Privacy Notice
We collect the minimum we need to run LaunchLane, never sell your data, host in the UK/EU, and give you straightforward control under UK GDPR.
1. Who we are
LaunchLane Limited (in formation), England & Wales is the data controller for personal data processed about you when you use launchlane.uk, the LaunchLane workspace, or related services (together, the “Service”). For data you create inside your workspace, we act as your processor — see the Data Processing Addendum.
2. What we collect
| Account data | Name, email, password hash, authentication provider IDs (e.g. Google sub). |
| Workspace content | Positioning, messaging, GTM artefacts, files and notes you create. |
| Usage data | Pages visited, features used, device/browser, IP-derived country. |
| Communications | Emails you send us and our replies; in-product support chats. |
| Billing data | If/when billing launches: company name, address, VAT number, last4 of card via our processor. |
We do not knowingly collect special category data. Please don't paste health, biometric, political or similar sensitive data into the workspace.
3. Why we process it (lawful basis)
| Contract (Art. 6(1)(b)) | Creating and running your workspace, authentication, support. |
| Legitimate interests (Art. 6(1)(f)) | Security, fraud prevention, product analytics, service improvement. |
| Consent (Art. 6(1)(a)) | Optional product updates, non-essential cookies, marketing emails. |
| Legal obligation (Art. 6(1)(c)) | Tax, accounting, responding to lawful requests. |
4. AI-assisted features
Some LaunchLane features draft suggestions using third-party AI models (currently Google Gemini via the Lovable AI Gateway). When you trigger one of these features we send the relevant prompt and selected workspace content to the model provider to generate a response. We do not allow the provider to use your content to train their models.
5. How long we keep it
- Workspace content: while your account is active, then deleted within 30 days of closure.
- Backups: rotated and overwritten within 90 days.
- Operational and security logs: 12 months.
- Invoices and tax records: 6 years (UK statutory).
7. International transfers
We host primary data in the UK/EU. Where a subprocessor operates outside the UK, transfers are covered by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, plus a Transfer Impact Assessment.
8. Your rights under UK GDPR
- Access — get a copy of the personal data we hold about you.
- Rectification — correct data that is inaccurate or incomplete.
- Erasure — ask us to delete your account and personal data.
- Restriction — pause processing while a concern is investigated.
- Portability — receive workspace content in a structured, machine-readable form.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — turn off non-essential cookies or marketing at any time.
To exercise any right, email privacy@launchlane.uk. We respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO).
9. Security
Encryption in transit (TLS 1.2+) and at rest (AES-256). Role-based access controls, principle of least privilege, audit logging, and continuous monitoring. Read the Security page for detail.
10. Children
LaunchLane is a B2B tool. It isn't directed at people under 18 and we don't knowingly collect their data.
11. Changes
We'll update this notice as the product changes. Material changes will be communicated by email or in-product banner at least 14 days before they take effect.
Contact
Privacy enquiries: privacy@launchlane.uk.