Who We Are
LaunchPad Studio Apps ("we", "us", "our") is a UK-based business application development and managed social media service, operated from Abertillery, Wales. We are the data controller for personal data collected through our website and services.
Our website is at launchpadstudio-apps.co.uk. For all data-related enquiries please use our website contact form.
This policy applies to all personal data collected through our website, enquiry forms, client onboarding process, and social media account connections. It is written in compliance with UK GDPR and the Data Protection Act 2018.
What Data We Collect
We collect only the data necessary to provide our services. The following table summarises what we collect, why, and on what legal basis:
| Data Type | Why We Collect It | Legal Basis |
|---|---|---|
| Name, email address | To respond to enquiries and manage your account | Legitimate interest / Contract |
| Business name and type | To configure and deliver your app correctly | Contract |
| Payment information | To process subscription payments (handled by Stripe/PayPal — we do not store card details) | Contract |
| Social media OAuth tokens (TikTok, Instagram, Facebook) | To publish content to your social accounts on your behalf as part of your service package | Consent / Contract |
| Website usage data (cookies, analytics) | To understand how our site is used and improve it | Legitimate interest |
| Content you provide (logos, images, product descriptions) | To build and operate your app and social media content | Contract |
Social Media Account Connections
Where your service package includes managed social media posting (TikTok, Instagram, Facebook), we handle your account connection data as follows:
- We store only the OAuth access token required to authenticate with your social media account
- This token is used exclusively to schedule and publish agreed content on your behalf
- We do not access, read, download, or store any of your social media posts, followers, messages, or personal profile data beyond what is strictly necessary to publish content
- OAuth tokens are stored securely and encrypted at rest
- Tokens are automatically revoked and deleted when you cancel your service or disconnect your account
- You can also revoke access directly at any time through the relevant platform's connected apps settings (TikTok: Settings → Security → Connected Apps; Instagram/Facebook: Settings → Apps and Websites)
We never sell, share, or use your social media account data for any purpose other than publishing the content you have agreed to as part of your service package.
How We Use Your Data
We use your personal data only for the following purposes:
- To respond to your enquiries and onboard you as a client
- To configure, build and deliver your business application
- To process subscription payments and send billing communications
- To publish social media content on your behalf where this is included in your package
- To provide ongoing technical support and maintenance
- To send service-related communications (not marketing, unless you opt in)
- To comply with our legal obligations
We do not use your data for automated decision-making or profiling.
Data Sharing & Third Parties
We do not sell or rent your personal data to any third party. We share data only where strictly necessary to deliver our services:
- Stripe / PayPal — payment processing. Subject to their own privacy policies.
- TikTok, Meta (Instagram/Facebook) — social media platforms where you have connected your account. Subject to their own privacy policies.
- Netlify — website and application hosting. Data processed within their infrastructure.
- Supabase — database and backend services for your application. Data stored securely.
All third-party processors are required to handle your data in accordance with UK GDPR.
Data Retention
We retain your personal data only for as long as necessary:
- Client account data is retained for the duration of your subscription plus 12 months after cancellation for legal and accounting purposes
- Enquiry data (name, email, business details) is retained for up to 24 months if no contract is entered into
- Social media OAuth tokens are deleted immediately upon service cancellation or account disconnection
- Payment records are retained for 7 years in accordance with HMRC requirements
Your Rights
Under UK GDPR you have the following rights regarding your personal data:
- Right of access — to request a copy of the data we hold about you
- Right to rectification — to request correction of inaccurate data
- Right to erasure — to request deletion of your data where there is no lawful reason to retain it
- Right to restrict processing — to request that we limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interest
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us via the form on our website. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
Our website uses a minimal set of cookies:
- Essential cookies — required for the website to function. Cannot be disabled.
- Analytics cookies — used to understand website usage. You may decline these.
We do not use advertising or tracking cookies. We do not share cookie data with third parties for marketing purposes.
Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures including:
- HTTPS encryption across all our websites and applications
- Encrypted storage of all OAuth tokens and authentication credentials
- Access controls limiting data access to authorised personnel only
- Regular review of our security practices
In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware of it.
Changes to This Policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify existing clients by email or via our website with at least 14 days notice before changes take effect.
The date at the top of this page indicates when the policy was last updated.
Contact Us
For any privacy-related questions, data requests, or concerns please contact us:
LaunchPad Studio Apps
Abertillery, Wales, United Kingdom
Website: launchpadstudio-apps.co.uk
Contact: via our website contact form
You also have the right to complain to the Information Commissioner's Office: ico.org.uk