Legal
Last updated: 2 September 2026
The controller for your personal data is LuxVibeWeb Limited, a company registered in England and Wales (company number 16954810), with its registered office at 12 Beech Road, Epsom, KT17 4NH, United Kingdom.
We are registered with the Information Commissioner's Office (ICO) under registration reference ZC211919.
To contact us about your personal data, write to us at privacy@business-launchpad.co.uk or at the registered address above.
The table below lists every category of personal data we hold, where it comes from, and the lawful basis under UK GDPR Article 6 we rely on to process it.
| Data | Source | Why we hold it | Lawful basis |
|---|---|---|---|
| Name and email address | You, at registration or via Google/Apple sign-in | To create and identify your account; to send service emails | Contract, processing is necessary to provide the service you signed up for (Art. 6(1)(b)) |
| Business idea titles, descriptions, industry, and tags | You, when you create or edit an idea | To generate your business plan sections using AI | Contract (Art. 6(1)(b)) |
| Interview questions and your answers | You, during the optional founder interview | To personalise AI-generated plan content | Contract (Art. 6(1)(b)) |
| AI-generated business plan content | Generated by our AI based on your inputs | To provide the core output of the service | Contract (Art. 6(1)(b)) |
| Subscription and billing status | Base44 Payments (Wix), via webhook, when you subscribe | To control access to paid features | Contract (Art. 6(1)(b)) |
| Wix subscription ID | Base44 Payments (Wix), when your purchase is approved | To link your account to your subscription and honour cancellations | Contract (Art. 6(1)(b)) |
| Partner code (if used at signup) | You, at registration | To apply partner-specific access | Contract (Art. 6(1)(b)) |
| Vault notes and idea captures | You, when you save to your Vault | To store your saved ideas and notes | Contract (Art. 6(1)(b)) |
| Feedback content | You, if you submit feedback via the feedback form | To improve the service | Legitimate interests, we have a genuine interest in understanding how the service is used. You are not required to submit feedback. (Art. 6(1)(f)) |
| Email address of a person you invite to view an idea or join the platform | You, when you use the invite or share features | To send that person a one-time notification email | Legitimate interests, enabling collaboration as requested by you. The interest is proportionate: one email is sent, no profile is created for the recipient unless they choose to register. (Art. 6(1)(f)) |
Business Launchpad does not ask for, and does not intentionally collect, any special category data as defined in UK GDPR Article 9. This includes health data, biometric data, ethnic or racial origin, political opinions, religious beliefs, trade union membership, and data concerning sexual orientation.
If you choose to include such information in a free-text field (for example, an idea description), it is processed under the same lawful basis as the field it appears in. We have no way to filter it out automatically. Please avoid including special category data about yourself or others unless it is directly relevant to your business idea.
We share personal data with the following data processors. Each has signed a Data Processing Agreement with us and is contractually required to process data only on our instructions.
| Service | Role | What they see | Where they process |
|---|---|---|---|
| Base44 | Platform hosting, database storage, authentication, and serverless function execution | All personal data stored in the service, account details, ideas, interview answers, subscription records | Data may be processed in the EU or United States. Refer to Base44's Data Processing Agreement and privacy policy. |
| Wix.com Ltd. (Base44 Payments) | Payment processing and subscription billing | Name, email address, billing address and payment card details (card data is held by Wix, not by us). We retain a Wix subscription ID, the plan purchased and its status. | Wix processes data in the United States, Israel and the EU under Standard Contractual Clauses. |
| Resend | Transactional email delivery | Recipient email address and name; email subject and body content, which may include idea titles and subscription details. | Data may be processed in the United States. Refer to Resend's Data Processing Agreement. |
| Google LLC (OAuth) | Optional social login provider | If you choose 'Sign in with Google', Google shares your name, email address, and profile picture with us. | Google processes data in the United States under Standard Contractual Clauses. |
| Apple Inc. (OAuth) | Optional social login provider | If you choose 'Sign in with Apple', Apple shares your name and email address (or a relay address) with us. | Apple processes data in the United States. |
| Google Fonts (Google LLC) | Web font delivery | Your IP address is sent to Google's servers when the page loads Instrument Serif and Inter fonts. No cookies are set by this request. | Google processes data in the United States under Standard Contractual Clauses. |
We do not sell personal data. We do not share it with advertisers or data brokers.
