Privacy

  1. General

    1. This is the Privacy Policy ("Policy") of Lstn Ltd (company number 10451644) which operates and manages BeyondWords.io ("we", "us" or "our" in this Policy). This Policy is designed to tell you (the user of our Services or visitor to our Site) about our practices regarding the collection, use and disclosure of personal data which may be provided to us via our websites, associated apps and other digital products we provide or collected through other means such as online forms, email, or telephone communication.
    2. We are the controller and are responsible for your personal data.
    3. This Policy applies to personal data provided by our users, whether they are a customer of our Services or otherwise. In this Policy "you" refers to any individual whose personal data we hold or process (other than our staff).
    4. In this Policy references to the "Site" are references to any website, app or other means by which you provide personal data to us or access our Services.
    5. When we refer to "Applicable Data Protection Law" in this Policy, we mean:
      1. to the extent UK GDPR applies to our processing of your personal data, the law of the United Kingdom or a part of the United Kingdom; and
      2. to the extent EU GDPR applies to our processing of your personal data, the law of the European Union or any member state of the European Union to which we are subject, which in either case relates to the protection of personal data. ("EU GDPR" means the General Data Protection Regulation ((EU) 2016/679) and "UK GDPR" has the meaning given in the UK Data Protection Act 2018.)
  2. Personal data we collect

    1. We collect and process the following types of personal data about you. We refer to personal data as it is defined in the Applicable Data Protection Law.
      #Type of Personal DataDescription
      1.Account InformationWe collect personal data you provide when creating an account, including your name and email address, along with other details needed to provide our Services.
      2.Payment InformationWhen you use our Services, our third-party payment processor, Stripe, collects and processes payment-related information. This may include your name, email address, billing address, and partial or full credit/debit card or banking information. For further details on data processing, please consult Stripe's Privacy Policy.
      3.Communication InformationIf you contact us or express interest in our Services, we collect personal data, including your name, email address, message content, and any attachments you may send.
      4.Marketing InformationIf you subscribe to our newsletter, we collect your name and email address. We may also track whether you open our emails to enhance customer experience and improve our Services. You can unsubscribe from emails or contact support at any time to adjust your preferences.
      5.Voice DataWe collect audio recordings only if you choose to use our voice cloning product. This may include personal data and specific data about your voice. You may also provide additional recordings to help verify that your voice matches the one in the provided audio. Voice data is retained only as long as necessary for the Service or until you request deletion.
      6.Technical and Usage InformationWe collect data to optimise and enhance your experience when using our Services. Log Data: Information your browser or device automatically sends, including your Internet Protocol (IP) address, browser type and settings, the date and time of your request, and how you interact with our Services. Usage Data: We collect data on your interaction with our Services, including the content you view or engage with, features you use, actions you take, time zone, country, access dates and times, user agent, version, device type (e.g., computer or mobile), and connection type. Some devices allow you to limit tracking through device settings. Device Information: We collect details about your device, including its name, operating system, device identifiers, and browser type. The specific data collected may depend on your device type and settings. Cookies and Similar Technologies: We use cookies and similar technologies to operate, secure, and improve our Services. These tools allow us to track your interaction with our Services, enhance functionality (such as staying logged in), and provide a customized experience. You can manage cookie preferences in your browser settings. In some cases, we may request consent via a cookie consent banner when you first visit our Site.
    2. We do not intend to collect any sensitive personal data. By sensitive personal data we mean data which falls within certain 'special categories' which are defined in Applicable Data Protection Law (e.g. health data) and which require additional protection and consent measures. Nor do we intend to collect any data about criminal convictions and offences.
    3. Generally we will collect personal data directly, but we may obtain data from third parties from time to time. If we do obtain your personal data from a third party your privacy rights under Applicable Data Protection Law are not affected and you are still able to exercise your rights.
    4. You do not have to supply any personal data to us but our Services may not be operable without providing data to us.
    5. Where we use your consent as the lawful basis of processing your personal data, you may revoke that consent at any time. (You may request that we restrict our processing in other circumstances – see Section 9 ('Your privacy rights') below).
  3. Cookies

