Which Project Management App Is Free? UK Guide
16 March 2026•5 min
Lead generation itself isn’t illegal. What can be illegal (or land you in serious trouble) is how you collect, buy, store and contact people’s details.
In UK construction, “construction lead generation” usually means generating enquiries for services like extensions, groundworks, roofing, M&E, fit-out, civils or specialist trades. Done properly, it’s a legitimate way to keep the pipeline full. Done badly—spam texts, scraped data, unclear consent, misleading ads—it can breach UK GDPR, the Data Protection Act 2018 and PECR (Privacy and Electronic Communications Regulations).
This guide breaks down what’s legal, what’s risky, and how to run compliant construction lead generation using SiteSamurai to track consent, prove your process and convert enquiries into booked work.
What people mean by “lead generation” (and why the confusion exists)
The phrase “lead generation” gets mixed up online because “lead” can also mean the hazardous material. That’s a separate topic.
In marketing terms, a lead is a person or business that might want your services—someone who submits a form, calls after seeing an ad, messages your Facebook page, or is referred by a main contractor.
Generating leads is legal. The legal issues come from:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">Data protection: collecting and storing personal data without a lawful basis</li><li class="ml-4 list-disc list-inside">Electronic marketing rules: emailing/texting/calling people in ways that breach PECR</li><li class="ml-4 list-disc list-inside">Misrepresentation: misleading advertising, fake reviews, bait pricing</li><li class="ml-4 list-disc list-inside">Contracting practices: aggressive sales tactics or unfair contract terms</li></ul>Is construction lead generation illegal in the UK?
No—construction lead generation is not illegal.
But you must comply with key UK rules:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">UK GDPR and the Data Protection Act 2018 (how you collect, use, store and share personal data)</li><li class="ml-4 list-disc list-inside">PECR (rules for marketing calls, texts, emails and cookies)</li><li class="ml-4 list-disc list-inside">CAP Code (Advertising Standards Authority rules for non-broadcast ads)</li><li class="ml-4 list-disc list-inside">Consumer Protection from Unfair Trading Regulations 2008 (misleading actions/omissions)</li></ul>If you’re working B2B (e.g., targeting facilities managers, developers, QS practices), the rules differ slightly, but you still need a lawful basis and fair processing.
The legal basics: what makes lead generation compliant?
1) You need a lawful basis to process personal data
For most contractors, the lawful basis is usually:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">Consent (e.g., “Tick here to receive marketing”) or</li><li class="ml-4 list-disc list-inside">Legitimate interests (e.g., following up an enquiry, managing a quote, relationship management)</li></ul>If someone fills in a “Request a quote” form, you can generally contact them to respond to that request. Marketing beyond that needs careful handling.
Practical example (domestic extension):
A homeowner submits a SiteSamurai web form asking for a loft conversion quote. You can call/email to arrange a survey and send the quote. If you later want to send monthly newsletters, you should capture marketing consent separately.
2) You must be transparent (privacy information)
You should tell people:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">who you are</li><li class="ml-4 list-disc list-inside">what data you collect</li><li class="ml-4 list-disc list-inside">why you’re collecting it</li><li class="ml-4 list-disc list-inside">how long you keep it</li><li class="ml-4 list-disc list-inside">who you share it with (e.g., subcontractors, structural engineer)</li><li class="ml-4 list-disc list-inside">how to opt out/withdraw consent</li></ul>This is normally done via a clear privacy notice linked from your forms and website footer.
3) PECR rules: email, SMS and calls
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">Email/SMS marketing to individuals generally requires consent (with some limited exceptions).</li><li class="ml-4 list-disc list-inside">Calls: you must respect the Telephone Preference Service (TPS) and not use aggressive or misleading tactics.</li><li class="ml-4 list-disc list-inside">Cookies: if you’re using tracking/remarketing, you’ll need a compliant cookie banner.</li></ul>Practical example (reactive maintenance):
You buy a list of “local homeowners” and send a bulk SMS offering gutter replacements. If those people haven’t consented, that’s a high-risk PECR breach.
4) Buying leads is legal—but the source matters
Many construction firms buy leads from marketplaces. That isn’t automatically illegal, but you must ensure:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">the lead was collected fairly</li><li class="ml-4 list-disc list-inside">the individual was told their data would be shared</li><li class="ml-4 list-disc list-inside">there’s evidence of consent (where required)</li><li class="ml-4 list-disc list-inside">you have a data processing agreement where appropriate</li></ul>If a lead seller can’t explain how consent was gathered, you’re taking on risk.
5) Don’t mislead in ads and landing pages
Common pitfalls in construction advertising include:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">“From £X” pricing that’s unrealistic for most jobs</li><li class="ml-4 list-disc list-inside">claiming accreditations you don’t hold (e.g., CHAS, Constructionline, NICEIC)</li><li class="ml-4 list-disc list-inside">using “before/after” photos that aren’t your work</li><li class="ml-4 list-disc list-inside">fake urgency (“Only 2 slots left today”) when it’s not true</li></ul>What’s illegal (or likely to trigger complaints) in construction lead generation?
