GDPR

Roles

Your studio is the controller for the data it keeps in Limespun about its clients and team. Boldteq Holdings Ltd is its processor.

For data collected on limespun.com, such as contact form messages and newsletter sign-ups, Boldteq is the controller.

Our commitments as processor

For the data your studio keeps in Limespun, we:

• process it only to run Limespun for your studio, on your instructions;
• use only the sub-processors listed on this page, and update the list when it changes;
• help your studio answer requests from its clients to use their rights;
• tell you about a personal data breach that affects your studio within 72 hours of finding it;
• let you export your data, and delete it after your account closes, except records the law requires us to keep.

Data processing agreement

If your studio needs a signed Data Processing Agreement, email hello@boldteq.com.

Lawful basis

Boldteq relies on these lawful bases:

• Contract: to run the service your studio subscribes to.
• Legitimate interests: to keep Limespun secure and to prevent fraud and abuse.
• Consent: to send the newsletter to people who signed up for it.

Where data is stored

Your studio's database and files are hosted by our infrastructure providers in the United States (AWS us-west-2, Oregon); the app runs on Railway.

We don't offer EU data hosting yet. If your studio needs it, tell us: it's on our list.

International transfers

When personal data from the UK or the European Economic Area is transferred to the United States or another country outside those regions, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

Sub-processors

These providers process personal data on our behalf to run Limespun:

Data subject rights

People in the UK and EU have the right to access, correct and delete their personal data, to restrict or object to how it is used, and to receive it in a portable format.

If you're a client of a studio that uses Limespun, send your request to the studio: it controls your data. We'll help the studio respond within the one month the law allows.

For data on this website, email hello@boldteq.com. The Privacy Policy explains what we collect.

Complaints

You can complain to a data protection authority: the Information Commissioner's Office (ICO) in the UK, or the supervisory authority in your EU country. We'd like the chance to put things right first, so please write to us too.