Privacy Policy

Our role

Limespun is a product of Boldteq Holdings Ltd, a company registered in the United Kingdom (“Boldteq”, “we”, “us”). We decide how personal data is used on this website, so for that data we are the controller.

Inside the app, your studio decides what it records about its clients and team. For that data your studio is the controller and we are its processor: we handle it only to run Limespun for your studio.

Data from this website

limespun.com has no analytics, advertising or tracking code, and it sets no cookies. The Cookie Policy has the detail.

Like any website, our hosting provider records basic request data: IP address, browser type, the page requested and the time. We use it to keep the site running and secure.

When you send the contact form, we receive your name, email address, topic and message. When you join the newsletter, we receive your email address. To stop abuse, each form checks how often it has been sent from your IP address.

Data in the app

Your studio adds data about its clients and its work: bookings, deposits, photos, consent forms, inventory and messages. We process it on your studio's instructions to run the service.

We look at a studio's data only to provide the service, when your studio asks us to (for example, to help with a support question), or when the law requires it.

How we use data

We use personal data for these purposes only:

• Website data: to answer your message and to send the newsletter you asked for. You can ask us to take you off the list at any time.
• App data: to run Limespun for your studio. That includes storing its records, sending the texts and emails it sends, taking card and subscription payments, preparing the AI replies, aftercare and consult summaries your team asks for, and tagging the style of flash images you upload.

Sharing

We don't sell personal data, and we don't share it with advertising networks.

We share it with the providers listed under Sub-processors, so they can do their part of running Limespun, and with authorities when the law requires it.

Storage and security

Your studio's database and files are hosted by our infrastructure providers in the United States (AWS us-west-2, Oregon); the app runs on Railway.

Data is encrypted in transit (HTTPS with HSTS) and at rest. Our Security page describes what we do today and what's still to come.

Sub-processors

These providers process personal data on our behalf to run Limespun. If we add or replace one, we'll update this list.

International transfers

Your studio's data is stored in the United States.

When personal data from the UK or the European Economic Area is transferred to the United States or another country outside those regions, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

Retention

We keep messages sent through this website for as long as we need to answer them and follow up. Newsletter addresses stay on the list until you ask to be removed.

While a studio's account is open, we keep its data. After the account closes, we delete it, except records such as invoices that the law requires us to keep.

Your rights

You can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent you gave, such as for the newsletter. The UK and EU GDPR and the California Consumer Privacy Act (CCPA) make these legal rights.

If you're a client of a studio that uses Limespun, send your request to the studio first. It controls your data, and we'll help it respond.

To make a request, email hello@boldteq.com. We answer within one month, as the law requires.

You can also complain to a data protection authority: the Information Commissioner's Office (ICO) in the UK, or the authority in your EU country.

Children

This website and Limespun accounts are not meant for children under 16, and we don't knowingly collect their data here. If you think a child has sent us personal data, email hello@boldteq.com and we'll delete it.

Changes

When we change this policy, we update the effective date at the top of this page. For changes that affect how we handle your studio's data, we'll email the account owner before they take effect.