Here are the behaviours that most often cause trouble:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">Scraping emails/phone numbers from directories and spamming them</li><li class="ml-4 list-disc list-inside">Cold texting without consent</li><li class="ml-4 list-disc list-inside">Calling TPS-registered numbers without a valid exemption</li><li class="ml-4 list-disc list-inside">Buying “consented” leads where consent is vague, bundled or unprovable</li><li class="ml-4 list-disc list-inside">Keeping leads forever with no retention policy</li><li class="ml-4 list-disc list-inside">Sharing lead details with subcontractors without telling the customer</li><li class="ml-4 list-disc list-inside">No opt-out on marketing messages</li></ul>How SiteSamurai supports compliant construction lead generation
Compliance isn’t just “having a privacy policy”. On a busy site, you need a process your team can actually follow.
SiteSamurai helps by making lead handling structured and auditable:
Centralised lead capture
Instead of enquiries scattered across WhatsApp, personal inboxes and scribbled notebooks, SiteSamurai keeps:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">enquiry source (Google Ads, referral, lead supplier)</li><li class="ml-4 list-disc list-inside">date/time received</li><li class="ml-4 list-disc list-inside">contact details</li><li class="ml-4 list-disc list-inside">job type and location</li><li class="ml-4 list-disc list-inside">notes from calls and site visits</li></ul>That matters if you ever need to demonstrate how you obtained and used someone’s data.
Clear stages from lead to job
You can move a contact through stages such as:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">New enquiry</li><li class="ml-4 list-disc list-inside">Qualified</li><li class="ml-4 list-disc list-inside">Survey booked</li><li class="ml-4 list-disc list-inside">Quote sent</li><li class="ml-4 list-disc list-inside">Follow-up due</li><li class="ml-4 list-disc list-inside">Won / Lost</li></ul>This reduces the temptation to “blast” marketing messages because you’ve lost track of who asked for what.
Consent and preference tracking (practical, not theoretical)
When you capture a lead via a form or manually log a call, record:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">what they enquired about</li><li class="ml-4 list-disc list-inside">whether they asked for a call-back</li><li class="ml-4 list-disc list-inside">whether they opted into marketing</li></ul>If someone later says, “Stop contacting me,” you can mark them as opted out and avoid accidental follow-ups.
Retention and accountability
Construction businesses often keep old leads “just in case”. With SiteSamurai, you can set internal rules—e.g., archive or delete unconverted domestic leads after a defined period unless there’s a reason to retain them (like an ongoing dispute or warranty).
Real site example: turning enquiries into booked work without spam
A mid-sized refurb and fit-out contractor in the Midlands was generating leads through Google and a local commercial agent. The problem wasn’t volume—it was response speed and traceability.
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">Enquiries came in by email, then got forwarded to a PM, then lost.</li><li class="ml-4 list-disc list-inside">Follow-ups were ad hoc.</li><li class="ml-4 list-disc list-inside">Some prospects received multiple calls from different people.</li></ul>They switched to capturing every enquiry in SiteSamurai and assigning an owner the same day.
Result:
<ul class="my-4 space-y-2"><li class="ml-4 list-disc list-inside">Faster first response (same-day call back)</li><li class="ml-4 list-disc list-inside">Fewer duplicated contacts (one point of responsibility)</li><li class="ml-4 list-disc list-inside">Better conversion because surveys and quote dates were scheduled and tracked</li><li class="ml-4 list-disc list-inside">Cleaner compliance—every lead had a visible source and contact history</li></ul>No spam. No grey-area lists. Just disciplined pipeline management.
A simple compliance checklist for construction lead generation
Use this as a quick gut-check:
<ol class="my-4 space-y-2"><li class="ml-4 list-decimal list-inside">Can you explain where the lead came from?</li><li class="ml-4 list-decimal list-inside">Do you have a privacy notice linked on your forms/website?</li><li class="ml-4 list-decimal list-inside">Are marketing opt-ins separate and unbundled?</li><li class="ml-4 list-decimal list-inside">Do you respect opt-outs immediately?</li><li class="ml-4 list-decimal list-inside">Do you avoid cold SMS/email without consent?</li><li class="ml-4 list-decimal list-inside">Do you store leads securely and only as long as needed?</li><li class="ml-4 list-decimal list-inside">Can you evidence consent if challenged (especially for bought leads)?</li></ol>If any answer is “no”, tighten the process before scaling spend.
Final word: legal lead generation is about process
Construction lead generation isn’t illegal. The risk sits in sloppy data handling and over-aggressive outreach.
If you generate enquiries through your website, referrals, compliant ads and reputable partners—and then manage them properly—you’re on solid ground.
SiteSamurai helps you do the unglamorous but essential part: capturing leads cleanly, tracking consent and communications, and moving each enquiry through a defined pipeline until it becomes a job on site.
Note: This article is general guidance, not legal advice. If you’re unsure about your specific setup (especially purchased lead lists or large-scale email/SMS campaigns), speak to a UK data protection professional.