PRIVACY POLICY
Last Updated: April 1, 2026
Leads Monkey Ltd
692/D, near 3 No Stop, Neelam Block, Iqbal Town
Lahore, Pakistan
Email: info@leadsmonky.com
Website: https://leadsmonky.com
1. INTRODUCTION
Leads Monkey Ltd (“we,” “our,” “us,” or “Leads Monky” or “Leads Monkey”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://leadsmonky.com and use our Google Workspace reseller and cold email infrastructure services.
This policy applies to all users of our services globally and complies with:
- General Data Protection Regulation (GDPR) – EU
- California Consumer Privacy Act (CCPA) – USA
- Personal Information Protection and Electronic Documents Act (PIPEDA) – Canada
- UK Data Protection Act 2018
- Pakistan Electronic Transactions Ordinance 2002
- Australian Privacy Principles (APPs)
IF YOU DO NOT AGREE WITH THIS POLICY, PLEASE DO NOT USE OUR SERVICES.
2. INFORMATION WE COLLECT
2.1 Personal Information You Provide
When you use our services, we collect:
Account Registration:
- Full name
- Business email address
- Phone number (preferably WhatsApp)
- Company name and details
- Job title/role
Billing Information:
- Payment method details (processed by third-party payment processors – we do NOT store complete credit card numbers)
- Billing address
- Tax identification numbers (if applicable)
Service Configuration:
- Domain names you want to configure
- DNS records and email infrastructure requirements
- Number of email accounts needed
- Google Workspace plan selection
- Existing email transfer information
Communications:
- Support tickets and correspondence
- Form submissions
- WhatsApp messages
- Email communications
- Feedback and survey responses
2.2 Information Collected Automatically
Usage Data:
- IP address and geolocation data
- Browser type and version
- Device information
- Pages visited and time spent
- Referral source
- Click patterns and navigation paths
Cookies and Tracking Technologies:
- Session cookies
- Analytics cookies (Google Analytics)
- Marketing cookies
- Performance cookies
See our Cookie Policy for detailed information.
2.3 Information from Third Parties
Google Workspace:
- As an authorized Google Workspace reseller, we may receive limited account status and usage information to provide support and maintain service quality
- We do NOT access your email content or user files unless you explicitly grant us temporary access for technical support
Payment Processors:
- Transaction confirmation and payment status from Stripe, PayPal, or other payment gateways
- We receive only transaction IDs and success/failure status – NOT full card details
3. HOW WE USE YOUR INFORMATION
We use your personal data for the following lawful purposes:
3.1 Service Delivery (Contract Performance)
- Provisioning Google Workspace accounts
- Domain verification and DNS configuration
- Setting up DKIM, DMARC, SPF records
- Cold email infrastructure setup
- Technical support and troubleshooting
- Account management and billing
3.2 Legal Compliance
- Tax reporting and invoicing
- Fraud prevention and security
- Responding to legal requests
- Enforcing our Terms of Service
- Preventing abuse and policy violations
3.3 Legitimate Business Interests
- Improving our services
- Customer support and communication
- Marketing our services (with your consent where required)
- Analytics and performance monitoring
- Security and infrastructure protection
3.4 With Your Consent
- Sending promotional emails (you can opt-out anytime)
- Using testimonials and case studies
- Third-party integrations you authorize
4. LEGAL BASIS FOR PROCESSING (GDPR)
For users in the EU/EEA/UK, we process your data under:
- Contract Performance: Necessary to provide our services
- Legal Obligation: Tax, fraud prevention, legal compliance
- Legitimate Interests: Service improvement, security, analytics
- Consent: Marketing communications, optional features
You have the right to withdraw consent at any time.
5. DATA SHARING AND DISCLOSURE
We do NOT sell your personal data. We share information only in these limited circumstances:
5.1 Service Providers (Data Processors)
Google LLC
- Purpose: Google Workspace service provisioning
- Data shared: Email accounts, domain information, user details
- Location: USA (Google Cloud Platform global infrastructure)
- Safeguards: Google’s Privacy Shield certification, Standard Contractual Clauses
Payment Processors
- Stripe, PayPal, cryptocurrency payment gateways
- Purpose: Processing payments securely
- Data shared: Billing information, transaction amounts
- Location: USA and global
- Safeguards: PCI DSS Level 1 compliance
Analytics Providers
- Google Analytics
- Purpose: Website performance and user behavior analysis
- Data shared: Anonymized usage data, cookies
- Location: USA
- Safeguards: Data Processing Amendment, IP anonymization
Communication Tools
- WhatsApp (Meta Platforms)
- Purpose: Customer support and communication
- Data shared: Phone number, messages
- Location: USA
- Safeguards: End-to-end encryption
Hosting and Infrastructure
- AWS, Cloudflare, or other hosting providers
- Purpose: Website hosting, CDN, security
- Data shared: Server logs, IP addresses
- Location: USA and global data centers
- Safeguards: Data Processing Agreements, encryption
5.2 Legal Requirements
We may disclose information when:
- Required by law or legal process
- Protecting our rights, property, or safety
- Preventing fraud or abuse
- Enforcing our Terms of Service
- Investigating violations
5.3 Business Transfers
In case of merger, acquisition, or sale, your data may be transferred. We will notify you and ensure continued protection.
