Skip to content

Lead Generation Contracts in the UK and Dealing With Breaches

Summary

  • A lead generation contract should define what counts as a valid lead, how the supplier delivers it, payment terms, and what you can do with the data.
  • In the UK, the supplier’s services must comply with the UK GDPR and the Privacy and Electronic Communications Regulations 2003, and the contract should include data protection warranties.
  • If a supplier breaches the agreement, your options depend on the contract wording and the nature of the breach, and serious breaches may let you terminate or claim.
  • This guide explains lead generation contracts and breach remedies for businesses engaging suppliers in the UK.
  • LegalVision’s business lawyers specialise in advising clients on lead generation and commercial contracts.

Tips for Businesses

Before signing, get the supplier’s data protection warranties and a clear definition of a valid lead in writing. Check the liability cap against your likely spend. Agree lead volume, quality and a cure period for breaches. Confirm the supplier holds consent for every contact.

Summarise with:
ChatGPT logo ChatGPT Perplexity logo Perplexity

On this page

A lead generation contract sets out how a supplier finds and delivers business leads to you, and what you can lawfully do with them. In the UK, these arrangements sit across two regimes: the UK GDPR, which governs personal data, and the Privacy and Electronic Communications Regulations 2003, which cover marketing calls, emails and texts. The Information Commissioner’s Office enforces both, and you can comply with one while breaching the other. A well-drafted contract fixes the scope of services, payment, data protection warranties and liability limits. It tells you what you are buying, and where the commercial and regulatory risk sits if the leads are poor or unlawfully sourced.

What Is a Lead Generation Agreement?

A lead generation agreement is a contract between your business and a supplier who provides you with business leads. Those leads are usually potential clients. The supplier passes their details to you so you can offer your services.

Suppliers generate leads in different ways. Your contract should define what counts as a valid lead. For example, does a lead include a name, contact details, permission to be contacted, and a genuine interest in your services? The contract should also set out how the supplier delivers the leads and how you can use them.

Suppliers often trade on their own standard terms, especially when they serve many customers. Review those terms carefully before you sign. You need to know what you are buying, when payment falls due, what happens if something goes wrong, and whether you can end the contract.

Lead generation agreements can raise complex regulatory issues, particularly when the leads contain personal data. Think about lead quality, how the supplier verifies its sources, and whether you have permission to contact each lead. The supplier’s services should comply with the relevant laws. These include data protection rules under the UK GDPR, marketing and advertising rules, and the electronic communications rules under the Privacy and Electronic Communications Regulations 2003.

If you operate in a regulated industry, such as financial services, extra rules may apply when you enter these arrangements.

Key Statistics

  1. The maximum PECR fine rose to £17.5 million or 4% of global annual turnover
  2. The ICO fined HelloFresh £140,000 in January 2024. The penalty followed around 79 million spam emails and 1 million spam texts sent without valid consent.
  3. More than £2.59 million in ICO fines for nuisance calls, texts and emails since April 2023. The ICO continues active enforcement against unlawful direct marketing under PECR.

Sources

  • Data (Use and Access) Act 2025.
  • ICO, “ICO fines HelloFresh £140,000 for spam texts and emails”
  • ICO, Enforcement action, 2023 to date

Understanding Lead Generation Contract Terms

When a supplier trades on its standard terms, it usually drafts them in its own favour. That is common given the risks lead generation services carry. So understand exactly what you are signing up for before you agree.

Terms differ from business to business, but most lead generation contracts cover the following.

  • Scope of services. This confirms what kind of leads the supplier will deliver, how it will deliver them, how many, and to what standard. Agree your specific requirements upfront, including the volume and quality of leads you need. You can set these out in a scope of work document that sits alongside the supplier’s standard terms.
  • Payment terms. These set out how much you pay and when. Some suppliers charge per lead. Others charge monthly or use performance or conversion-based pricing. Make sure the contract matches the payment terms you agreed.
  • Termination clauses. These explain how either side can end the contract and how much notice you must give.
  • Liability exclusion and disclaimer clauses. These often state that the supplier does not guarantee conversions, performance, or a return on your investment. Most suppliers cap their liability at the total amount you paid and exclude claims for many types of loss. Read these closely so you know how much you could recover if the supplier breaches the contract.
  • Data protection clauses. Where leads include personal data, these set out how the supplier complies with data protection and direct marketing rules. The contract should also include warranties confirming the legal basis for collecting, processing, and transferring personal data to you under the UK GDPR.
  • Dispute resolution clauses. These explain how each side raises and resolves a disagreement.

If the supplier does not provide its own contract, a commercial solicitor can help you draft and negotiate a suitable agreement.

Who is Responsible for The Data?

Lead generation almost always involves personal data, so your contract should make the data protection roles clear. In most arrangements, the supplier collects and shares contact details, then you decide how to use them. You will often each be a separate controller, and sometimes the supplier acts as your processor. The label matters because it sets who is responsible for consent, security and responding to complaints.

