LexScaleUp's Privacy Policy
Introduction
Welcome to LexScaleUp's privacy policy. This document explains our commitments to protecting your personal data and your privacy rights.
Important information
Purpose of this policy
This policy aims to clarify how The Business Plan Shop Ltd collects, uses, and protects your personal information when you visit our site, contact us, or engage with our services.
This policy should be read alongside any other privacy or fair processing notices we may issue on specific occasions when collecting or processing personal data to ensure you understand how and why we use your information.
This privacy policy supplements other notices and privacy policies and is not intended to override them.
This website is not intended for children and we do not knowingly collect data relating to children.
Controller
The Business Plan Shop Ltd is responsible for your personal information. In this policy, "we", "us", and "our" refer to The Business Plan Shop Ltd, and we act as the data controller for the personal data we process.
Contact details
If you have any questions about this document, including any requests to exercise your legal rights, please contact our data privacy manager using this email address [email protected].
Third-party links
Our website may contain links to external websites, plugins, and applications. By clicking on these links or activating these features, you may allow third parties to gather or share your data.
We have no control over these third-party sites and are not accountable for their privacy practices. We recommend reviewing the privacy policy of any website you visit once you leave our site.
Review
We regularly review our privacy policy. The most recent update was made on 10 November 2024.
It is essential that the personal data we hold about you remains accurate and up to date. Please notify us if any of your personal details change during your time with us.
Data we collect about you
Categories of personal data
We may collect, use, store and transfer the following categories of personal information:
- Contact data: including your email address, telephone number, and address.
- Identity data: such as your first name, last name, username, or other identifiers.
- Marketing and communications data: your preferences for receiving marketing from us and third parties.
- Profile Data: including your preferences regarding our services, support tickets, logs, and survey responses.
- Technical data: such as your IP address, browser type, and other technological information related to your usage of our website or services.
- Transaction data: such as the details of your orders and payments to us.
- Usage data: details of how you use our website and services.
Aggregated data
We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity.
For example, we may aggregate your Usage Data to calculate the percentage of visitors accessing a specific page.
However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
Special categories of personal data
We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
If you do not provide personal data
In situations where we are required by law or under the terms of a contract with you to collect personal data, and you fail to provide it when asked, we may be unable to fulfil the contract we have or are attempting to enter into with you (such as delivering goods or services).
In such cases, we may need to cancel the product or service you have with us, and we will inform you if this is necessary at the time.
How we collect personal data
We collect data and may receive data about you from different methods:
- Direct interactions: you may give us your Identity, Contact, Profile, Marketing and Communications Data by filling in forms or by corresponding with us by email, phone or other means of communication.
- Automated interactions: as you interact with our website, we will automatically collect Technical Data, Profile, and Usage Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.
- Third parties or publicly available sources: we can receive personal data about you from various third parties and public sources, some of which are based outside of the UK, as set out below:
- Technical Data from the following parties:
- analytics providers;
- advertising networks ; and
- search information providers.
- Contact, and Transaction Data from providers of technical, payment and delivery services.
- Identity and Contact Data from social media and other publicly available sources.
- Technical Data from the following parties:
How we use personal data
Lawful bases for processing
We will only use your personal data when the law allows us to, including:
- To perform a contact we have or are about to enter into with you.
- To serve our legitimate interests (or those of a third party), provided that your interests and fundamental rights do not take precedence over these interests.
- To comply with our legal obligations.
In most cases, we do not use consent as the legal basis for processing your personal data. However, we will seek your consent before sending direct marketing communications from third parties via email or text message. You can withdraw your consent for marketing at any time by reaching out to us.
Below, we have provided a table detailing the various ways we intend to use your personal data and the legal bases we rely on to do so. Where relevant, we have also identified our legitimate interests.
Please note that, depending on the specific purpose, we may process your personal data under more than one legal basis. If you require further information on the particular legal ground we are using in cases where multiple grounds are specified in the table, please feel free to contact us.
