~/boldthings/privacy

Privacy Policy

Last updated: 28 October 2026

BOLDTHINGS is a digital agency. We build websites, apps and software for businesses, and we keep the personal information we hold to a minimum. This policy covers boldthin.gs and the ways you deal with us.

Who we are

BOLDTHINGS Ltd is a company registered in England and Wales (company number 12624469), registered office Hurlingham Studios, Ranelagh Gardens, London SW6 3PA. We are the controller of the information described here.

Questions or requests: hello@boldthin.gs

Sites and apps we build for clients

If you use a site or app we have built for a client (for example a venue’s booking page or rewards app), that business is responsible for your information and its own privacy policy applies. We handle it on their behalf and on their instructions.

What we collect

Only what we need to deal with you:

  • Details you give us: such as your name, contact details, company and role, and what you write to us.
  • Records of our dealings: enquiries, projects, contracts, invoices, correspondence and feedback. We may record calls for quality, training and record-keeping (legitimate interests), and we tell you at the start of a call if we are.
  • Applicants and affiliates: the details you give us if you apply for a role or join our affiliate programme.
  • Business contacts: name, work email, job title and company of people at businesses, taken from public sources such as company websites and public registers. We link to this policy in our first message to you.
  • Website use: we do not use third-party tracking or advertising scripts. We keep simple, privacy-friendly usage figures, and one preference cookie that remembers light or dark mode.

How we use it

  • To reply to you and provide the services you ask for (contract).
  • To run our business: accounts, security and legal record-keeping (legal obligation).
  • To run our affiliate programme, pay commission and assess applicants (contract, or steps you ask us to take before one).
  • To tell businesses about our work (legitimate interests). Every message says who we are and has an easy opt-out, and we keep a do-not-contact record so you are not approached again.
  • To maintain and improve our services, our quality and the tools we use (legitimate interests).

Where we rely on legitimate interests, they are running and promoting our business and keeping our services safe and good. We balance them against your rights, and you can object at any time.

We use software, including AI tools, to help us do this. People make the decisions that matter to you, and we do not take decisions with legal or similarly significant effects about you by automated means alone.

Who we share it with

We do not sell your information. We build and run our own systems, so the list is short:

  • Trusted service providers that help us run BOLDTHINGS (such as hosting, email, payments, accounting, and transcription and AI tools), under contracts that require them to protect it.
  • Clients, where it is part of the work you asked us to do with them.
  • Professional advisers, and authorities where the law requires it.

International transfers

Some providers are outside the UK. Where information is transferred we rely on UK adequacy regulations or approved safeguards such as the ICO’s International Data Transfer Agreement or Addendum. Email us for a copy.

How long we keep it

Only as long as we need it for the purposes above or the law requires. In practice that is about two years for enquiries that do not lead to work, six years for client and financial records, and twelve months after a role closes for applications. Anonymised information may be kept longer.

Your rights

You can ask us for a copy of your information, to correct or delete it, to restrict or object to how we use it (we always honour an objection to direct marketing), to move it to another provider, and to withdraw consent where we rely on it.

Email hello@boldthin.gs and we will reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), though we would like the chance to put things right first.

Security

Information is encrypted in transit and personal details are protected by appropriate technical and organisational measures. Access is limited to the people and systems that need it.

Changes

We will update this page when our practices change, and change the date at the top.