Legal
Privacy Policy
Last updated: 3rd November 2026
Who We Are
LBM Technologies Limited, trading as LBMtech (“Us”, “We” or “Our”), operates the https://lbmtech.net website (the “Site”) and provides the services described on it (the “Services”). We are registered in England and Wales under company number 8997898, and Our registered office is at 6c The Strand, Brixham, Devon, TQ5 8EH. We are registered with the Information Commissioner’s Office under registration number ZA321437.
This page explains how We collect, use and disclose personal data when you use the Site or the Services, and the choices you have. Unless otherwise defined here, terms used in this Privacy Policy have the same meanings as in Our Terms & Conditions.
Definitions
- Personal DataData about a living individual who can be identified from that data, or from that data and other information in, or likely to come into, Our possession.
- Usage DataData collected automatically by the infrastructure that delivers the Site, such as the time of a request and the page requested.
- ControllerThe person or organisation that decides the purposes and means of processing Personal Data. We are the controller of the Personal Data described in this policy, except where stated under “Data We Process for Clients”.
- Processor (or Service Provider)A person or organisation that processes Personal Data on behalf of a controller.
- Data SubjectAny living individual who is the subject of Personal Data.
Data We Collect
1. Information you give Us
When you email Us, request a quotation, order Services or receive support, We may collect:
- Your name, job title and company name
- Your email address and telephone number
- Your billing address
- The content of your messages, briefs and the files you send Us
- Records of the Services you have ordered and the payments you have made
2. Usage Data
The content delivery network that serves the Site generates server-side logs, which may include an anonymised IP address, generalised geographic region, browser type, the pages requested, the time and date of the request and performance response times. We use this data only to keep the Site secure, diagnose problems and optimise delivery speed.
Cookies & Tracking
The Site does not use cookies, local storage, tracking pixels or third-party analytics, and it does not load fonts or scripts from advertising or tracking networks. Because We do not track you, the Site does not need to respond to “Do Not Track” browser signals.
Websites and SaaS products that We build and host for Our clients are operated by those clients, who are responsible for their own cookie and privacy notices.
How We Use Data
- To respond to your enquiries and prepare quotations
- To provide, manage and support the Services you order
- To take payment, issue invoices and keep financial records
- To notify you about changes to the Services or to Our terms
- To keep the Site and the Services secure and to detect, prevent and address technical issues
- To comply with Our legal obligations
- To send existing customers information about similar services We offer, unless you have opted out. You can opt out at any time by using the unsubscribe link in any such email or by contacting Us
Legal Basis for Processing Under the UK GDPR
We process your Personal Data on the following legal bases:
- Contract: to prepare a quotation at your request and to perform Our contract with you
- Legal obligation: for example, keeping accounting records
- Legitimate interests: to run and secure Our business, and to tell existing customers about similar services, where those interests are not overridden by your rights
- Consent: where We ask for it; you may withdraw consent at any time
Data We Process for Clients
When We provide the Services, We may process Personal Data on behalf of Our clients. Examples include contact lists imported for email campaigns, data submitted through websites We host and end-user data held in SaaS projects We build. In these cases Our client is the controller and We act as their processor under the data processing terms in Our Terms & Conditions.
If you are a recipient of an email campaign, or a user of a website or product operated by one of Our clients, the client’s own privacy notice applies, and you should contact the client to exercise your rights. Every campaign We send includes a one-click unsubscribe link. If you contact Us directly, We will pass your request to the relevant client and help them respond.
Retention of Data
We keep Personal Data only for as long as necessary for the purposes set out in this policy. Data needed to comply with Our legal obligations (such as accounting and tax records) is kept for the periods required by UK law. Data needed to resolve disputes or enforce Our agreements is kept for as long as reasonably necessary.
Usage Data is generally kept for a shorter period, unless it is needed to strengthen security or We are legally required to keep it for longer. Data We process for clients is deleted or returned at the end of the Services, as set out in Our Terms & Conditions.
