Privacy policy

Whose information we hold

• Website visitors: people who visit launchelo.com.
• Agent applicants and agents.
• Businesses we may contact about a new website (prospects), and the people who work for them.
• Clients, and the staff they give access to their business hub.
• Our clients’ customers and contacts (shop and trade customers, email campaign contacts). For these we act for our client (see “When we act for our clients” below).

What we collect and why

Website visitors. We count visits to pages without cookies and without storing IP addresses. If you agree to analytics cookies, Google Analytics also collects information about how you use the site (pages viewed, approximate location, device and browser). Lawful basis: consent for analytics; legitimate interests for basic security and visit counts.

Agent applicants and agents. Your name, date of birth, contact details, where you live, the areas and languages you want to cover, your experience and anything else you tell us; once approved, your address and, outside the UK, your tax or ID number, plus your activity in the app and the commission earned and paid. We use this to consider your application, run your account, pay you and meet tax and accounting obligations. Lawful basis: taking steps to enter a contract and performing it; legal obligation (tax records); legitimate interests (running and protecting our business).

Prospects. Business details that are publicly available (such as the business name, address, phone number, website, opening hours and online reviews), information from the business’s public website, and the name and contact details of people at the business where these are published or given to us. We use this to prepare a private demo website and to contact the business about our services, in line with the marketing rules of each country (in the UK, for example, we only email limited companies and LLPs). Lawful basis: legitimate interests (offering relevant services to businesses). You can ask us not to contact you again at any time, and we keep a record so that we don’t.

Clients. Contact and billing details, the information, photos and files you give us for your website, your answers to our questions, your website content and settings, messages sent through your website forms, payments and invoices, hub logins (with two-step login if used), and information from accounts you ask us to connect (such as Amazon, accounting, order management, Shopify, Google Analytics, warehouse or email systems). We use this to provide, support and bill our services. Lawful basis: performing our contract with you; legal obligation; legitimate interests.

Everyone. We keep records of messages and calls with us, and security logs (for example, failed login attempts) to protect accounts.

When we act for our clients

When we provide a client’s online shop, trade shop, email campaigns or business hub, we hold information about their customers and contacts (for example, names, email addresses, order details and whether someone has unsubscribed). The client is the controller of that information and decides how it is used; we process it only to provide the service, on the client’s instructions, keep it secure and confidential, and help the client respond to requests. If you are one of our client’s customers, please contact that business first.

Who we share information with

We do not sell personal information. We share it only with the service providers we use to run Launchelo, under contracts that require them to protect it, and where the law requires:

• Cloudflare (hosting, database, file storage, security checks).
• Stripe (payments and payouts).
• GitHub (running scheduled tasks for the app).
• Anthropic (AI used to help write demo websites, website text and product listings).
• Google (Analytics if you agree; business information for finding prospects; page speed checks).
• Our email provider, when automatic emails are switched on.
• Map and address services such as OpenStreetMap-based geocoding.
• Services a client asks us to connect to their own accounts, such as Amazon, their accounting or order management system, Shopify, Google Analytics, their warehouse or their email service.
• Professional advisers, and authorities where we are legally required to.

International transfers

Some of our providers are based in, or store information in, countries outside the UK, including the United States. Where they do, we rely on UK adequacy regulations or on safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

How long we keep information

• Applications we do not take further: deleted within 12 months.
• Agents: while you are an agent, then for 6 years after the end of the tax year of your last commission payment, for tax and accounting records.
• Clients: while you are a client, then for 6 years for legal and accounting purposes. Website files you can download at any time are deleted from our systems after your contract ends and any yearly costs lapse.
• Prospects who do not become clients: reviewed regularly and deleted when no longer needed. If you ask us not to contact you, we keep just enough to make sure we don’t.
• Analytics: Google Analytics data is kept for 14 months.

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it (including objecting to marketing at any time), to have it moved to another provider, and to withdraw consent where we rely on it (for example, with “Change my cookie choice” on our Cookie policy page). Contact us using the contact form. We will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), or to the data protection authority where you live.

Security

We protect information with encryption in transit, hashed passwords, optional two-step login, encrypted storage of the keys clients give us for their connected accounts, access only for people who need it, and regular reviews. No system is completely secure; if a breach affects you, we will tell you and the regulator where the law requires.

Children

Our services are for businesses and for adults. We do not knowingly collect information about children.

Changes

We may update this policy; the date at the top shows the latest version. We will tell agents and clients about significant changes.