6. INTERNATIONAL DATA TRANSFERS
Leads Monkey Ltd is based in Pakistan. When you use our services, your data may be transferred to and processed in:
- Pakistan (our primary operations)
- United States (Google, payment processors, hosting)
- European Union (if using EU-based infrastructure)
- Other countries where our service providers operate
For transfers from the EU/EEA to countries without adequacy decisions, we use:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with GDPR-compliant terms
- Binding Corporate Rules (where applicable)
7. DATA RETENTION
We retain your personal data only as long as necessary:
Active Customers:
- For the duration of your subscription
- Plus any applicable warranty/support period
After Account Cancellation:
- 30 days: Grace period for reactivation
- 6 months: Billing records for accounting/tax purposes
- 7 years: Financial records as required by law
Marketing Data:
- Until you unsubscribe or request deletion
Legal Hold:
- Longer if required by legal obligations, disputes, or investigations
You can request earlier deletion subject to our legal retention requirements.
8. DATA SECURITY
We implement industry-standard security measures:
Technical Safeguards:
- TLS/SSL encryption for data in transit
- Encrypted databases for data at rest
- Secure API connections
- Regular security audits and penetration testing
- Multi-factor authentication (MFA) options
Administrative Safeguards:
- Access controls and role-based permissions
- Employee confidentiality agreements
- Security training for staff
- Incident response procedures
Physical Safeguards:
- Secure data centers with restricted access
- Environmental controls and monitoring
- Backup and disaster recovery systems
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. YOUR PRIVACY RIGHTS
Depending on your location, you have the following rights:
9.1 GDPR Rights (EU/EEA/UK Users)
Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure (“Right to be Forgotten”): Delete your data (subject to legal retention)
Right to Restriction: Limit how we use your data
Right to Data Portability: Receive your data in a structured format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: For consent-based processing
Right to Lodge a Complaint: File a complaint with your supervisory authority
9.2 CCPA Rights (California Residents)
Right to Know: What personal information we collect, use, and share
Right to Delete: Request deletion of your personal information
Right to Opt-Out: We do NOT sell personal data, so no opt-out needed
Right to Non-Discrimination: Equal service regardless of privacy rights exercise
9.3 Other Jurisdictions
Similar rights may apply under PIPEDA (Canada), Australian Privacy Act, and other laws.
9.4 How to Exercise Your Rights
Email us at: info@leadsmonky.com
Subject line: “Privacy Rights Request”
Include:
- Your full name and email address
- Description of your request
- Proof of identity (for security)
We will respond within:
- 30 days (GDPR)
- 45 days (CCPA)
- Or as required by applicable law
10. COOKIES AND TRACKING
We use cookies to enhance your experience. See our separate Cookie Policy for details on:
- Types of cookies we use
- How to manage cookie preferences
- Third-party cookies
- Do Not Track signals
11. CHILDREN’S PRIVACY
Our services are NOT intended for individuals under 18 years of age. We do not knowingly collect data from children. If we discover we have collected information from a child, we will delete it immediately.
If you believe a child has provided us with personal data, contact us at info@leadsmonky.com.
12. THIRD-PARTY LINKS
Our website may contain links to third-party websites (Google, payment processors, analytics tools). We are NOT responsible for their privacy practices. Review their privacy policies before providing any information.
13. GOOGLE WORKSPACE RESELLER SPECIFIC DISCLOSURES
Our Role:
- We are an authorized Google Workspace reseller
- We facilitate your purchase and setup of Google Workspace services
- We provide technical support for configuration and setup
Google’s Role:
- Google LLC is the data controller for Google Workspace services
- Your email content, Drive files, and Workspace data are governed by Google’s Privacy Policy
- Review Google’s Privacy Policy at: https://policies.google.com/privacy
Our Access:
- We do NOT routinely access your email content or files
- Admin access may be granted temporarily for support purposes (with your permission)
- We can see account status, billing information, and technical configuration
Data Subject to Google’s Privacy Policy:
- Gmail messages and attachments
- Google Drive files
- Calendar events
- Meet recordings
- Any content created in Google Workspace apps
14. COLD EMAIL INFRASTRUCTURE DISCLOSURES
For customers using our cold email infrastructure services:
Deliverability Monitoring:
- We may monitor email sending patterns and deliverability metrics
- We do NOT read email content
- We review technical metrics (bounce rates, spam scores, IP reputation)
Anti-Abuse:
- We reserve the right to suspend accounts violating anti-spam laws
- We monitor for compliance with CAN-SPAM, CASL, GDPR email marketing rules
- Abusive sending patterns will result in immediate suspension
IP Address Allocation:
- We provide USA-based IP addresses
- Your sending IP may be shared with other customers (shared infrastructure)
- Dedicated IPs available for Enterprise plans
15. DATA PROTECTION OFFICER (DPO)
For GDPR-related inquiries, contact our Data Protection Officer:
Email: info@leadsmonky.com
Subject Line: “ATTN: Data Protection Officer”
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Last Updated” date.
Material changes will be communicated via:
- Email notification to registered users
- Prominent notice on our website
- Dashboard notification (if applicable)
Your continued use of our services after changes constitutes acceptance.
17. CONTACT US
For privacy questions, concerns, or rights requests:
Leads Monkey Ltd
692/D, near 3 No Stop, Neelam Block, Iqbal Town
Lahore, Pakistan
Email: info@leadsmonky.com
Website: https://leadsmonky.com
WhatsApp: Available via website contact form
Response Time: We aim to respond within 3 business days.
18. SUPERVISORY AUTHORITIES
EU/EEA Users: You have the right to lodge a complaint with your local data protection authority.
UK Users: Information Commissioner’s Office (ICO) – https://ico.org.uk
California Users: California Attorney General – https://oag.ca.gov
Pakistan Users: National Database and Registration Authority (NADRA)
By using Leads Monkey services, you acknowledge that you have read and understood this Privacy Policy.
This document was last reviewed and updated on April 1, 2026.