Service Providers & Infrastructure
We use third-party providers to host, secure and operate Our infrastructure. They process Personal Data only as needed to provide their services to Us, under contractual obligations of confidentiality and data protection.
- BunnyWay d.o.o. (trading as bunny.net)Provides the content delivery network that serves this Site. For SaaS projects, bunny.net also provides CDN delivery, a Web Application Firewall and Edge Scripting environments that run application logic. Please see bunny.net’s Privacy & Data Policy for more information.
- NestavizEmail templates and campaigns are built and managed in Nestaviz, which is operated under licence by LBM Technologies Limited. The infrastructure providers used by Nestaviz are listed in the Nestaviz Privacy Policy.
- ChiselStrike, Inc. (trading as Turso)Where a SaaS project uses Turso, the project’s database is hosted by Turso. Please see Turso’s Privacy Policy for more information.
- Website hostingClient websites and mailboxes We host are stored on infrastructure provided by Our hosting provider, under contractual confidentiality and data protection obligations. Details are available on request.
- Stripe Payments UK LtdProcesses card and digital wallet payments. See “Payments” below.
International Transfers
We are based in the United Kingdom. Some of Our service providers may process Personal Data outside the UK. Where this happens, We make sure the transfer is protected, for example because the destination is covered by UK adequacy regulations or because the transfer is made under an approved mechanism such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
Payments & Transaction Processing
We do not store, view or collect your payment card details. Card and digital wallet payments are handled directly by Our payment processor, Stripe Payments UK Ltd, whose use of your information is governed by Stripe’s own privacy terms. Stripe adheres to the PCI-DSS standards managed by the PCI Security Standards Council.
If you pay by direct bank transfer, We receive the payer details your bank provides with the payment and keep them as part of Our financial records.
Disclosure of Data
We do not sell your Personal Data. We may disclose it where required by law or in response to valid requests by public authorities (for example, a court or government agency), or in the good-faith belief that disclosure is necessary to:
- Comply with a legal obligation
- Protect and defend Our rights or property
- Prevent or investigate possible wrongdoing in connection with the Services
- Protect the personal safety of users of the Services or the public
- Protect against legal liability
Security of Data
The security of your data is important to Us. The Site is served only over encrypted HTTPS connections. Within Our organisation, access to Personal Data is restricted to the people who need it to provide and support the Services, and they are bound by obligations of confidentiality. No method of transmission over the internet or of electronic storage is 100% secure, so while We use commercially appropriate means to protect your Personal Data, We cannot guarantee its absolute security.
Your Data Protection Rights
Under the UK GDPR you have the following rights, in certain circumstances:
- The right of accessTo ask for a copy of the Personal Data We hold about you.
- The right of rectificationTo have inaccurate or incomplete information corrected.
- The right to erasureTo ask Us to delete your Personal Data.
- The right to objectTo object to processing based on legitimate interests, and to direct marketing at any time.
- The right of restrictionTo ask Us to restrict the processing of your Personal Data.
- The right to data portabilityTo receive your Personal Data in a structured, commonly used, machine-readable format.
- The right to withdraw consentWhere We rely on your consent, you may withdraw it at any time.
To exercise any of these rights, email us. We may ask you to verify your identity before responding, and We will respond within one month.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by telephone on 0303 123 1113. We would, however, appreciate the chance to deal with your concerns first.
Links to Other Sites
The Site contains links to other sites that are not operated by Us, such as nestaviz.com. If you follow a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit, as We have no control over the content, privacy policies or practices of third-party sites or services.
Children’s Privacy
The Services are not directed at anyone under the age of 18. We do not knowingly collect Personal Data from anyone under 18. If you are a parent or guardian and believe your child has provided Us with Personal Data, please contact Us and We will take steps to remove it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date at the top. Where changes are significant, We will also let existing customers know by email before they take effect.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
- By email: Email us
- By post: LBM Technologies Limited, 6c The Strand, Brixham, Devon, TQ5 8EH