Privacy Notice

This notice explains how Joseph Gillespie (“we”), operating the FloorIQ platform, handles personal data. For the account and workspace data you provide to us, we act as the data controller. Where you upload information about your own customers and employees into your workspace, you are the controller of that data and we process it on your behalf as a processor.

What we collect and why

• Account data (name, email, password hash, company name, role) — to create and secure your account and provide the Service. Legal basis: performance of a contract.
• Workspace content (customers, quotes, purchase orders, invoices, projects, documents, logos) — to provide the Service you asked for. Legal basis: performance of a contract.
• Usage and telemetry (pages viewed, feature usage, email opens and clicks, timestamps) — to operate, support and improve the product. Legal basis: legitimate interests.
• Device and log data (IP address, browser and device identifiers, error logs) — for security, abuse prevention and diagnostics. Legal basis: legitimate interests and legal obligation.
• Support messages — to answer your questions. Legal basis: legitimate interests.
• Marketing emails, only where you have opted in. Legal basis: consent, withdrawable at any time.

Card and billing details are collected and processed by Paddle as Merchant of Record — we never receive or store full payment card data.

Who we share data with

• Service providers / subprocessors — cloud hosting and database, email delivery, SMS delivery, and error monitoring, acting under contract on our instructions.
• Merchant of Record — Paddle, for sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law or to protect our rights.

We do not sell personal data.

International transfers

Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Retention

We keep account and workspace data for as long as your subscription is active. After cancellation we retain it for a limited wind-down period so you can export your records, then delete or anonymise it. Records we must keep for tax, accounting or legal reasons are retained for the period required by law.

Security

We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, row-level tenant isolation so companies cannot see each other’s data, and role-based access controls. No system is perfectly secure, but we work to protect your information and to respond quickly to incidents.

Cookies

We use essential cookies and local browser storage to keep you signed in and to remember workspace preferences. These are required for the app to function. If we add analytics or marketing cookies in future we will ask for consent first and provide controls to manage them. You can clear or block cookies in your browser, though the app may not work correctly without the essential ones.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent. UK/EEA residents may also complain to their supervisory authority. We respond to requests within one month.

Contact

Joseph Gillespie — joe@lbjllc.com. Please include the email address on your account so we can locate your records.