Effective Date: October 15, 2025
At Lead Piranha, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and safeguard your data when you use our website and services.
We collect information you voluntarily provide when using our services:
When you visit our website, we automatically collect certain information:
We may receive information from:
We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):
| Processing Activity | Legal Basis | GDPR Article |
|---|---|---|
| Providing our matching services | Performance of contract | Article 6(1)(b) |
| Marketing communications (with consent) | Consent | Article 6(1)(a) |
| Fraud prevention and security | Legitimate interests | Article 6(1)(f) |
| Legal compliance and record-keeping | Legal obligation | Article 6(1)(c) |
| Improving services and analytics | Legitimate interests | Article 6(1)(f) |
Legitimate Interests: Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. Our legitimate interests include operating our business efficiently, preventing fraud, improving our services, and conducting marketing activities.
We use your information for the following purposes:
GDPR Article 22 Disclosure: We use automated systems to match buyers with sellers based on service requirements, location, and other criteria. This automated matching is necessary to perform our contract with you.
You have the right to:
To exercise these rights or request manual review of matches, contact us at privacy@leadpiranha.com
We do not sell your personal information. We share information only in the following circumstances:
When you request to be connected with sellers, we share your contact information and service requirements with matched businesses. You control when and how this information is shared.
We share information with trusted third-party service providers who help us operate our business:
If Lead Piranha is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
We may disclose information when required by law or to:
Lead Piranha is based in the United States. When we transfer your data from the EEA to the US or other countries, we ensure appropriate safeguards are in place:
You have the right to request a copy of the safeguards we use for international transfers by contacting privacy@leadpiranha.com
Under APP 8, we take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the Australian Privacy Principles. We use Standard Contractual Clauses and conduct due diligence on all international service providers.
Countries where data may be transferred: United States, European Union member states, and any countries where our cloud services operate data centers.
If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you have additional rights:
| Right | Description |
|---|---|
| Right to Know | Request details about the personal information we collect, use, disclose, and sell |
| Right to Delete | Request deletion of your personal information, subject to certain exceptions |
| Right to Correct | Request correction of inaccurate personal information |
| Right to Opt-Out | Opt out of the sale of personal information or targeted advertising |
| Right to Non-Discrimination | We will not discriminate against you for exercising your privacy rights |
| Right to Limit | Limit use of sensitive personal information (where applicable) |
How to Exercise Your Rights: Email us at privacy@leadpiranha.com or use our privacy request form. We will respond within 45 days (or 5 business days for certain states).
Under the GDPR, you have comprehensive data protection rights:
| Right | Article | Description |
|---|---|---|
| Right to Access | Article 15 | Obtain confirmation and a copy of your personal data |
| Right to Rectification | Article 16 | Correct inaccurate or incomplete data |
| Right to Erasure | Article 17 | Request deletion ("right to be forgotten") |
| Right to Restrict Processing | Article 18 | Limit how we use your data in certain circumstances |
| Right to Data Portability | Article 20 | Receive your data in a portable format |
| Right to Object | Article 21 | Object to processing based on legitimate interests or for direct marketing |
| Rights Related to Automated Decision-Making | Article 22 | Not be subject to solely automated decisions with legal/significant effects |
| Right to Withdraw Consent | Article 7(3) | Withdraw consent at any time where processing is based on consent |
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country if you believe we have violated your data protection rights. While we encourage you to contact us first, you can find your local supervisory authority at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
Response Time: We will respond to your request within one month. In complex cases, we may extend this by two additional months and will inform you of the delay.
EU Representative: As we do not have an establishment in the EU but offer services to EU residents, we have appointed an EU representative as required under Article 27 of the GDPR. You can contact our EU representative at:
EU Representative Services
Email: eu-representative@leadpiranha.com
Note: EU representative will be appointed if we process data of significant numbers of EU residents. Until appointed, please direct all EU inquiries to privacy@leadpiranha.com
Under the Privacy Act 1988 and Australian Privacy Principles (APPs), you have the right to:
Access Requests: We will respond within 30 days. If we refuse access, we will provide written reasons and inform you of complaint mechanisms.