    1. A cookie is a piece of data stored locally on your computer and contains information about your activities on the Internet.
    2. On our Site, we use cookies to track user progress, allowing us to make improvements based on usage data. We also use cookies if you log in to one of our online services to enable you to remain logged in to that service. A cookie helps you get the best out of the Site and helps us to provide you with a more customised service.
    3. Once you close your browser, our access to the cookie terminates. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. To change your browse settings you should go to your advanced preferences.
    4. In some cases, we are required to obtain your consent to use cookies. We will obtain this consent with a toolbar which appears when you first visit the Site.
    5. If you choose not to accept the cookies, this will not affect your access to the majority of information available on our Site. However, you will not be able to make full use of our online services.
  4. How we process your personal data and lawful basis of processing

    1. Personal data we collect and use will be processed on the basis that:
      1. you have consented to the processing for the specific purposes described in this Policy ("Consent");
      2. the processing is necessary for the purposes of our legitimate interests, which are not overridden by your interests or fundamental rights and freedoms ("Legitimate Interest"); or
      3. the processing is necessary for compliance with a legal obligation to which we are subject ("Legal Obligation").
    2. The following table maps the lawful bases we rely on for the processing of each type of personal data. We also explain how we process those types of personal data and for what purpose.
      #Type of Personal DataHow we process the personal dataPurposeLawful basis for processing
      1.Account InformationTo create and manage your account and provide access to our Services.To facilitate account creation and access to Services.Legitimate Interest, Consent
      2.Payment InformationProcessed by our third-party provider (Stripe) to complete transactions.To process payments securely and efficiently.Legitimate Interest, Legal Obligation
      3.Communication InformationTo respond to inquiries, provide support, and send updates related to your account or our Services.To manage customer communications and ensure effective service.Legitimate Interest
      4.Marketing InformationTo send promotional updates related to your account or our Services.To market our services.Consent
      5.Voice DataCollected only if you use our voice cloning product, used solely for providing and verifying voice services.To enable and support our voice cloning Service.Consent
      6.Technical and Usage InformationCollected through cookies and similar technologies to improve service functionality and user experience.To analyze usage trends, troubleshoot issues, and improve our offerings.Legitimate Interest, Consent (for cookies as required)
    3. Where we rely on "legitimate interests":
      #Type of Personal DataUse / PurposeLegitimate interests
      1.Account InformationTo enable us to perform our contractual obligations under customer agreements.To provide Services to our customers.
      2.Payment InformationTo process payments securely and manage billing and financial transactions.To take payments relating to our Services.
      3.Communication InformationTo communicate with you, provide customer support, and address inquiries or issues you raise.To ensure effective customer support and engagement.
      4.Technical and Usage InformationTo administer and protect our business, conduct troubleshooting, data analysis, system maintenance, and support, and improve Services.To operate, maintain, and improve our Services, enhance user experience, and respond to user inquiries and technical issues.
  5. Data Retention

    1. We will keep your personal data only for as long as necessary for the processing purpose(s) for which it was originally collected, as outlined in this Policy, unless otherwise required by law.
    2. Our current data retention policy is to delete or destroy (to the extent we are able to) the personal data we hold about you in accordance with the following:
      #Category of Personal DataLength of retention
      1.Account InformationUp to 6 years after account closure (to handle potential legal claims or complaints)
      2.Payment Information6–7 years (to comply with HMRC/accounting obligations)
      3.Communication Information2–3 years (or until the account is closed, whichever is later)
      4.Marketing Information2–3 years (or until the account is closed, whichever is later)
      5.Voice DataUntil consent is withdrawn or account is closed
      6.Technical and Usage Information1–2 years (for analytics and improvement purposes)
    3. We review the personal data (and the categories of personal data) we are holding on a regular basis to ensure the data we are holding is still relevant to our business and is accurate. If we discover that certain data we are holding is no longer necessary or accurate, we will take reasonable steps to correct or delete this data as may be required.
    4. If you wish to request that data we hold about you is amended or deleted, please see Section 9 ('Your privacy rights') below, which explains your privacy rights.
  6. Sharing your information

