Legal

Privacy Policy

Last updated: May 6, 2026

This Privacy Policy describes how Furnace Leads ("we," "our," or "us") collects, uses, and shares information about you when you use our website (furnaceleads.com), purchase our services, or interact with us in any way. By accessing or using our services, you agree to this policy.

1. Information We Collect

Information You Provide Directly

  • Contact information — name, email address, phone number, company name, and job title when you submit a form, book a consultation, or contact us.
  • Account information — credentials and preferences if you create an account on our platform.
  • Communications — messages, emails, and notes you send to us.

Payment Information

We use Stripe, Inc.to process all payments. When you purchase a service or subscription, your payment card details (card number, expiration date, CVV) are entered directly into Stripe's secure interface and transmitted to Stripe. We do not store, transmit, or have access to your full payment card information. We receive only a tokenized reference and limited summary data (last four digits, card brand, expiration month/year) from Stripe for billing and record-keeping purposes.

Stripe's independent data collection: Stripe may independently collect personal information about you — including device identifiers, IP address, browser type, and behavioral data — via cookies and similar technologies when you interact with payment interfaces on our site. Stripe uses this data to operate and improve its services, including for fraud detection, loss prevention, authentication, and analytics. This collection is governed solely by the Stripe Privacy Policy. Stripe is certified as a PCI DSS Level 1 Service Provider.

By using our services, you acknowledge that we have obtained, on Stripe's behalf, all necessary rights and consents required for Stripe to lawfully collect, use, and process your personal information as described in the Stripe Privacy Policy.

Information Collected Automatically

  • Log data — IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps.
  • Device information — device type, screen resolution, and hardware model.
  • Cookies and similar technologies — session cookies for authentication, analytics cookies to understand site usage, and preference cookies. See Section 7 for details.

Information From Third Parties

  • CRM platforms you authorize us to connect to (e.g., HubSpot, Salesforce, GoHighLevel) — we access only data necessary to deliver leads to your account.
  • Lead data we compile from licensed marketing data sources, used to fulfill our lead generation services.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve our lead generation and marketing services.
  • Process payments and manage billing through Stripe.
  • Send transactional communications — order confirmations, invoices, lead delivery notifications.
  • Respond to your inquiries and provide customer support.
  • Send marketing communications about our services, where you have consented or where we have a legitimate interest (you may opt out at any time).
  • Detect, investigate, and prevent fraudulent transactions and other illegal activity.
  • Comply with our legal obligations.
  • Analyze usage trends and improve site performance and user experience.

3. How We Share Your Information

We do not sell your personal information. We share information only in these circumstances:

  • Stripe — to process payments and comply with financial regulations. Stripe may share data with financial partners as described in their privacy policy.
  • Service providers — hosting, analytics, email delivery, and CRM vendors who process data on our behalf under data processing agreements.
  • Legal requirements — if required by law, court order, or government authority, or to protect the rights, safety, or property of Furnace Leads or others.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to the successor honoring this privacy policy.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under the following legal bases:

  • Contract — processing necessary to provide the services you have purchased.
  • Legitimate interests — fraud prevention, site security, and service improvement.
  • Consent — marketing emails and non-essential cookies, which you may withdraw at any time.
  • Legal obligation — compliance with applicable laws and financial regulations.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

  • Account and customer data — retained for the duration of our business relationship plus 7 years, to satisfy tax and accounting obligations.
  • Payment records — retained as required by Stripe and applicable financial regulations (typically 7 years).
  • Marketing contact data — retained until you opt out or request deletion, or 3 years of inactivity.
  • Log data — typically 90 days.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete information.
  • Delete your personal information (subject to legal retention requirements).
  • Restrict or object to certain processing activities.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time where processing is based on consent.
  • Opt out of sale or sharing of your personal information (California residents — CCPA).

To exercise any of these rights, contact us at hello@furnaceleads.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

7. Cookies

We use the following categories of cookies:

  • Strictly necessary — required for the site to function (e.g., session authentication). These cannot be disabled.
  • Stripe payment cookies — Stripe sets cookies including __stripe_mid and __stripe_sid independently on pages where payment functionality is present. These are strictly necessary for fraud detection and secure payment processing and cannot be disabled without removing payment functionality. They are governed by the Stripe Privacy Policy.
  • Analytics — help us understand how visitors use the site (e.g., page views, traffic sources). You may opt out via your browser settings or a cookie consent tool.
  • Marketing — used to track conversions from ad campaigns. Only set with your consent.

You can manage cookie preferences in your browser settings at any time. Disabling certain cookies may affect site functionality.

8. Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including TLS encryption in transit, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

9. International Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. Where required, we rely on Standard Contractual Clauses approved by the European Commission or other appropriate safeguards to protect your data during international transfers.

10. Children's Privacy

Our services are intended for business professionals and are not directed to individuals under 18. We do not knowingly collect personal information from minors. If we become aware that we have done so, we will delete it promptly.

11. Links to Third-Party Sites

Our site may link to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or a prominent notice on our site. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: