Privacy Requests
Last updated: April 8, 2026
This page explains how to submit a privacy or data subject rights request to LeadSwitchboard under the UK GDPR, EU GDPR, the California Consumer Privacy Act (CCPA/CPRA), and similar data protection laws.
1. What You Can Request
Depending on where you are located and the role we play in processing your personal data, you may have the right to request any of the following:
Access
Request a copy of the personal data we hold about you and information about how we process it.
Correction
Ask us to correct personal data that is inaccurate or incomplete.
Deletion
Ask us to delete personal data where a deletion right applies.
Restriction or objection
Ask us to restrict, or object to, certain processing of your personal data.
Data portability
Ask us to provide certain personal data in a structured, commonly used, machine-readable format.
Withdrawal of consent
Where we rely on consent as the lawful basis for a particular processing activity, you can withdraw that consent at any time.
2. How to Submit a Request
Email support@leadswitchboard.io with the subject line "Privacy Request". Include enough detail for us to understand what you are asking for and how to verify your identity.
Helpful information to include:
- Your full name and email address
- Your company or agency name, if your request relates to a business relationship
- The nature of your request (for example, access or deletion)
- Any account, lead, phone number, or reference details that will help us locate the relevant records
- The country or state you are making the request from, so we can apply the right legal framework
3. Controller and Processor Requests
If we process your personal data on behalf of an agency customer, that agency is usually the controller for the relevant data. In those cases, we may direct your request to the agency or work with them to respond. This is the normal structure under UK GDPR and EU GDPR for processor relationships.
If you are not sure which organization is the controller for your data, send us the request and we will help route it to the right place.
4. Verification and Timing
We may ask for additional information to verify your identity or authority before acting on a request. This protects you and other individuals whose data we process.
We aim to respond within the timeframes required by applicable law — generally within one month for UK GDPR and EU GDPR requests, with the possibility of an extension for complex or high-volume requests. We will tell you if an extension is needed and why.
5. Fees
Privacy requests are generally handled free of charge. We may charge a reasonable fee, or decline to act, where a request is manifestly unfounded, excessive, or repetitive, as permitted by applicable law.
6. Escalation and Regulators
If you are in the UK and believe your concern has not been resolved, you can learn more or make a complaint to the UK Information Commissioner's Office (ICO).
If you are in the EEA, you have the right to lodge a complaint with your local data protection supervisory authority. If you are in California, you have the right to contact the California Privacy Protection Agency or the California Attorney General.
7. Non-Retaliation
We do not discriminate or retaliate against individuals for exercising their privacy rights.