Where the supplier processes personal data on your behalf, the UK GDPR requires a written data processing agreement. This is often a schedule to the main contract. It should cover the purpose of processing, security measures, sub-processors, and what happens to the data when the contract ends.

Compliance with the UK GDPR does not guarantee compliance with the Privacy and Electronic Communications Regulations 2003. You may have a lawful basis to hold a contact’s details, yet still breach the marketing rules if you contact them without valid consent. Check both before you use any lead.

Front page of publication
Supplier Contracts Checklist

Download this free Supplier Contracts Checklist to ensure your contracts will meet your business’ needs.

Download Now
Continue reading this article below the form
Need legal advice?
Call 0808 196 8584 for urgent assistance.
Otherwise, complete this form, and we will contact you within one business day.

If your supplier breaches the agreement, work through a few key questions before you act.

First, check the contract to see which obligations the supplier has failed to meet. The problem might be late delivery, poor-quality or duplicate leads, or a failure to follow data protection rules. Confirm that a breach has actually occurred. Many supplier-friendly contracts then require you to give written notice and allow the supplier time to fix the problem.

If the breach is serious or continues, you may need to take further action. Your options depend on the contract terms and the nature of the breach. Some breaches let you terminate, depending on how the contract is worded. You may also have common law rights to terminate in certain circumstances. A dispute resolution solicitor can explain your position and help you decide the best course of action, based on the breach and any losses you have suffered.

If the leads turn out to be inaccurate, misleading, or shared with you in breach of data protection law, you may have other claims.

A dispute resolution solicitor can assess your options. You may also be able to raise a complaint with the relevant regulator if the supplier’s practices break the rules. A dispute resolution lawyer can guide you on how to make that complaint.

Key Takeaways

A lead generation contract matters whenever you engage a supplier to deliver leads. Check every term carefully, especially the scope of services, the nature of the leads, payment, data protection, and how far the supplier limits its liability. If the supplier breaches the agreement, a dispute resolution solicitor can help you assess your options, particularly where the breach is serious or involves high-risk issues such as fraudulent leads.

LegalVision provides ongoing legal support for businesses through our fixed-fee legal membership. Our experienced corporate lawyers help businesses manage contracts, employment law, disputes, intellectual property, and more, with unlimited access to specialist lawyers for a fixed monthly fee. To learn more about LegalVision’s legal membership, call 0808 196 8584 or visit our membership page.

Frequently Asked Questions

What is a lead generation contract?

A lead generation contract is an agreement between your business and a supplier who delivers leads in exchange for payment. It should cover the commercial and practical terms, such as how the supplier sources and delivers leads, what information each lead must include, and what you can do with them. It should also include legal terms that protect your business from risk.

Is a business contact’s email address personal data?

Often yes. A work email that identifies an individual, such as firstname.surname@company.com, is personal data under the UK GDPR. A generic address like info@company.com usually is not. Treat identifiable contact details in your leads as personal data.

When can I terminate the contract for a supplier’s breach?

Not every breach lets you terminate. You can usually end the contract only for a serious or fundamental breach, or where the contract gives you an express right. Many contracts require written notice and a cure period first. Check the wording before you act.

Can the ICO fine my business over marketing data?

Yes. The ICO regulates data protection and electronic marketing in the UK. It can investigate complaints and fine businesses for breaches of the UK GDPR or the marketing rules. If a supplier passes you unlawfully sourced leads, your own use of them can expose you.

Register for our free webinars

Director Duties 101: What Every Director Needs to Know

Online
Understand your duties as a company director and how they apply to key decisions when growing a startup. Register for free today
Register Now

Fake Reviews and Real Consequences: Protecting Your Business Reputation

Online
Learn how to manage online reviews and avoid breaching the UK's new fake review laws. Register for our free webinar
Register Now

Legal Essentials for Startups: Contracts, Licences, and Governance

Online
Learn startup legal essentials: contracts, IP, governance, and UK GDPR. Register for our free webinar today.
Register Now

Shadow AI: Your Employees Are Already Using It – Are You Protected?

Online
Learn how to manage unapproved AI use at work and reduce privacy, IP and liability risks when employees use public AI tools. Register for free today.
Register Now
See more webinars >

Aamna Mughal

Trainee Solicitor | View profile

Aamna is a trainee solicitor at LegalVision within the Corporate and Commercial team.

Qualifications:  Bachelor of Laws (Hons), Manchester Metropolitan University.

Read all articles by Aamna

About LegalVision

LegalVision is an innovative commercial law firm that provides businesses with affordable, unlimited and ongoing legal assistance through our membership. We operate in Australia, the United Kingdom and New Zealand.

Learn more

LegalVision is an award-winning business law firm

  • Award

    2025 Future of Legal Services Innovation Finalist - Legal Innovation Awards

  • Award

    2024 Law Company of the Year Finalist - The Lawyer Awards

  • Award

    2024 Law Firm of the Year Finalist - Modern Law Private Client Awards

  • Award

    2023 Economic Innovator of the Year Finalist - The Spectator

  • Award

    2023 Law Company of the Year Finalist - The Lawyer Awards