Personal data
What data is processed, what for, and what you decide
Ninja Leads handles data about people who fill in your forms. This page explains exactly which data, where it lives and what control you have — in plain words, not legalese.
Who is who
The leads are yours. We process them on your behalf.
You decide what your prospects' data is used for; we process it following your instructions and nothing else. That is signed in a data processing agreement before anything starts.
Never mixed between clients
Each account has its own store and its own sheet. Your leads never feed anybody else's system.
Never sold or shared
Not to third parties, not to enrich databases, not for any purpose other than measuring and scoring your own leads.
The only shared thing isn't personal
The registry of fraudulent sites and farms: domains, networks and website owners. No personal data there.
Consent decides
What leaves your systems towards Google, and when
For every lead the system records whether that person accepted advertising. That decides what travels — not a setting of ours.
| Situation | What travels to Google Ads |
|---|---|
| They accepted advertising | Their click identifier and, if you enable it, their hashed email and phone (never in the clear) so the conversion can be matched. |
| They did not · conservative option default | Nothing. That lead isn't uploaded. |
| They did not · option you can enable | Only their click identifier: the conversion counts for your campaigns, no personal data travels, and it is declared as denied so it never feeds audiences or personalisation. |
| No consent data available | Whatever you choose: treat it as granted or as denied. |
The defaults are always the most conservative ones. Anything beyond that has to be enabled deliberately, and it is written in your account's configuration.
How long
Retention, anonymisation and deletion
Retention
How many days leads stay in your sheet is set by you. After that, they are deleted.
Anonymisation
Even before deletion, contact details can be anonymised after N months, leaving only what is useful for analysis.
The technical copy is short-lived
What comes through the collector is a transit copy: it purges itself in days, not years.
Right to erasure
If a person exercises their right, every trace of them is deleted from the system, everywhere, at your request.
Delicate cases
When the form may carry health data
In some industries, what people write in "tell us about your case" is information that shouldn't be stored anywhere without need.
For that there is a mode where the message content is not stored: the system only records that there was a message and how long it was, which is what it needs for scoring. The name and the way to contact them are kept — without those there would be no lead.
It is a checkbox in your configuration, and it can be applied retroactively to whatever was already stored.
Where the data lives
Our own server in Spain
No third-party cloud in the processing path.
Your sheet, in your Drive
The sheet is yours and you share it. Revoke our access and we stop seeing it.
Encrypted credentials
Access keys to your platforms are stored encrypted and can be revoked by you at any time.
What is still on you
This doesn't release you from your own obligations
Your cookie notice
The tracking must be declared in your policy and must respect what the person chooses. The tag obeys your consent manager; it doesn't replace it.
Your privacy policy
It must state that form data is processed to measure and assess the quality of the contact, and who does it on your behalf.
Google's terms
For enhanced conversions, Google requires you to accept its customer data terms. You accept those, in your account: nobody can do it for you.
We give you the documentation for all three, including the processing agreement. What we won't do is tell you "it's all covered", because that wouldn't be true.
Next step
Does your legal advisor want to see it first?
That's normal and it's a good sign. Request the proposal and we'll send the processing detail and the agreement so they can review it before anything is signed.