FromLead, operated by Ash + Lake Inc. (“we,” “our,” or “us”), is a marketing and technology services company based in Canada. We build marketing systems, websites, and digital infrastructure for our clients. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information across our websites, client platforms, mobile tools, and related services (collectively, “Services”).
For the purposes of the EU General Data Protection Regulation (GDPR), we are the “Data Controller.” For California residents, we are a “Business” under the California Consumer Privacy Act (CCPA).
“You” and “your” refers to visitors, clients, prospects, partners, vendors, or workforce members interacting with our Services.
We may collect personal information from:
Visitors and users of our websites and client portals.
Customers and subscribers of our marketing and digital services.
Business prospects engaging with our content or ads.
Vendors, contractors, and business partners.
Job applicants and employees.
Identifiers: Name, email, phone, billing/shipping address, login credentials.
Professional Data: Company name, role, industry, and marketing objectives.
Financial Data: Credit card details or payment information (processed securely via PCI-DSS-compliant third-party processors).
Content: Emails, chat transcripts, uploaded documents, or forms submitted through our websites or Services.
Device & Technical Data: Browser type, operating system, IP address, mobile device ID.
Usage Data: Pages visited, time on site, clicks, referral links, and engagement with marketing emails.
Cookies & Tracking Technologies: We use cookies, pixels, and analytics tools (including Google Analytics) to track performance and user behavior.
Geolocation Data: If location services are enabled on your device, we may collect approximate geographic data.
We process personal information for:
Service Delivery: Managing accounts, fulfilling contracts, and providing requested products/services.
Communications: Responding to inquiries, sending confirmations, and providing support.
Marketing: Sending promotional offers, newsletters, and event invitations (with opt-out options).
Analytics: Measuring performance, improving Services, and developing new features.
Legal & Security: Fraud prevention, regulatory compliance, and protection of our rights and systems.
Lawful bases under GDPR include consent, contractual necessity, legal obligation, and legitimate interest.
We do not sell personal information. We share only where necessary:
Vendors & Service Providers: Payment processors, hosting providers, analytics platforms, CRM tools, and marketing systems.
Affiliates: Ash + Lake Inc. subsidiaries and trusted partners assisting in service delivery.
Legal Obligations: Government authorities, regulators, or courts when required by law.
Business Transfers: If Ash + Lake Inc. is acquired, merged, or restructured, personal data may be transferred as part of that transaction.
All vendors processing personal information on our behalf are contractually bound to safeguard it and use it only for agreed purposes.
Depending on your location, you may have rights under GDPR, CCPA, or similar laws, including:
Access & Portability: Request a copy of the data we hold about you.
Correction: Ask us to fix inaccurate or incomplete data.
Deletion: Request erasure of personal data (subject to legal or contractual exceptions).
Restriction & Objection: Limit or object to certain types of processing.
Opt-Out (CCPA/US States): Decline targeted advertising or the “sharing” of personal data.
Withdrawal of Consent: Where consent is the basis, you may withdraw it at any time.
Requests can be made by emailing [email protected]. We may require verification of identity.
We retain personal information only as long as necessary for the purposes outlined in this policy, to comply with legal obligations, resolve disputes, and enforce agreements.
Usage data (analytics, logs) is generally retained for shorter periods, unless required for security, fraud prevention, or improvement of services.
We implement a security program combining administrative, technical, and organizational measures, including:
Encrypted data transmission (SSL/TLS).
Secure storage and restricted access protocols.
Vendor due diligence and contractual safeguards.
Incident response procedures.
However, no system is fully secure, and we cannot guarantee absolute protection.
If you are located outside Canada, your data may be transferred to and processed in Canada or other jurisdictions where our vendors operate. Where required by GDPR, we implement safeguards such as Standard Contractual Clauses.
Transactional communications (invoices, account notices) are mandatory.
Marketing emails (promotions, newsletters) are optional and include opt-out links.
SMS/text communications are opt-in only, with STOP instructions to unsubscribe.
We may update this Privacy Policy from time to time. The “Last Updated” date will always reflect the most recent revision. Continued use of our Services after updates constitutes acceptance.
FromLead (Ash + Lake Inc.)
Attention: Privacy Office
Email: [email protected]
Ontario, Canada
We’ll look at your current marketing and point out the biggest opportunities you can take advantage of right now to grow faster. You’ll leave with clear next steps — no pressure, no strings attached.
