Template — have this reviewed and fill in the bracketed details before launch.

Privacy policy

Last updated: 20 October 2026

This policy explains what personal data LeadToConference (“LTC”, “we”, “us”) collects through this website, why, and the choices you have. It applies to visitors of this site and to people who request a demo.

1. Who we are

The data controller is [Company legal name], organization number [Org. number], [Registered address], trading as LeadToConference (LTC).

For anything about this policy or your data, contact us at [privacy contact email].

2. What we collect through the demo form

When you request a demo we receive what you enter in the form:

• your name and work email address
• your phone number, if you give one
• your venue’s name and type, and its approximate inquiry volume
• if you used the interactive demo on the page, a summary of the values you entered there

Along with the form we automatically record:

• campaign parameters from the link you arrived through (UTM source, medium, campaign, content and term) and, if you came from a Meta ad, the Meta click ID (fbclid)
• the page you submitted the form from and the page that referred you
• your approximate location (country and city), which our hosting provider derives from your IP address. We do not store the IP address itself [unless IP storage is enabled — update if so]
• your browser’s user-agent string and whether you accepted ad-measurement cookies

We use this to answer your request, arrange and hold the demo call, follow up on a possible business relationship, see which campaigns bring in demo requests, and keep the form free of spam and abuse.

The form is meant for business contacts at hotels, conference centers and event venues. Please don’t include sensitive personal data in the form.

3. Cookies and the Meta Pixel

The site works without any advertising cookies. We only load the Meta Pixel (a script from Meta Platforms that measures how our ads perform) after you accept ad-measurement cookies in the cookie banner. If you decline or ignore the banner, the Pixel is not loaded and no Meta cookies are set.

Withdrawing consent: use the “Cookie settings” link in the footer of our website at any time and choose to decline, or use the button below. Withdrawing doesn’t affect measurement that happened before. You can also clear cookies and site data in your browser.

4. Meta Conversions API

If you have accepted ad-measurement cookies and submit the demo form, our server also reports a “Lead” event to Meta through the Meta Conversions API. It contains your email address, phone number and first and last name in hashed form (SHA-256, a one-way code), plus your IP address, browser user agent and the Meta cookie IDs above. Meta uses it to match the request to an ad interaction and to measure and improve our campaigns. Hashing is pseudonymization, not anonymization.

If you haven’t given consent, nothing is sent to Meta.

[Review: for the Pixel and Conversions API, Meta Platforms Ireland Ltd. may act as a joint controller with us for the collection and transmission of the data under Meta’s Controller Addendum; describe that arrangement here.]

5. Legal bases (GDPR)

• Legitimate interest (Art. 6(1)(f)): answering business demo requests, following up with you about our service, and protecting the form against spam and abuse. Our interest is in responding to professionals who contact us; you can object at any time.
• Consent (Art. 6(1)(a)): ad-measurement cookies, the Meta Pixel and the Meta Conversions API. Consent for cookies is also required by the Swedish Electronic Communications Act (LEK). You can withdraw consent at any time.
• Contract (Art. 6(1)(b)): if you become a customer, the data we need to deliver the service.

We don’t use your data for automated decisions that have legal or similarly significant effects on you.

6. Who we share it with

We don’t sell your personal data. We share it only with providers who help us run the site and handle leads:

• Cloudflare, Inc.: hosting, content delivery, security, form processing and lead storage.
• Meta Platforms Ireland Ltd.: ad measurement, only if you consent (see sections 3 and 4).
• [CRM, e.g. GoHighLevel or HubSpot]: managing leads and replies.
• Resend, Inc.: email notifications to our team about new demo requests [remove if not used].
• Slack Technologies, LLC: team chat notifications about new demo requests [remove if not used].
• [Automation service receiving the lead webhook, e.g. Zapier or Make, if used]

Processors only handle data on our instructions under a data processing agreement. We may also disclose data where the law requires it.

7. How long we keep it

• Demo requests and related correspondence: 24 months after our last contact with you, then deleted or anonymized. If you become a customer, we keep what the contract and accounting rules require.
• Your cookie choice: stored in your browser until you change it or clear site data.
• Meta cookies: up to 90 days, renewed on later visits while consent is in place.
• Technical logs at our hosting provider: [retention period].

8. International transfers

Some providers, including Cloudflare and Meta, may process data outside the EU/EEA, for example in the United States. Where that happens we rely on the European Commission’s Standard Contractual Clauses (SCCs), together with additional safeguards where needed, [and/or the EU–US Data Privacy Framework where the recipient is certified]. Contact us for a copy of the relevant safeguards.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy
• rectification of inaccurate data
• erasure of your data
• object to processing based on legitimate interest, and to stop any direct marketing at any time
• restriction of processing in certain cases
• data portability for data you gave us, where processing is based on consent or contract
• withdraw consent at any time, without affecting earlier processing

To use any of these rights, email [privacy contact email]. We reply within one month.

You can also lodge a complaint with the Swedish Authority for Privacy Protection, IMY (Integritetsskyddsmyndigheten), at imy.se, or with the data protection authority where you live or work.

10. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version; for significant changes we’ll make it clear on the site.