifiable Data Breaches

Under the Notifiable Data Breaches (NDB) scheme, we are required to notify you and the OAIC if we experience an eligible data breach that is likely to result in serious harm to you. An eligible data breach occurs when:

• There is unauthorized access to or disclosure of personal information, or personal information is lost in circumstances where unauthorized access or disclosure is likely to occur; and
• A reasonable person would conclude that the access or disclosure would be likely to result in serious harm to any individuals to whom the information relates

We maintain security measures and incident response procedures to prevent, detect and respond to data breaches in accordance with the NDB scheme.

11.4 Cross-Border Disclosures

We may disclose your personal information to overseas recipients, including service providers located in the United States, European Union, and other jurisdictions where our technology infrastructure and service providers operate. Before disclosing personal information to overseas recipients, we take reasonable steps to ensure they do not breach the APPs in relation to that information, including through:

• Contractual arrangements requiring compliance with privacy obligations
• Ensuring recipients are subject to substantially similar privacy protections
• Taking reasonable steps to verify their practices

11.5 Making a Privacy Complaint

If you wish to make a complaint about how we have handled your personal information, please contact us at [email protected] with details of your complaint. We will:

1. Acknowledge your complaint within 7 days
2. Investigate your complaint and respond within 30 days
3. Work with you to resolve the issue

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: [email protected]

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we collect
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt out of the sale of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at [email protected]. We will verify your identity before processing your request.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email to your registered email address
• Post a prominent notice on our website
• Provide a reasonable period for you to review the changes before they take effect

Your continued use of our Services after the changes take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree to the changes, you should discontinue use of the Services and delete your account.

14. Contact Us

15. Data Processing Addendum

For customers who are data controllers under GDPR or other data protection laws, we offer a Data Processing Addendum (DPA) that provides additional terms regarding our processing of personal data on your behalf. To request a copy of our DPA, please contact us at [email protected].

---

© 2025 Kiwi Leads Limited. All rights reserved.
This Privacy Policy was last updated on October 15, 2025.