Draft for legal review. This document is not yet in force. Highlighted parts are to be completed.
Privacy notice
Last updated: date.
This notice explains what personal data Linewise collects, why, and your rights. Linewise is provided by Company name Ltd, company number number, address ("we", "us"). We are registered with the Information Commissioner's Office (ICO) under number ICO registration number. Contact us about privacy at privacy@linewiseapp.co.uk.
Two roles
- We are the controller for information about people who use Linewise: account, sign-in, billing and support details.
- We are a processor for the content customers put into Linewise (their workspaces), which may include personal data such as staff names in shift plans. For that, the customer is the controller and our data processing agreement applies. Questions about that data should go to the customer first.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Name, email address, organisation and role | To create your account, sign you in and let your organisation manage access | Contract |
| Sign-in records (time, IP address, device information) | To keep accounts secure and investigate misuse | Legitimate interests (security) |
| Billing details (handled by Paddle, our reseller) | To take payment and keep tax records | Contract; legal obligation |
| Workspaces you save to the cloud, and an audit log of who changed them | To provide the Service | Contract (and, for customer content, the customer's instructions) |
| Error reports while you are signed in (what went wrong in the app, the page and browser type; email addresses and long numbers are removed first) | To find and fix bugs | Legitimate interests |
| Messages you send us | To answer them | Legitimate interests |
We do not sell personal data, use it for advertising, or make automated decisions with legal or similar effects about you.
Where data goes
We use a small number of service providers, listed on our sub-processors page with where they process data. Some are based in, or have staff in, the United States. Where personal data leaves the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
Paddle is our reseller and Merchant of Record: when you buy a plan, Paddle collects your payment details and is a separate controller of them under Paddle's privacy notice. We never see your full card details.
How long we keep it
- Account data: while your account exists, then deleted within 90 days of the account being closed.
- Cloud workspaces: while the subscription is active and for 30 days after it ends (read-only, so it can be exported), then deleted from the live system. Backups are overwritten within 35 days after that.
- Audit logs and sign-in records: 12 months.
- Error reports: 90 days.
- Billing records: 6 years, as required for tax.
Cookies and browser storage
Linewise uses only storage that is strictly necessary: your browser keeps your workspace, your display preferences and, if you sign in, your sign-in session. We do not use advertising or analytics cookies. If that changes we will update this notice and ask for consent where the law requires it.
Your rights
You can ask to access, correct or delete your personal data, to restrict or object to how we use it, or for a copy in a portable form. Contact privacy@linewiseapp.co.uk; we will reply within one month. If you are unhappy with how we handle your data you can complain to the ICO, though we would like the chance to put things right first.
Security
Data is encrypted in transit and at rest. Each customer's data is kept separate by the database itself, sign-in is handled by a specialist provider, and access to production systems is limited and protected by two-factor authentication. Report security issues using the address in our security.txt.
Changes
We will post changes here and, if they are significant, tell account holders by email.