Our internal team (employees and contractors of LuxVibeWeb Limited) can access your data to operate and support the service. Access is limited to what each person needs for their role.
When you create an idea or complete an interview, the title, description, industry, and your interview answers are sent to an AI model via our platform provider, Base44, to generate your business plan sections. This text is used as the prompt for the AI request.
AI-generated content is not reviewed by a human before being shown to you. It reflects patterns in training data, not professional advice. See Section 5 of the Terms of Use for detail on what AI outputs are and are not.
The AI provider does not use your inputs to train future models under the terms of our service agreement with Base44. Please refer to Base44's privacy policy for detail on their AI sub-processors.
The application stores data in your browser using localStorage and sessionStorage. No cookies are set by our application code. The following items are stored:
| Key | Store | What it holds | How long |
|---|---|---|---|
bl_dashboard_filters | localStorage | Your chosen filter state on the dashboard (status, sort order, completion level). | Until you clear your browser data. |
bl_dashboard_view | localStorage | Whether you prefer grid or list view on the dashboard. | Until you clear your browser data. |
bl_nudge_last_shown | localStorage | A timestamp recording when the upgrade prompt was last displayed to you. | Until you clear your browser data. |
bl_ai_chat_<ideaId> | localStorage | Draft conversational interview messages for a specific idea, identified by its ID. This may include your business strategy and plans as typed during the interview. | Until you clear your browser data or log out. Cleared automatically on logout. |
trial_offer_shown | sessionStorage | A flag indicating whether the trial offer modal has been shown in this browser session. | Current browser session only. Deleted when you close the tab. |
beta_banner_dismissed | sessionStorage | A flag indicating whether you have dismissed the Early Access banner in this session. | Current browser session only. Deleted when you close the tab. |
All items above are strictly necessary to provide the features you use. No storage is used for advertising, cross-site tracking, or profiling.
Google Fonts (Instrument Serif and Inter) are loaded from Google's servers. This causes your browser to send your IP address to Google as part of a standard HTTPS request. No Google cookie is set and no tracking pixel is involved. See Google's privacy policy linked in Section 4 above.
Subscription and billing records are retained for seven years to comply with financial record-keeping obligations under UK law, even if you delete your account.
Backup copies held by Base44 may persist for a short period after deletion, in line with their standard backup retention policy.
Our processors (listed in Section 4) may process your data outside the UK. Where this happens, we rely on the UK's International Data Transfer Agreement (IDTA) or adequacy regulations as the transfer mechanism, or on our processor's Standard Contractual Clauses with the ICO's approved addendum.
Under UK GDPR, you have the right to:
To exercise any right, email privacy@business-launchpad.co.uk. We will respond within one month. We may ask you to verify your identity before acting on a request.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
We ask that you contact us first so we have the opportunity to resolve your concern.
Your data is stored on Base44's infrastructure. Access to the database requires authentication via the Base44 SDK. Wix, through Base44 Payments, handles all payment card data, we never see or store card numbers. We use HTTPS for all data in transit.
No system is perfectly secure. If you believe your account has been compromised, contact us immediately at privacy@business-launchpad.co.uk.
A Business Launchpad user entered your email address and asked us to send you a notification or invitation. We did not collect your email address from any other source.
What we hold about you: only the email address the sender provided. We do not hold any other personal data about you and will not contact you again unless you create an account.
To have your email address removed: email us at privacy@business-launchpad.co.uk from the address that received the email. We will delete it promptly without requiring you to involve the person who invited you.
The account holder who invited you can see your email address in their invite log. We cannot remove that record without also fulfilling the account holder's right to accurate records of their own activity, but we will restrict further processing of your address.
We will update this notice when our practices change. Material changes will be notified by email to registered users. The date at the top of this page shows when it was last revised.