    1. We do not disclose any personal data you provide to any third parties other than as follows:
      1. we may provide Payment Information to our payment processing partner, Stripe, Inc.;
      2. we may host personal data with third party hosting partners;
      3. we will provide certain personal data to third party service providers that assist us in managing, storing, collecting and analysing the provision and use of our Services;
      4. where we use certain third party suppliers including IT technical support providers, website developers, marketing and business development service providers, they may have access to personal data;
      5. where we carry out research to gain an insight into the use of our Services, the results of this research (but not your personal data itself) may be transferred to interested third parties;
      6. if we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crime);
      7. when we need to enforce any terms and conditions or agreements for our Services that may apply;
      8. we may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, but we will take steps with the aim of ensuring that your privacy rights continue to be protected; and
      9. when we need to protect our rights, property and safety, or the rights, property and safety of our users or any other third parties. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
    2. Our payment processing partner and other third parties to whom we provide your personal data will have their own privacy policies and notices which you may wish to consult.
  7. Your privacy rights

    1. Applicable Data Protection Law gives you the following rights in respect of personal data we hold about you. These rights may vary depending on our lawful basis of processing:
      #RightDescription
      1.Your right of accessYou have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here
      2.Your right to rectificationYou have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here
      3.Your right to erasureYou have the right to ask us to delete your personal information. You can read more about this right here
      4.Your right to restriction of processingYou have the right to ask us to limit how we can use your personal information. You can read more about this right here
      5.Your right to object to processingYou have the right to object to the processing of your personal data. You can read more about this right here
      6.Your right to data portabilityYou have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here
      7.Your right to withdraw consentWhen we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here
    2. If you make a request, we must respond to you without undue delay and in any event within one month.
    3. To make a data protection rights request, please contact us at [email protected].
  8. Other websites

    1. Our Site may contain links and references to third-party websites. Please be aware that our Policy does not apply to those websites.
    2. We cannot be responsible for the privacy policies and practices of third-party websites that are not operated by us, even if you access them via the Site. We recommend that you check the privacy policy of each website you visit and contact its owner or operator if you have any concerns or questions.
    3. In addition, if you came to this Site via a third party site, we cannot be responsible for the privacy policies and practices of the owners or operators of that third party site and recommend that you check the policy of that third party site and contact its owner or operator if you have any concerns or questions.
  9. Transferring your information outside Europe and the UK

    1. We will not transfer your personal data outside of the EEA and UK apart from in the following situations:
      1. When you or our customers use our Site from outside the EEA or UK;
      2. Where we use third party service providers to carry out certain functions on our behalf for the purposes of providing our Services to you; and
      3. From time to time your information may be stored in devices which are used by our staff outside of the EEA and UK (but staff will be subject to our cyber-security policies).
    2. If we transfer your personal data outside of the EEA and UK we will ensure appropriate safeguards in relation to those transfers in accordance with Applicable Data Protection Law. If you would like to obtain details of the safeguards we have put in place then please contact us at: [email protected].
  10. Notification of changes to the contents of this policy

    1. We will post details of any changes to this Policy on the Site to help ensure you are always aware of the information we collect, how we use it, and in what circumstances, if any, we share it with other parties.
  11. Contact us

    1. If at any time you would like to contact us with your views about our privacy practices, or with any enquiry or complaint relating to your personal information or how it is handled, you can do so via the following email address: [email protected].
    2. If we are unable to resolve any issues you may have or you would like to make a further complaint, you can contact the ICO by visiting https://www.ico.org.uk/ for further assistance.