Privacy Policy

Last updated: August 12, 2026

1. Introduction

ABEXON LTD is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share information when you use Leadspotentials.co.uk, its broker CRM, related lead-generation services and the optional Xenalia Insurance broker directory.

2. Company Information

The data controller for these services is:

Company Name: ABEXON LTD
Companies House Number: 14560533
Registered Office: 2A Chancel Close, Nailsea, Bristol, England, BS48 4NE
ICO Registration Number: ZC094086
Data Protection Contact: privacy@abexon.co.uk
UK company record ABEXON LTD is registered in England and Wales as company 14560533.
Verify at Companies House
Data protection registration Registered with the Information Commissioner's Office under reference ZC094086.
View the public ICO record · Download certificate (PDF)

3. Information We Collect

Depending on whether you are a broker, an authorised representative or a prospective insurance customer, we may collect:

  • Broker account information: name, business name, email, telephone number, address, FCA firm or individual reference, products and insurers, and account preferences.
  • Verification information: FCA register information or identification documents supplied for manual verification.
  • Customer enquiry information: contact details, location, insurance product requested, answers supplied in the enquiry form, consent record and campaign source.
  • Transactions and support: order details, payment status and references supplied by our payment processor, support messages and optional screenshots.
  • Technical information: IP address, browser, device, security logs, cookies and usage analytics.

4. How We Use Your Information

ABEXON LTD limits data usage strictly to operations required for commercial execution and compliance. Personal records are processed to:

  • Create, verify and administer broker accounts and campaigns.
  • Process lead-package orders and show campaign balances and enquiries.
  • Generate, qualify and deliver an insurance enquiry to the broker selected for that campaign, where the prospective customer has been informed and has provided the required consent.
  • Respond to support requests, commercial enquiries and data-rights requests.
  • Publish a broker profile in the Xenalia directory only after verification and where the broker requests or accepts that listing.
  • Measure campaign performance, prevent fraud and maintain platform security.
  • Meet legal, accounting, regulatory and record-keeping obligations.

5. Legal Basis for Processing

Under the UK GDPR and Data Protection Act 2018, we rely on the following lawful bases as appropriate:

  • Consent: for optional marketing, directory publication and the collection and transfer of customer enquiry data where consent is required.
  • Contract: to provide broker accounts, purchased lead packages and requested services.
  • Legitimate interests: to operate, secure and improve our services, prevent abuse and respond to business enquiries, balanced against individual rights.
  • Legal obligation: where records or disclosures are required by law.

6. Data Sharing and Third-Party Transfer

Our service supplies qualified insurance enquiries to participating brokers. When a prospective customer submits an enquiry with the required notice and consent, the relevant enquiry information may be shared with the broker assigned to that campaign so that the broker can contact the customer about the requested insurance product. We do not provide that enquiry to unrelated recipients.

We may also share the minimum information necessary with service providers that help us operate the platform, including hosting, email, analytics, security and Stripe for payment processing. A verified broker's business profile may be displayed on Xenalia.co.uk where the broker has requested or accepted the complimentary listing. We may disclose information where required by law or a competent authority.

7. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described above, including delivery evidence, customer consent records, account administration, disputes, fraud prevention and legal, tax or accounting requirements. Retention periods depend on the type of record. Data is deleted or anonymised when it is no longer required.

8. Cookies and Web Analytics

This web infrastructure uses cookie assets, session variables, and cryptographic analytics integrations (including Google Tag Manager frameworks). These tools are deployed to retain secure user sessions, manage cross-language headers, and measure advertisement interaction. You may completely reject cookie assignments by configuring your individual web browser settings, though doing so may prevent access to parts of our platform.

9. Your Statutory Rights

In accordance with United Kingdom data protection statutes, you possess comprehensive legal controls over your datasets. You have the right to:

  • Request full access to all personal data entries currently held by our systems.
  • Request the immediate correction or amendment of inaccurate personal details.
  • Request complete data erasure ("the right to be forgotten") from all production databases.
  • Object to or request restrictions on specific processing activities based on legitimate interests.
  • Request the porting of your personal data records to another electronic service provider.
  • Withdraw your processing consent at any moment without affecting previous operations.

To exercise any of these technical rights, please transmit your formal request directly to our corporate email desk: info@abexon.co.uk.

10. Data Security

We deploy advanced structural, logical, and physical security measures to shield your data from unauthorized access, alteration, disclosure, or destruction. This includes end-to-end SSL/TLS data transfer encryption, network firewalls, and restricted database access controls for all engineering personnel.

11. Third-Party Services

Our services use third parties including Stripe for payment processing, Google for optional sign-in and analytics services used to understand and secure the platform. These providers process information under their own privacy terms and our contractual arrangements. Links to external insurer, FCA, Companies House, ICO or broker websites are governed by those organisations' privacy policies.

12. Contact Details & Governance

For official inquiries, formal structural reviews, or rights processing actions concerning this policy, please coordinate directly with our compliance desk:

ABEXON LTD
2A Chancel Close
Nailsea, Bristol BS48 4NE
United Kingdom

Company Number: 14560533
ICO Registration: ZC094086
Data Protection Contact: privacy@abexon.co.uk
General Enquiries: info@abexon.co.uk