Purpose | Type of data | Lawful basis |
---|---|---|
To register you as a new customer or user | 1. Identity 2. Contact | Performance of a contract with you |
To provide the services that you request | 1. Identity 2. Contact | Performance of a contract with you |
To process your requests including: 1. Manage payments, fees and charges 2. Collect and recover money owed to us | 1. Identity 2. Contact 3. Transaction 4. Marketing and Communication 5. Technical | 1. Performance of a contract with you 2. Necessary for our legitimate interests (debt recovery) 3. Necessary to comply with our legal, tax, and accounting obligations |
To manage our relationship with you including: 1. Notifying you about changes to our terms or privacy policy 2. Asking you to leave a review or participate in a survey | 1. Identity 2. Contact 3. Profile 4. Marketing and Communications 5. Usage 6. Technical | 1. Performance of a contract with you 2. Necessary to comply with a legal obligation 3. Necessary for our legitimate interests (keep our records up to date, study how customers use our services) |
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, security and fraud prevention, and hosting of data) | 1. Identity 2. Contact 3. Technical 4. Usage 5. Transaction | 1. Necessary for our legitimate interests (running our business, provision of administration and IT services, network security, fraud prevention, and in the context of a business reorganisation) 2. Necessary to comply with a legal obligation |
To deliver relevant content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you and make suggestions and recommendations to you about goods or services that may be of interest to you | 1. Identity 2. Contact 3. Profile 4. Usage 5. Marketing and Communications 6. Technical | Necessary for our legitimate interests (to study how customers use our services, to develop them, to grow our business and to inform our marketing strategy) |
To use data analytics to improve our website, services, marketing, customer relationships and experiences | 1. Technical 2. Usage 3. Profile | Necessary for our legitimate interests (to define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) |
Marketing
We aim to give you control over how your personal data is used, especially in relation to marketing and advertising.
If you have requested information or purchased services from us, you will receive marketing communications from us. Each message will contain a link allowing you to opt out if you no longer wish to receive such communications.
We will obtain your explicit consent before sharing your personal data with any third party for marketing purposes. You can ask us or third parties to stop sending you marketing messages at any time by contacting us, or clicking on an opt out link provided in each message.
Change of purpose
We will only use your personal data for the purposes for which it was originally collected, unless we determine that it is necessary to use it for a different purpose that aligns with the original one. If you'd like an explanation of how the new purpose is compatible with the original, please contact us.
If we need to use your personal data for a purpose that is not related to the original one, we will inform you and explain the legal grounds for doing so.
Please be aware that we may process your personal data without your knowledge or consent, in accordance with the above guidelines, where required or permitted by law.
How we share personal data
Data recipients
We may share your personal data with third parties in certain circumstances, such as:
- Within our organisation, your personal data is shared with authorised staff in the relevant departments responsible for accessing and processing it, specifically (i) the IT Department and (ii) the Customer Service Department, to ensure we can respond effectively to requests made on our website and provide the services you requested.
- With third parties such as:
- Service providers acting as processors who provide system administration or IT services.
- Professional advisers and service providers acting as processors or joint controllers including consultants.
- HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom who require reporting of processing activities in certain circumstances.
- With third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
International transfers
We may transfer your personal data outside the United Kingdom (UK). In such cases, we ensure appropriate safeguards are in place, such as data protection agreements that comply with applicable data protection laws.
Security of your data
We implement robust technical and organizational measures to ensure the security of your personal data. These measures are designed to prevent unauthorized access, disclosure, alteration, or destruction of your personal information.
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
Your data protection rights
As a data subject, you have the following rights concerning your personal data:
- Right to Access: you can request access to the personal data we hold about you.
- Right to Rectification: you can ask us to correct any inaccuracies in your personal data.
- Right to Erasure: you can request that we delete your personal data under certain conditions.
- Right to Restriction: you can request us to restrict the processing of your data in certain cases.
- Right to Data Portability: you can request a copy of your personal data in a structured, commonly used format.
- Right to Object: you can object to the processing of your data for marketing or other legitimate purposes.
If you make a request, we must respond to you without undue delay. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the United Kingdom's supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
8. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
Please contact us if you need more information about our data retention policy.
Changes to this privacy policy
We may update this privacy policy from time to time. Any changes will be posted on this page with the updated date of revision.