Company number 17352385. Registered in England and Wales. Registered office: 9 Caxton House, Broad Street, Cambourne, Cambridge, United Kingdom, CB23 6JN.
View company record ↗1. Who is responsible for your information?
L Hazard Ltd is the controller of personal information used to operate this subscription website, customer accounts and support. Contact security@lhazardltd.com or write to our registered office with “Privacy request” in the subject.
The provider of an underlying service may separately control information used in its own platform. Its privacy information applies to that processing. For business accounts, your organisation may also determine how staff details and service access are managed.
2. Information we use and why
- Accounts and access: your name, email, country, account type, organisation, roles and password hash; verification and reset records; and, if enabled, two-factor authentication information. We use these to create your account, confirm identity and secure access.
- Subscriptions and billing: selected services, plan, seats, renewal choices, order and invoice records, billing details and payment status or provider references. These support the service you request and our accounting obligations.
- Support: enquiries, case messages and relevant order details, so we can investigate and respond. Do not include passwords, API secrets, full card numbers or unnecessary sensitive personal information in a support message.
- Security and operation: IP address, browser/device information, session activity, login attempts and audit events. These help prevent misuse, investigate incidents and keep an accountable record of administrative changes.
We receive information from you, your organisation’s authorised administrators, and selected providers when they report fulfilment or payment events. Required account information is needed to provide access; optional profile information can be omitted.
3. Our reasons for processing
We process information to enter into and perform a customer contract, comply with applicable legal obligations, and pursue legitimate interests in securing the platform, managing business relationships and resolving support requests. We consider the impact on individuals when relying on legitimate interests.
Where a separate optional activity requires consent, we ask for it separately and explain how to withdraw it. Creating an account is not consent to marketing. This release does not contain advertising trackers or a marketing subscription form.
5. How long information is kept
Account and subscription records are kept while needed to operate your account and fulfil outstanding obligations. When an account closes, we assess what can be deleted and what must be retained for accounting, disputes, fraud prevention or another legal requirement. Support and security records are retained only while relevant to the request, investigation or applicable claim period; backup copies follow the applicable backup lifecycle.
Verification and password-reset links expire after 30 minutes and are single-use. Link expiry and sign-out disable access; they do not by themselves delete all associated records. Contact us for a retention explanation for a particular record or to request deletion.
If you choose to use the AI assistant when it is available, your message and a limited recent conversation are sent through our server to OpenAI to answer your request. Do not enter passwords, API keys, payment details or sensitive personal information. The assistant receives no account, order or billing records from this application and cannot change them. We use this information to provide the help you request and to protect the service against misuse.
Chat messages remain in page memory and are not saved to our application database. Clear the conversation or reload the page to remove that local history. We request no stored response history from OpenAI; its separate security and abuse-monitoring retention may still apply. OpenAI may process data outside your country; see its API data controls. Daily usage counters use a rotating, keyed IP identifier to enforce limits and are removed after their short operational retention period; they do not contain chat text.
6. Your rights and complaints
Depending on the circumstances and applicable law, you can request access, correction, deletion, restriction, portability or object to processing, including processing based on legitimate interests. Where we rely on consent, you can withdraw it without affecting earlier lawful processing. We may need proportionate information to verify a request and will explain any lawful reason that prevents us from carrying it out.
Send requests to security@lhazardltd.com. You can also complain to the UK Information Commissioner’s Office or your relevant data protection authority. You do not need to contact us first.
7. Security, children and updates
We use password hashing, server-side sessions, role-based access and encrypted credential storage. Keep your password private, enable two-factor authentication and report suspected account misuse promptly. No online service can guarantee absolute security.
The service is intended for adults and authorised business representatives, not children. We do not use solely automated decision-making that produces legal or similarly significant effects on individuals. This notice is versioned above; material changes will be explained before a new use of information is introduced.