Privacy Policy

This Privacy Policy explains how Leadva ("Leadva", "we", "us") — operated by Anton Vogt, based in Mauritius — collects, uses, and protects personal information through the leadva.io website and our services.

We comply with the Mauritius Data Protection Act 2017 and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who We Are

2. Data We Collect

A. From website visitors

• IP address, browser type, device information (for site security)
• Pages visited and time spent (for analytics, if enabled)

B. From prospective clients (via Cal.com bookings or email)

• Name, email address, phone number
• Clinic name and details you choose to share
• Booking date and time

C. From clients (during service delivery)

• Business information needed to configure your systems
• Patient/lead data that flows through our follow-up systems (processed on your behalf as data processor)

3. How We Use Your Data

• To provide and improve our services
• To respond to your enquiries and schedule meetings
• To send service updates and invoices
• To comply with legal obligations

We never sell your data or share it for advertising purposes.

4. Legal Basis (GDPR)

• Contract: Processing necessary to deliver the services you signed up for.
• Legitimate interest: Securing the website, improving our offering.
• Consent: Where required (e.g. analytics cookies).
• Legal obligation: Tax records, accounting.

5. Subprocessors

We use the following third parties to deliver our services:

• Hetzner Online GmbH (Germany) — server hosting
• Anthropic, PBC (USA) — AI message generation (Claude API)
• n8n GmbH (Germany) — workflow orchestration
• Cal.com, Inc. (USA) — booking scheduling
• Airtable, Inc. (USA) — CRM (per client)
• Namecheap, Inc. (USA) — domain and email hosting

Each subprocessor is bound by its own privacy and security commitments. Where personal data of EU residents is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) where applicable.

6. Data Retention

• Prospective client enquiries: retained for 24 months unless you ask us to delete them sooner.
• Active client data: retained for the duration of the engagement plus 7 years for tax and accounting compliance.
• Patient/lead data processed on behalf of clients: retained per the Data Processing Agreement signed with that client.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to processing or request restriction.
• Receive a copy of your data in a portable format.
• Lodge a complaint with the Mauritian Data Protection Office or your local supervisory authority.

To exercise any of these rights, email anton@leadva.io.

8. Security

We use:

• Encryption in transit (TLS 1.2+) and at rest
• EU-hosted servers (Hetzner, Helsinki & Falkenstein)
• Access controls and least-privilege principles
• Regular backups and recovery procedures

No system can be guaranteed 100% secure, but we take industry-standard measures appropriate to the sensitivity of the data we handle.

9. AI and Automated Processing

We use AI (Anthropic's Claude) to draft personalised messages on behalf of our clients. All templates are reviewed and approved by the client before deployment. AI providers do not use your data to train their models under enterprise terms.

10. Cookies

Our website currently uses only essential cookies necessary for site function. If we add analytics or marketing cookies in the future, we will provide a consent banner before such cookies are placed. See our Cookie Policy for details.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision.

12. Contact

Questions about this policy or your data: