Privacy Policy

Who we are

BOLDTHINGS Ltd is a company registered in England and Wales (company number 12624469), registered office Hurlingham Studios, Ranelagh Gardens, London SW6 3PA. We are the controller of the information described here.

Questions or requests: hello@boldthin.gs

Sites and apps we build for clients

We build and run websites, booking platforms, loyalty apps and other software for clients. If you use one of those (for example a venue’s booking page or rewards app), that business is responsible for your information and its own privacy policy applies. We process it on their behalf and only on their instructions.

What we collect

• What you send us: your name, email, phone number, company and role, and whatever you write in a form, email, message or chat.
• Calls and recordings: if you speak to us by phone, or record feedback through one of our review tools, we keep the recording and a transcript.
• Client and project information: contacts, briefs, feedback, contracts, invoices and payment details.
• Affiliate programme: your details, the businesses you introduce, and the bank or payment details we need to pay you.
• Job applications: your CV, your answers and any interview notes or recordings.
• Business contacts we research: names, roles and work contact details of people at businesses we think may benefit from our work, taken from public sources such as company websites and Companies House.
• Website use: our website is cookie-free for analytics. We record anonymous page and interaction events with no personal details. We set one preference cookie to remember whether you chose light or dark mode.

How we use it

• To reply to you, give you a quote and do the work you ask us to do (contract, or steps you asked for before one).
• To run our business: billing, accounts, security, and keeping records the law requires (legal obligation).
• To consider you for roles at BOLDTHINGS, now or in future (legitimate interests).
• To pay affiliates and keep the records tax law requires (contract, legal obligation).
• To contact businesses about our work, at their work address, with a clear way to opt out every time (legitimate interests).
• To improve and develop what we do. We learn from what comes through us: enquiries, emails, calls, feedback, proposals and job applications. We use it, usually with names and contact details removed, to improve our services, how we work and how we sell, including developing and training the software and AI tools we use (legitimate interests).

AI and automated tools

We use AI tools to help us read, sort and reply to messages, transcribe recordings, draft documents and assess information. A person at BOLDTHINGS is responsible for every decision that matters to you, such as whether we work together or whether we offer you a role. We do not make decisions with legal or similarly significant effects about you by automated means alone.

Who we share it with

We do not sell your information. We share it only with:

• Service providers who help us run BOLDTHINGS, under contracts that require them to protect it: hosting and storage (for example Amazon Web Services, Cloudflare, Hetzner and Vercel), email delivery, AI and transcription providers, payments and accounting.
• Clients, where it is part of the work you asked us to do with them.
• Professional advisers, and authorities where the law requires it.

International transfers

Some of our providers are outside the UK, including in the United States. Where we transfer information we use UK-approved safeguards, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.

How long we keep it

• Enquiries that do not lead to work: 2 years from our last contact.
• Clients, contracts and invoices: 6 years after the work ends.
• Affiliates: 6 years after the last payment.
• Job applications: 12 months after the role closes, unless you join us.
• Call and feedback recordings: for the life of the project, then 12 months.
• Business contacts we research: until you ask us to stop, or 2 years without a reply.

Information we have anonymised, so it no longer identifies you, may be kept longer.

Your rights

You can ask us to:

• give you a copy of your information;
• correct or delete it;
• restrict or object to how we use it, including for direct marketing and for improving our services;
• move it to another provider where that applies.

To use any of these, email hello@boldthin.gs. We reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), though we would like the chance to put things right first.

Security

Information is encrypted in transit and personal details are encrypted at rest. Access is limited to the people and systems that need it.

Changes

We will update this page when our practices change, and change the date at the top.