Correction Requests: If we refuse to correct your information, we will provide written reasons and you may request that we associate a statement with your information that you believe it is inaccurate.
Complaints Process:
We implement appropriate technical and organizational measures to protect your personal information:
Important: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms:
Notification Will Include:
Under the Privacy Act 1988, we must notify you and the Office of the Australian Information Commissioner (OAIC) if an eligible data breach occurs that is likely to result in serious harm.
Assessment Process:
Notification Contents:
For any data breach, we will:
We retain your personal information only as long as necessary for the purposes described in this Privacy Policy or as required by law.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account information | Duration of account + 2 years | Service provision, legal claims |
| Transaction records | 7 years | Tax, accounting, legal requirements |
| Marketing communications | Until opt-out + 30 days | Legal compliance |
| Support communications | 3 years | Customer service, quality assurance |
| Analytics data | 26 months | Business insights (Google Analytics default) |
| Cookies | See Cookie Policy | Varies by cookie type |
When data is no longer needed, we securely delete or anonymize it. You may request earlier deletion by contacting us, subject to legal obligations to retain certain records.
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
GDPR (Article 8): For children under 16 in the EU (or younger if specified by member state law), parental consent is required for processing. We do not knowingly collect data from children under 16 without verifiable parental consent.
COPPA (US): We comply with the Children's Online Privacy Protection Act and do not knowingly collect information from children under 13.
If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@leadpiranha.com and we will promptly delete such information.
We use cookies and similar tracking technologies to enhance your experience. For detailed information about the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.
Cookie Consent: In accordance with the ePrivacy Directive and GDPR, we obtain your consent before placing non-essential cookies on your device. You can manage your cookie preferences through our cookie banner or browser settings.
Our website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
Some browsers offer a "Do Not Track" (DNT) signal. Currently, there is no industry standard for responding to DNT signals. We do not currently respond to DNT signals but will reassess as standards develop.
California residents may request information about personal information disclosed to third parties for their direct marketing purposes. As we do not share personal information with third parties for their direct marketing purposes, no disclosure is required under this law.
Nevada residents have the right to opt out of the sale of personal information. We do not sell personal information as defined under Nevada law. If you have questions, contact privacy@leadpiranha.com
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
We encourage you to review this Privacy Policy periodically.
Lead Piranha
25 SE 2nd Ave Ste 550 PMB 980
Miami, FL 33131
Phone: +1 (786) 477-4203
General Privacy Inquiries:
Email: privacy@leadpiranha.com
Response Time: 5 business days for most requests
Data Subject Access Requests:
Submit requests through: privacy@leadpiranha.com
Or mail to: 25 SE 2nd Ave Ste 550 PMB 980, Miami, FL 33131
Data Protection Contact (GDPR):
Email: dpo@leadpiranha.com
Note: While we are not required to have a formal Data Protection Officer as a small US company, we have designated a privacy contact for GDPR matters.
EU Representative (GDPR Article 27):
Email: eu-representative@leadpiranha.com
[Physical address will be provided when representative is appointed]
Australian Privacy Matters:
Email: privacy@leadpiranha.com
Subject Line: "Australian Privacy Inquiry"
Security Concerns:
Email: security@leadpiranha.com
For reporting data breaches or security vulnerabilities
This Privacy Policy complies with the General Data Protection Regulation (GDPR). Lead Piranha is the data controller for your personal information. We process data in accordance with GDPR requirements and have implemented appropriate safeguards for international transfers.
This Privacy Policy complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Lead Piranha is bound by the APPs when handling personal information of Australian residents.
This Privacy Policy provides the disclosures required by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). See Section 5.2 for your specific rights as a California resident.
Residents of Colorado, Connecticut, Utah, and Virginia have specific rights under their state privacy laws. See Section 5.2 for details about your rights and how to exercise them.
This Privacy Policy was last updated on October 15, 2025.
© 2025 Lead Piranha. All rights reserved.